Most platforms simulate what attackers used to do.
Recon simulates what they're doing right now.
While legacy vendors sell static templates and Microsoft bundles a scenario library into your email licence, Recon builds every simulation from real OSINT and live indicators of compromise — priced below the category, hosted on sovereign Swiss infrastructure.
Three Levels of Reconnaissance
Pick Your Ground
Billed annually. Per-seat rates fall with volume. Multi-year terms available.
Scout
- Ready-made simulation templates
- Baseline training library
- Org-wide reporting & dashboards
Patrol
- Everything in Scout
- AI-generated emails, landing & training pages
- Company-specific templates, out of the box
- Knowledge checks that score comprehension
- Physical QR-code campaigns
Vantage
- Everything in Patrol
- Corporate fingerprinting & stakeholder OSINT
- Live page cloning: replicate any real portal
- Live feeds from tooling and field practitioners
- Same-day live-fire across all five channels
- CTI: simulations built from active, real-world threats
Live fire, not lecture.
The threat landscape moves daily — your training shouldn't be a year behind it. Vantage draws on live feeds from threat intelligence tooling and practitioners working in the field, then turns what is actually happening right now into a simulation your staff receive the same day. It runs across all five delivery channels, so whichever route a real attack takes, your people have already walked it once. Underneath it all sits deep OSINT: corporate fingerprinting and stakeholder-level exposure mapping that shows exactly what an attacker can already see about your organisation.
What It Does
A Lean, Continuous Security Sensor
AI-Driven Phishing Simulations
Adaptive, context-aware campaigns across five delivery channels — each mirroring how real attackers operate.
Behavioural Telemetry
Granular, per-user behavioural scoring that surfaces who is most at risk — and why — so remediation is always directed where it matters most.
Just-in-Time Training
Targeted micro-modules delivered the moment a user fails, reinforcing the right behaviour while it's still fresh.
Live CTI Integration (Vantage)
Vantage draws on live cyber threat intelligence feeds from practitioners in the field, turning what is happening right now into same-day training scenarios.
OSINT & Corporate Fingerprinting
Stakeholder-level exposure mapping reveals exactly what an attacker can already see about your organisation before they even send a single email.
Unique Per-Person Lures
Every simulation is personalised. No two employees receive identical content — adaptive AI ensures each scenario is plausible to the specific recipient.
How Vectrix Compares
The Category. Rewritten.
KnowBe4 built the category. Hoxhunt made it fun. Microsoft made it free. None of them train against what is happening this week.
| Capability | Vectrix Recon | KnowBe4 | Hoxhunt | Microsoft |
|---|---|---|---|---|
| Entry price / user / yr | from $10 | ~$16 | ~$12–18* | Bundled add-on, ~$60** |
| AI-generated, live-threat sims | Native, live-fed | Diamond tier | Add-on | Static library |
| OSINT reconnaissance | ||||
| Five delivery channels | Partial | Email only | Email only | |
| Unique per-person lures | Partial | Adaptive difficulty | Template-based | |
| Live page cloning | ||||
| Live-fire on active threats (CTI) | ||||
| Standalone (no platform lock-in) | Requires M365 E5 | |||
| Swiss hosting / data sovereignty | Varies by region |
Competitor capabilities based on public documentation and vendor materials as of 2026. *Hoxhunt list pricing not published; range reflects third-party buyer-reported contracts. **Microsoft Attack Simulation Training requires M365 E5 or Defender for Office 365 Plan 2.
Why Buyers Choose Vectrix
One Platform. No Invoices Stacked.
One Platform, Not Five Invoices
Recon, simulation, AI content, and training live in a single tool — priced below legacy vendors at every tier, with none of the integration tax of stitching point solutions together.
Built From Real Recon, Not Templates
Corporate fingerprinting and stakeholder-level OSINT map what an attacker can already see: the difference between 'this looks like phishing' and 'this looks exactly like Tuesday.'
Sovereign By Default
ISO 27001, Swiss-hosted, zero third-country transfer. Your simulated attacks stay exactly as protected as the real ones you're defending against.
Security & Compliance
Built Secure. Hosted in Switzerland.
Vectrix Recon is engineered to best-practice security standards and operates on trusted Swiss infrastructure, so your organisation can assess human risk without compromising on data protection.
Swiss-Hosted Infrastructure
All platform data is hosted in Switzerland under an ISO-certified Swiss cloud service provider, keeping your data within a trusted, privacy-first jurisdiction.
Security Best Practices
The platform is engineered to industry security best practices — encrypted in transit and at rest, least-privilege access, and continuous hardening.
Compliance Review
Vectrix Recon undergoes regular compliance review to align with recognised security and data-protection standards, so you can deploy with confidence.
Data Protection by Design
Privacy and security are built in from the ground up. See how we handle data in our Privacy Notice.
Infrastructure You Can Trust
Our Swiss Cloud Partner
Vectrix Recon runs on an established, security-focused Swiss cloud provider. We don't name them publicly — operational security demands discretion — but here's what we can share about the foundation your data sits on.
ISO 27001 Certified
The hosting environment is operated under an ISO/IEC 27001-certified information security management system, independently audited against a globally recognised standard.
Swiss Data Centre
Infrastructure is physically located in Switzerland, keeping all platform data under Swiss data-protection law and outside non-Swiss jurisdictions.
Redundant Power & Connectivity
Fault-tolerant design with redundant power feeds, UPS backup, and multiple independent network uplinks for high availability.
Physical Access Controls
Data-centre access is restricted to authorised personnel only, protected by 24/7 monitoring, video surveillance, and strict entry controls.
DDoS Protection & Firewalls
Network edge is defended against volumetric and application-layer attacks with dedicated DDoS mitigation and advanced firewalling.
Swiss Data Sovereignty
Data remains within Switzerland under Swiss law — no transfer to third countries, supporting strict compliance and privacy requirements.
Ready to test your human firewall?
Talk to Defense Architecture about deploying Vectrix Recon in your organisation.
Get In Touch