Security Awareness Training

As part of our SOC 2 compliance efforts, we are required to ensure that users with elevated privileges receive targeted security awareness training. These individuals often have access to sensitive systems and data, making them high-value targets for threat actors. A dedicated module that focuses on the risks, responsibilities, and secure behaviors associated with privileged access would greatly enhance our ability to meet these compliance requirements and reduce risk exposure. Such a module could include: Real-world attack scenarios involving privileged accounts Best practices for secure administrative behavior Guidelines for using elevated privileges responsibly Alerts to common pitfalls and social engineering tactics targeting admins This addition would be a meaningful step in helping your customers strengthen their security posture while also supporting industry-standard compliance frameworks like SOC 2.

We would like to provide phishing simulations to our end users in French as they will not engage or will delete emails sent to them in English. However they are still vulnerable to phishing emails sent in French language. Translation of the existing phishing scenario library within Huntress Managed SAT + new scenarios published as part of 'Managed Phishing' would be ideal.

It has been request by a partner to have the ability to select learners for their Managed Learning Campaign. Having the ability for control via Tag or Group membership would be of great benefit. In some instances partners may wish to exclude an individual or multiple learners from the managed learning campaign. This would be particularly useful for new starters to have a specific foundation as well as being enrolled in Managed Learning.

It would be nice to see a few options if not a full customization on the timing of managed assignments. I am not sure why this wasn't thought of before this was rolled out, but it seems to me that it would be intuitive not to do it all together. Most of the time, the phishing test and the assignments line up so the assignment is gotten by the learner first and then they get the phishing. Anyone with a bit of intellect would get the pattern pretty fast. If I see the assignment come in, I better be ready for the phishing today or within the next couple. If the assignment went out the next week or even mid-month, that would solve this problem. This is how I used to do it when I was managing it myself. Sometime in the first ten days, the phishing goes out then the assignment on the 15th. By the time the phishing rolls around again, they have gotten complacent or have forgotten. It would make testing more effective.

Many insurers are requiring that users be enrolled in a service that provides general world/nation events regarding security. Would love to see something like this included in SAT. Setting to important, as the service is sometimes required by insurance. I would envision this being an email based service, where users receive a monthly list of recent events that is prettied up in an alerts. An example of a Threat Alert sent out this week (Week of November 11th) could be the following articles: https://www.bleepingcomputer.com/news/security/googles-mysterious-searchapp-links-leave-android-users-concerned/ https://www.cisa.gov/news-events/alerts/2024/11/07/cisa-adds-four-known-exploited-vulnerabilities-catalog https://www.securityweek.com/cisco-patches-critical-vulnerability-in-industrial-networking-solution/ https://www.securityweek.com/steelfox-miner-and-information-stealer-bundle-emerges/

We would like to provide phishing simulations to our end users in Dutch as they will not engage or will delete emails sent to them in English. However they are still vulnerable to phishing emails sent in Dutch language. Translation of the existing phishing scenario library within Huntress Managed SAT + new scenarios published as part of 'Managed Phishing' would be ideal.

## Overview SAML-based enforcement is heavy and slow to configure for smaller orgs. We are requesting the ability to enforce Single Sign-On (SSO) using OpenID Connect (OIDC) as the authentication method. This allows us to eliminate passwords for end users without extra config. ## Desired Outcomes Enforced login via OIDC for all users, with no fallback to password-based authentication Admin controls to: - Enable/disable local login - View enforcement status ## Request Summary Enable OIDC enforcement option in the admin settings Provide migration path for existing users Add support for commonly used IDPs like Microsoft Entra ID and Google Workspace

We would like to provide phishing simulations to our end users in German as they will not engage or will delete emails sent to them in English. However they are still vulnerable to phishing emails sent in German language. Translation of the existing phishing scenario library within Huntress Managed SAT + new scenarios published as part of 'Managed Phishing' would be ideal.

It would be great to be able to create monthly recurring custom phishing campaigns since Huntress Managed campaigns do not include recovery training, only a PDF of what to be on the lookout for. As it is now, if I or a customer wants their users to take Recovery training, I have to create a custom phishing campaign for every month.

For some SAT episodes like AI Hallucinations, the questions are based on visuals in the video, but the answer would not be available to those who use screenreaders. Having the descriptive audi track makes the episodes more accessible to learners.