cybersecdirectory

Security awareness training providers

We list 66 companies active in security awareness and human risk, and 20 of them have it as their main focus. 1 is public, 12 are owned by another company and 53 are private. Most are based in the United States (26) and the United Kingdom (10). The oldest, G Data CyberDefense, was founded in 1985. By revenue from annual reports, the largest company here is N-able ($508.8m in FY2025).

By countryUnited States 26United Kingdom 10

Companies focused on security awareness and human risk

20 companies
CompanyBased inFoundedSizeOwnershipRevenue
RansomLeak

RansomLeak sells security awareness training and human risk management software.

Estonia20255 staffPrivate
Arsen Security

Arsen provides a platform for cybersecurity awareness and social engineering simulation.

Paris, France2021Private
Brain Security

Brain Security sells cyber and AI security awareness solutions, fully online.

Paris, France2022Private
Breach Secure Now

Provides cybersecurity awareness, AI readiness, and compliance training to employees through managed service providers.

Morristown, United StatesPrivate
CybSafe

CybSafe provides an AI-powered platform that helps organisations measure and change security behaviours to reduce breaches.

London, United Kingdom2017Private
EC-Council

EC-Council is a cybersecurity certification and training body.

United States2001Private
Hoxhunt

Hoxhunt provides a platform for phishing simulations and security awareness training.

Helsinki, Finland2016Private
Immersive Labs

Immersive Labs sells a platform called Immersive One that helps organisations show how ready they are for cyber threats.

Bristol, United Kingdom2017Private
ISC2

ISC2 is a membership association that provides cybersecurity certifications, training and continuing education for professionals.

Alexandria, United States1989Private
KnowBe4

KnowBe4 provides a platform for security awareness training and AI agent security to reduce human risk.

Clearwater, United StatesOwned by Vista Equity Partners
Living Security

Living Security provides a platform that measures and reduces human risk in organisations.

Austin, United States2017Private
NINJIO

NINJIO provides cybersecurity awareness training and human risk management through personalised coaching and phishing simulations.

Westlake Village, United StatesPrivate
RedTeam Hacker Academy

RedTeam Hacker Academy is a cybersecurity training company that offers hands-on courses in ethical hacking and related fields.

Kozhikode, United Arab Emirates2015Private
SafeHabits

SafeHabits provides managed security awareness training and human risk management for organisations.

Prague, Czech Republic2026Private
SANS Institute

SANS Institute provides cybersecurity training, certifications, and resources to professionals and organisations worldwide.

North Bethesda, United States1989Private
SkillBit

SkillBit provides hands-on cybersecurity skills training and assessment through bite-sized labs.

Charlottesville, United StatesPrivate
SoSafe

SoSafe provides security awareness training and human risk management to help organisations reduce cyber threats.

Köln, Germany2018Private
Mile2

Mile2 provides vendor-neutral cybersecurity certification and training programmes for professionals worldwide.

Q49255, United States2008Private
Security Quotient

Security Quotient provides cyber security, data privacy and AI governance training for regulated enterprises.

Singapore, Singapore2005Private
simler

simler provides an AI platform for generating and running cybersecurity tabletop exercises.

Rotterdam, Netherlands2026Private

Also active in security awareness and human risk

46 companies
CompanyBased inFoundedSizeOwnershipRevenue
N-able

N-able provides cybersecurity and IT management software for managed service providers and businesses.

Burlington, United StatesPublic, NABL$508.8m (FY2025)
G Data CyberDefense

G DATA CyberDefense AG is a German cybersecurity company based in Bochum.

Bochum, Germany1985500 staffPrivate
SBS CyberSecurity

US cybersecurity consulting, audit and testing firm founded in 2004, focused on community banks and credit unions, with external, internal, web application, wireless and PCI DSS penetration testing plus CMMC Level 1 and 2 readiness work.

Madison, United States200451-200 staffPrivate
Equilibrium Security

CREST-accredited Birmingham-based cyber security consultancy delivering penetration testing, social engineering assessments, and Cyber Essentials certification for public and private sector clients.

Birmingham, United Kingdom201211-50 staffOwned by Omni Cyber Security
Kolibërs Group

Mexico-based cybersecurity firm delivering pen testing services across Latin America with international standards alignment.

Mexico City, Mexico201511-50 staffPrivate
SECNORA

CREST-accredited information security and GRC consulting firm near Dallas. Pairs full-scope penetration testing with governance, risk, and compliance advisory and security training.

Dallas, United States11-50 staffPrivate
Sencode

CREST-accredited North East England penetration testing specialist founded in 2019, offering accessible and transparent security testing with free retests and a strong focus on social engineering.

Stockton-on-Tees, United Kingdom20191-10 staffPrivate
Abnormal AI

Abnormal AI uses behavioural analysis to detect and stop email, identity, and AI-driven cyber attacks.

San Francisco, United States2018Private
Alpha Code Technologies

Alpha Code Technologies is a managed security services provider based in Jakarta, Indonesia.

Jakarta, Indonesia2025Owned by Akraya International
altaniche

altaniche is a security practice that helps organisations adopt AI safely.

Melbourne, Australia2024Private
Arctic Wolf

Arctic Wolf provides managed security operations, threat detection and incident response services to organisations.

Eden Prairie, United States2012Private
Auxilium Cyber Security

Ettlingen consultancy pentesting vehicles, ADAS, gateways, infotainment and on-board chargers, plus R155 CSMS consulting.

Ettlingen, Germany2015Private
BCIT

BCIT is a cybersecurity and compliance consulting firm and training organisation based in France.

Pranzac, France2022Private
BeforeCrypt

BeforeCrypt is a ransomware recovery and incident response provider.

Paphos, Cyprus2021Private
Bondgate IT

Bondgate IT is a managed service provider founded in 1998.

Darlington, United Kingdom1998Private
Boston Managed IT

Boston Managed IT is a managed service provider based in Waltham, Massachusetts, founded in 2017.

Waltham, United States2015Private
BSI Group

ISO/IEC 27001 certification audits and information security training from the UK national standards body, which also certifies quality, safety and medical devices.

London, United KingdomPrivate
Bureau Veritas Cybersecurity

Bureau Veritas Cybersecurity provides cybersecurity services covering people, processes, and technology.

Eindhoven, NetherlandsOwned by Bureau Veritas
CodeTechLab

CodeTechLab is a cybersecurity consulting and training firm based in Jaipur, India.

India2022Private
Cofense

Cofense provides phishing detection and response services using AI and human validation.

Arlington, United StatesPrivate
Elementrica

Elementrica is a cybersecurity company based in Kraków with an office in Oslo.

Kraków, Poland2022Private
ERMProtect

ERMProtect provides cybersecurity assessments, penetration testing, compliance audits, and digital forensics services.

Coral Gables, United States1998Private
GRIMM

Michigan security research firm offering penetration testing and training for vehicles and other transport systems.

Cedar Springs, United StatesPrivate
GTMaritime

GTMaritime provides secure communication and cybersecurity software for maritime IT teams.

Warrington, United KingdomOwned by Valstone
Guardio

Guardio provides online protection for individuals and businesses, securing accounts and devices.

Tel Aviv, IsraelPrivate
Guardsi Cybersecurity

Guardsi Cybersecurity is a Brazilian firm that has specialised in penetration testing and offensive security since 2015.

Uberlândia, Brazil2015Private
Hornetsecurity Ltd.

Hornetsecurity provides Microsoft 365 security, backup, and compliance services for managed service providers.

Hanover, Germany2007Part of Proofpoint
Infysec

Infysec provides cyber security services, training, and research and development.

Chennai, IndiaPrivate
IRONSCALES

Provides AI-driven email security to stop phishing, business email compromise, and deepfake attacks.

Atlanta, United States2014Private
Kaseya

Kaseya provides software for IT management, security and automation to IT teams and managed service providers.

Miami, United States2000Private
LHP Engineering Solutions

US engineering consultancy offering ISO 21434 consulting, TARA, security verification and automotive cybersecurity training.

Columbus, Indiana, United States2001Private
Mailinblack

Mailinblack provides email security, password management, and cybersecurity awareness training for organisations.

Marseille, France2003Owned by Seven2
mainsec UG (haftungsbeschränkt)

mainsec UG (haftungsbeschränkt) is an IT security consultancy based in Würzburg with a second location in the Sauerland.

Rimpar, Germany2025Private
Mimecast

Mimecast provides email security and human risk management services for organisations.

London, United Kingdom2003Owned by Permira
NDIAS

Tokyo firm assessing vehicle ECUs and connected services, with automotive security consulting, PSIRT support and training.

Tokyo, Japan2018Owned by DENSO and NRI Secure Technologies
Niebezpiecznik

Polish website publishes cybersecurity news and offers security training and audits.

Kraków, PolandPrivate
Nuvol Cybersecurity

Nuvol Cybersecurity is a boutique cybersecurity firm founded in 2017 in Panama.

Mexico City, Panama2017Private
OSINT Industries

OSINT Industries provides open-source intelligence tools for online investigations.

London, United KingdomPrivate
Qorum Secur'Num

Qorum Secur'Num is a French collective of small and medium-sized cybersecurity firms and independent experts.

Puteaux, France2020Private
UpGuard

UpGuard provides a platform for managing cyber risk across vendors, attack surface, and workforce.

Mountain View, United States2012Private
Vanta

Vanta provides a platform for automating security compliance and risk management.

San Francisco, United States2018Private
HACK KAP

HACK KAP provides manual penetration testing, dark-web intelligence, and hacking labs for businesses worldwide.

Colombo, Sri Lanka2022Private
Littlefish

Littlefish provides managed IT services, cyber security, digital solutions, and data and AI services to organisations.

Nottingham, United Kingdom2003Owned by Bowmark Capital
Netwrix

Netwrix provides software to protect data and secure identities across IT environments.

Frisco, United States2006Owned by TA Associates
Proofpoint

Proofpoint provides cybersecurity solutions to protect people, data, and AI across email, cloud, and collaboration tools.

Sunnyvale, United States2002Owned by Thoma Bravo
Safetica Technologies

Safetica provides AI-powered data protection, insider risk, cloud security, and compliance software.

San Jose, United States2007Private

Recent deals in security awareness and human risk

All security awareness and human risk deals
DateDealAmountSource
16 Oct 2026Proofpoint acquired VaronisSource for Proofpoint buying Varonis, opens in a new tab$6.3bnSource for Proofpoint buying Varonis, opens in a new tab
15 Oct 2026Proofpoint acquired VaronisSource for Proofpoint buying Varonis, opens in a new tab$6.3bnSource for Proofpoint buying Varonis, opens in a new tab
October 2026EC-Council acquired Cyber Insurance AcademySource for EC-Council buying Cyber Insurance Academy, opens in a new tabUndisclosedSource for EC-Council buying Cyber Insurance Academy, opens in a new tab
July 2026NINJIO acquired SafeStackSource for NINJIO buying SafeStack, opens in a new tabUndisclosedSource for NINJIO buying SafeStack, opens in a new tab
February 2026Arctic Wolf acquired Sevco SecuritySource for Arctic Wolf buying Sevco Security, opens in a new tabUndisclosedSource for Arctic Wolf buying Sevco Security, opens in a new tab
February 2026Littlefish acquired Stripe OLTSource for Littlefish buying Stripe OLT, opens in a new tabUndisclosedSource for Littlefish buying Stripe OLT, opens in a new tab
February 2026Proofpoint acquired AcuvitySource for Proofpoint buying Acuvity, opens in a new tabUndisclosedSource for Proofpoint buying Acuvity, opens in a new tab
November 2025Arctic Wolf acquired UpSight SecuritySource for Arctic Wolf buying UpSight Security, opens in a new tabUndisclosedSource for Arctic Wolf buying UpSight Security, opens in a new tab
July 2025Vanta acquired RiskeySource for Vanta buying Riskey, opens in a new tabUndisclosedSource for Vanta buying Riskey, opens in a new tab
July 2025Bureau Veritas Cybersecurity acquired Institute For Cyber Risk (IFCR)Source for Bureau Veritas Cybersecurity buying Institute For Cyber Risk (IFCR), opens in a new tabUndisclosedSource for Bureau Veritas Cybersecurity buying Institute For Cyber Risk (IFCR), opens in a new tab

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.

See every category

Often listed alongside security awareness and human risk