Companies that use Kaseya BullPhish

Source: Analysis of Linkedin bios of 2,140 companies that use Kaseya BullPhish

I noticed that Kaseya BullPhish customers span an incredibly diverse range of industries, but they share a common thread: they're organizations that rely heavily on their people to deliver services. These aren't software companies or tech startups. They're hotels welcoming guests, construction firms managing job sites, accounting practices serving clients, nonprofits running community programs, healthcare facilities caring for patients, and retail operations serving customers. Many are in traditional, relationship-driven industries where trust and personal service define success.

Most appear to be established, mature businesses rather than startups. The employee counts cluster around 11-200, with many in the 50-200 range. They reference decades of experience: "over 150 years," "since 1969," "more than 35 years." Very few show venture funding, suggesting they're profitable, self-sustaining operations. They own physical locations, manage fleets, operate facilities, and employ unionized workforces in some cases.

Source: Analysis of tech stacks from 2,140 companies that use Kaseya BullPhish

I noticed that Kaseya BullPhish users are overwhelmingly managed service providers (MSPs) and IT service companies. The tech stack screams MSP: Datto PSA and ConnectWise Manage are both professional services automation platforms built specifically for MSPs to manage client relationships, track tickets, and bill for services. IT Glue is documentation software that MSPs use to maintain detailed records of their clients' IT environments. These companies aren't using security awareness training for themselves. They're reselling it to their clients as part of a broader managed security offering.

The pairing of Datto PSA (436 times more likely) with IT Glue makes perfect sense for this business model. MSPs need to track which clients have which security training licenses, document their security policies, and manage ongoing phishing campaigns across dozens or hundreds of client organizations. Intune's strong presence tells me these MSPs are managing Microsoft 365 environments for their clients, so they need security training that integrates with that ecosystem. Postmark showing up 17 times more often suggests these companies send high volumes of transactional emails, which tracks with running phishing simulations for multiple clients simultaneously.

The full stack reveals service businesses, not product companies. These aren't product-led startups or even traditional B2B SaaS companies. They're relationship-driven businesses that grow through referrals and local market presence. They likely have small to medium-sized teams managing technology for many small business clients. The presence of Yoast suggests they invest in content marketing and SEO to attract new MSP clients searching for local IT support.