Hoxhunt

Hoxhunt is a Finnish business-to-business software-as-a-service company focused on the human side of cybersecurity. Its platform is designed to help organizations reduce phishing and social-engineering risk by combining simulated attacks, employee reporting workflows, adaptive education and game-like incentives. Rather than treating security awareness as a one-time compliance course, Hoxhunt presents it as an ongoing behavioral process in which employees repeatedly encounter realistic scenarios, report suspicious messages and receive individualized feedback. The company was founded in Helsinki in 2016 by Mika Aalto, Karri Kurunmäki, Pasi Salo and Pyry Åvist. Its early development took place within Finland's technology and venture-capital ecosystem. Hoxhunt secured seed funding from Icebreaker.vc in 2017, with First Fellow Partners also participating in its financing history. In October 2018, it raised €2.5 million in a round led by Dawn Capital, joined by Icebreaker.vc and First Fellow Partners, associated with investor Risto Siilasmaa. Hoxhunt's core proposition is a security-awareness platform that sends controlled phishing simulations to employees. The simulations can be adapted to a user's organizational context, language, geography, industry and other characteristics, allowing training messages to resemble the kinds of communications employees may encounter in their normal work. When users identify and report a simulated threat, the platform can award points and provide feedback. The system uses employee responses and reporting behavior to tailor subsequent training, with the stated objective of improving recognition and reporting habits rather than merely measuring whether a user clicked a test message. The platform also supports operational reporting of suspicious email. Microsoft documentation identifies Hoxhunt among third-party user-reporting tools that can integrate with Microsoft Defender for Office 365, enabling employees to report questionable messages through the organization's selected workflow. This places Hoxhunt at the intersection of security education, email threat reporting and human-risk management. In May 2022, Hoxhunt announced a $40 million Series B led by Level Equity Management, with participation from Icebreaker.vc. The same year, it expanded its operations into North America. The company operates in the United States through Hoxhunt Inc., a Delaware-incorporated entity with an office in Minneapolis, Minnesota. Reference material reported more than 200 employees as of August 2025, although the precise current headcount is not established here. Hoxhunt has also developed a public research and thought-leadership profile around phishing and security behavior. Its work has addressed trends such as QR-code phishing, sometimes called quishing, and comparisons between artificial-intelligence-generated spear-phishing messages and more conventional phishing methods. In 2023, it appeared on Deloitte's Technology Fast 50 Finland list, with reported growth of 469% over the 2019–2022 period. In 2025, it was included in TIME's list of the world's top education-technology companies. These recognitions reflect the company's positioning as a cybersecurity-awareness and employee-training technology provider rather than as a conventional endpoint-security or email-filtering vendor.

Hoxhunt was established in Helsinki, Finland, in 2016 by Mika Aalto, Karri Kurunmäki, Pasi Salo and Pyry Åvist. The company entered the cybersecurity market with a focus on phishing awareness and the proposition that employee behavior should be treated as a measurable and improvable component of an organization's security posture. Its early financing included seed investment from Icebreaker.vc in 2017, with First Fellow Partners participating in the company's early funding history. In October 2018, Hoxhunt raised €2.5 million in a round led by Dawn Capital. Icebreaker.vc and First Fellow Partners also participated in that financing. The investment supported the development of a SaaS product aimed at making security-awareness training more continuous, contextual and engaging than conventional annual compliance modules. Hoxhunt's platform centers on simulated phishing messages. These messages can be adapted according to factors such as the employee's organization, industry, language and geographic context. Users are encouraged to identify and report suspicious messages, while the platform provides feedback and uses behavioral information to adapt future training. A gamified layer, including points and related progress mechanisms, is intended to increase participation and reinforce the habit of reporting potential threats. The company's product scope extends beyond simulated attacks. Hoxhunt supports workflows for reporting suspicious email and is listed in Microsoft documentation among third-party user-reporting tools that can integrate with Defender for Office 365. This integration connects awareness training with an organization's day-to-day email-security operations. In May 2022, Hoxhunt raised a $40 million Series B led by Level Equity Management, with participation from Icebreaker.vc. During 2022, it also expanded its operations to North America. Its United States presence operates through Hoxhunt Inc., a Delaware-incorporated company with an office in Minneapolis, Minnesota. The expansion marked a step from a Finland-centered technology company toward a broader international enterprise-software business. Hoxhunt has supplemented its commercial product with research and analysis concerning the changing phishing landscape. Its published work has covered QR-code phishing, often referred to as quishing, and has examined how AI-generated spear-phishing compares with traditional phishing approaches. These activities support its broader market identity as a provider of security-awareness technology and a commentator on human-centered cyber threats. The company received external recognition during its growth phase. Deloitte included Hoxhunt in the Technology Fast 50 Finland list in 2023 and reported 469% growth between 2019 and 2022. In 2025, TIME included Hoxhunt in its World's Top EdTech Companies list. Reference material also described the company as having more than 200 employees as of August 2025. Hoxhunt remains an active, privately held cybersecurity SaaS company headquartered in Helsinki, with operations extending into North America and an international enterprise customer focus.

• 2025

  TIME EdTech recognition

  [1]Hoxhunten.wikipedia.org

  TIME included Hoxhunt in its World's Top EdTech Companies list.

• 2023

  Deloitte Technology Fast 50 Finland recognition

  [1]Hoxhunten.wikipedia.org

  Hoxhunt appeared on Deloitte's Technology Fast 50 Finland list, with reported 469% growth from 2019 to 2022.

• 2022

  Series B and North American expansion

  [1]Hoxhunten.wikipedia.org

  Hoxhunt raised a $40 million Series B led by Level Equity Management and expanded operations into North America.

• 2018

  €2.5 million funding round

  [1]Hoxhunten.wikipedia.org

  Dawn Capital led a €2.5 million financing round joined by Icebreaker.vc and First Fellow Partners.

• 2017

  Early seed financing

  [1]Hoxhunten.wikipedia.org

  Hoxhunt secured seed funding from Icebreaker.vc, with First Fellow Partners participating in its early financing history.

• 2016

  Hoxhunt is founded in Helsinki

  [1]Hoxhunten.wikipedia.org

  Mika Aalto, Karri Kurunmäki, Pasi Salo and Pyry Åvist founded Hoxhunt in Helsinki, Finland.

Hoxhunt positions itself as a human-risk management and security-awareness platform that uses realistic, adaptive phishing simulations, automated feedback and gamification to improve employee behavior and strengthen organizational resilience against social engineering.

• Cybersecurity awareness and human-risk management

  Hoxhunt Platform

  Hoxhunt's principal SaaS platform combines automated phishing simulations, employee reporting, individualized feedback and gamification. Simulated messages can be tailored to organizational and user context, while employee responses inform subsequent training. The product is intended to build durable recognition and reporting behavior against phishing, social engineering and related email threats.

• Security-awareness training

  Phishing Simulations

  The platform delivers controlled scam-email exercises designed to resemble realistic threats. Simulation content can reflect an employee's organization, industry, language and geography. Users receive points or comparable gamified feedback for identifying and reporting simulated attacks, while the system adapts training to observed behavior and evolving attack methods.

• Email security workflow

  Suspicious Message Reporting

  Hoxhunt provides an employee-facing workflow for reporting suspicious messages. Microsoft documentation lists Hoxhunt among third-party user-report tools that can integrate with Defender for Office 365, helping connect employee awareness activity with organizational email-security processes.

• 2022

  Expansion into North AmericaStrategy

  Background

  Following its growth in Finland and additional venture financing, Hoxhunt sought to develop a broader international enterprise presence.

  Action taken

  The company expanded its operations into North America and maintained a United States presence through Hoxhunt Inc., including an office in Minneapolis, Minnesota.

  Aftermath

  The expansion broadened Hoxhunt's operating footprint beyond Finland. No further independently verified performance outcome is specified in the supplied material.

  Source

• 2022

  Series B financingOther

  Background

  Hoxhunt pursued additional capital to support the development and expansion of its cybersecurity-awareness software business.

  Action taken

  Level Equity Management led a $40 million Series B investment, with participation from Icebreaker.vc.

  Aftermath

  The financing supported Hoxhunt's continued growth and international expansion. The company remained privately held.

  Series B financing. $40 million raised (May 2022)

  Source

1. 1Hoxhunten.wikipedia.org
2. 2Microsoft Defender for Office 365 documentationlearn.microsoft.com