Stay Informed with the Phin Blog | Phin Security

6 Ways Phin Security is built different (and What MSPs Get Out of It)

Written by Connor Swalm | Apr 29, 2026 1:15:00 PM

You probably already have security awareness training in place, but is it doing what it should? Sure, training is technically running, but it’s creating too much operational overhead, and not always delivering the behavior change that your clients are paying for.

Before starting Phin Security, we spent a lot of time speaking to MSPs who were dealing with exactly that - too much manual work, content that didn’t land, and tools that didn’t quite fit the way MSPs operate. They could technically handle an MSP with many clients, but that wasn’t what they were built for.

We didn’t build Phin just to add another option to a long list - we wanted to solve those problems with a purpose-built platform. In the short time we’ve been around, our approach has already helped hundreds of MSPs. And while there are plenty of other great providers, they’re not always built to solve the specific challenges of MSPs.

 

6 Ways Phin is Built Different for MSPs

 

1. Shared Campaigns and Multi-Tenancy

If you manage security awareness training across multiple clients, you’re gonna hit a scaling problem pretty fast. Most platforms require you to update your contract or contact support every time you add a new tenant, and when it comes to launching training, you often need to recreate and maintain campaigns separately for each tenant. That’s manageable at five clients. It becomes a bit of a time drain at ten clients, and a productivity black hole at fifty.

Phin was built to be truly multi-tenancy. You can add and remove tenants as frequently as you want without having to update a contract, contact support, or meet per tenant requirements. And Shared Campaigns allow you to create once and deploy everywhere, with updates applied globally. It’s a simple idea, but it removes a huge amount of repetitive work and reduces the risk of inconsistencies across clients.

 

2. Fast, Practical Setup

Another common frustration is onboarding - we’ve heard from MSPs who have invested in platforms that take days to configure properly. In some cases, that friction alone delays or limits rollout across their client base. Phin was designed to get up and running quickly, without sacrificing effectiveness. If something is going to be deployed across dozens or hundreds of tenants, it has to be easy to launch and maintain. Otherwise, it doesn’t scale.

We are extremely proud (and our clients are extremely appreciative of) our ten minute “set it and forget it” standard. Just integrate your tools, set up allowlisting automatically, answer a few questions and BOOM - your training is launched and you never have to touch it again (unless you really want to).

Bill Hunter, CEO at Fortify Technology, an MSP that onboarded 1,100 users in just one day claims it is the, “Easiest deployment of any platform I’ve worked with.”

 

3. Learning Moments

A failed phishing simulation should be a useful moment, not just a report entry. What we’ve seen elsewhere is a tendency to treat failures as a metric rather than a teaching opportunity, often with a lot of shame included. Users click, get a random training two weeks later, and move on without really understanding what they missed.

Learning Moments change that. They provide immediate, contextual feedback so users can see exactly what happened and what to look for next time. That shift from passive reporting to active learning is where behavioral change starts to happen, and behavioral change should be the goal of all SAT.

This focus on learning has shown a dramatic decrease in phishing clicks across MSPs, including Certified CIO, an MSP whose clients have seen a 21% decrease in phishing click rates since starting Phin.

 

 

 

4. MSP-Friendly Billing

Many MSPs we speak to are dealing with rigid licensing models that don’t reflect how their client base actually changes over time. So, we’ve removed that friction.

Instead of 3-year contracts, per tenant requirements, and billing that doesn’t match usage, we do the opposite. Short-term, monthly billing is based on actual usage with no tenant minimums, so you’re never paying for what you aren’t using.

 

5. Content That Stays Relevant

If I had a nickel for every time content quality came up in conversation, I wouldn’t need to keep running Phin. Training often feels repetitive or disconnected from real-world scenarios, so users disengage quickly and it becomes very difficult to get them back.

At Phin, we’ve focused heavily on building and maintaining a content library that evolves alongside the threat landscape and has an entertainment factor, so training stays relevant and worth paying attention to. Ultimately, the effectiveness of any SAT platform comes down to whether users actually engage with it.

Since we source training content from some of the best providers, we can ensure it’s recent, relevant, and constantly being updated. Users not only actually watch the trainings, but sometimes they even look forward to it. (Crazy, I know.)

I could quote dozens of MSPs about how much their customers love our training, but I’ll just drop this one in here from Rake Digital: “After switching to Phin, we have gotten much better feedback from customers. They enjoy the content, and engage more with it. Phin keeps the content much shorter, which is better for the end-user. “

 

6. Phinbox IQ

We recently left the realm of training, but stayed in the realm of making MSP’s lives easier. When it comes to phishing analysis and triaging reported emails, MSPs spend a lot of time toggling between tools, researching, blocking domains, and escalating emails that require more expertise.

With our newest feature, MSPs get all the information they need to triage an email right in their help desk. This includes email headers, severity, URLs - anything you’d need to analyze an email. And the information is provided in a way that allows L1s to confidently triage emails without needing a second opinion.

The MSPs already using the tool have dropped from 10-15 minutes spent per email to just 1-2 minutes per email. And many of those MSPs deal with hundreds of emails per month, which can translate into tens and even hundreds of hours saved per month.

Joel Chambers at Certified CIO, an early adopter of Phinbox IQ, stated, “My L1s can handle stuff that used to get escalated to me. We were doing everything by hand. Now, we’ve dropped engineering time by 80 percent… You've reduced the human error rate, not just on the end user side, but also on the engineer side.

 

Bonus: The Human Side Still Matters

Features are important, but partnerships matter just as much. From the start we’ve prioritized actively seeking feedback, always putting our shopping carts away, and being responsive, transparent, and easy to work with - which is evidenced to this day in every member of the Phin team. It’s something our partners consistently highlight:

“We really just like working with people we respect and who respect us back.”

- Reg Harnish, Orbitalfire Cybersecurity

“Phin’s support has been amazing. I don’t think I have any vendors that reply as quickly.”

- Mathew Rogers, Kelley Create

“Phin has always had a culture of being extremely transparent. Clearly they’re focusing on making the lives of MSPs easier.”

- Raffi Jamgotchian, Triada Networks

For us, making our partners feel heard and included feels like an absolutely crucial part of the product experience. If you want tips on how to provide a great customer experience, check out a recent blog from our Channel Chief, Mary Signorelli: 6 Ways to Provide a Customer Experience Your Clients Will Rave About

 

See What That Looks Like in Practice

If you’re currently running SAT and finding it takes more effort than it should, or it’s not delivering the results your clients expect, maybe it’s worth taking a closer look at Phin?

Checkout case studies with our current phinatics and schedule a demo to see how Phin works in a real MSP environment. Or if you’re more hands on, start your 30 day free trial!