Security awareness training providers
We list 66 companies active in security awareness and human risk, and 20 of them have it as their main focus. 1 is public, 12 are owned by another company and 53 are private. Most are based in the United States (26) and the United Kingdom (10). The oldest, G Data CyberDefense, was founded in 1985. By revenue from annual reports, the largest company here is N-able ($508.8m in FY2025).
By countryUnited States 26United Kingdom 10
Companies focused on security awareness and human risk
20 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
RansomLeak RansomLeak sells security awareness training and human risk management software. | Estonia | 2025 | 5 staff | Private | |
Arsen Security Arsen provides a platform for cybersecurity awareness and social engineering simulation. | Paris, France | 2021 | Private | ||
Brain Security Brain Security sells cyber and AI security awareness solutions, fully online. | Paris, France | 2022 | Private | ||
Breach Secure Now Provides cybersecurity awareness, AI readiness, and compliance training to employees through managed service providers. | Morristown, United States | Private | |||
CybSafe CybSafe provides an AI-powered platform that helps organisations measure and change security behaviours to reduce breaches. | London, United Kingdom | 2017 | Private | ||
EC-Council EC-Council is a cybersecurity certification and training body. | United States | 2001 | Private | ||
Hoxhunt Hoxhunt provides a platform for phishing simulations and security awareness training. | Helsinki, Finland | 2016 | Private | ||
Immersive Labs Immersive Labs sells a platform called Immersive One that helps organisations show how ready they are for cyber threats. | Bristol, United Kingdom | 2017 | Private | ||
ISC2 ISC2 is a membership association that provides cybersecurity certifications, training and continuing education for professionals. | Alexandria, United States | 1989 | Private | ||
KnowBe4 KnowBe4 provides a platform for security awareness training and AI agent security to reduce human risk. | Clearwater, United States | Owned by Vista Equity Partners | |||
Living Security Living Security provides a platform that measures and reduces human risk in organisations. | Austin, United States | 2017 | Private | ||
NINJIO NINJIO provides cybersecurity awareness training and human risk management through personalised coaching and phishing simulations. | Westlake Village, United States | Private | |||
RedTeam Hacker Academy RedTeam Hacker Academy is a cybersecurity training company that offers hands-on courses in ethical hacking and related fields. | Kozhikode, United Arab Emirates | 2015 | Private | ||
SafeHabits SafeHabits provides managed security awareness training and human risk management for organisations. | Prague, Czech Republic | 2026 | Private | ||
SANS Institute SANS Institute provides cybersecurity training, certifications, and resources to professionals and organisations worldwide. | North Bethesda, United States | 1989 | Private | ||
SkillBit SkillBit provides hands-on cybersecurity skills training and assessment through bite-sized labs. | Charlottesville, United States | Private | |||
SoSafe SoSafe provides security awareness training and human risk management to help organisations reduce cyber threats. | Köln, Germany | 2018 | Private | ||
Mile2 Mile2 provides vendor-neutral cybersecurity certification and training programmes for professionals worldwide. | Q49255, United States | 2008 | Private | ||
Security Quotient Security Quotient provides cyber security, data privacy and AI governance training for regulated enterprises. | Singapore, Singapore | 2005 | Private | ||
simler simler provides an AI platform for generating and running cybersecurity tabletop exercises. | Rotterdam, Netherlands | 2026 | Private |
Also active in security awareness and human risk
46 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
N-able N-able provides cybersecurity and IT management software for managed service providers and businesses. | Burlington, United States | Public, NABL | $508.8m (FY2025) | ||
G Data CyberDefense G DATA CyberDefense AG is a German cybersecurity company based in Bochum. | Bochum, Germany | 1985 | 500 staff | Private | |
SBS CyberSecurity US cybersecurity consulting, audit and testing firm founded in 2004, focused on community banks and credit unions, with external, internal, web application, wireless and PCI DSS penetration testing plus CMMC Level 1 and 2 readiness work. | Madison, United States | 2004 | 51-200 staff | Private | |
Equilibrium Security CREST-accredited Birmingham-based cyber security consultancy delivering penetration testing, social engineering assessments, and Cyber Essentials certification for public and private sector clients. | Birmingham, United Kingdom | 2012 | 11-50 staff | Owned by Omni Cyber Security | |
Kolibërs Group Mexico-based cybersecurity firm delivering pen testing services across Latin America with international standards alignment. | Mexico City, Mexico | 2015 | 11-50 staff | Private | |
SECNORA CREST-accredited information security and GRC consulting firm near Dallas. Pairs full-scope penetration testing with governance, risk, and compliance advisory and security training. | Dallas, United States | 11-50 staff | Private | ||
Sencode CREST-accredited North East England penetration testing specialist founded in 2019, offering accessible and transparent security testing with free retests and a strong focus on social engineering. | Stockton-on-Tees, United Kingdom | 2019 | 1-10 staff | Private | |
Abnormal AI Abnormal AI uses behavioural analysis to detect and stop email, identity, and AI-driven cyber attacks. | San Francisco, United States | 2018 | Private | ||
Alpha Code Technologies Alpha Code Technologies is a managed security services provider based in Jakarta, Indonesia. | Jakarta, Indonesia | 2025 | Owned by Akraya International | ||
altaniche altaniche is a security practice that helps organisations adopt AI safely. | Melbourne, Australia | 2024 | Private | ||
Arctic Wolf Arctic Wolf provides managed security operations, threat detection and incident response services to organisations. | Eden Prairie, United States | 2012 | Private | ||
Auxilium Cyber Security Ettlingen consultancy pentesting vehicles, ADAS, gateways, infotainment and on-board chargers, plus R155 CSMS consulting. | Ettlingen, Germany | 2015 | Private | ||
BCIT BCIT is a cybersecurity and compliance consulting firm and training organisation based in France. | Pranzac, France | 2022 | Private | ||
BeforeCrypt BeforeCrypt is a ransomware recovery and incident response provider. | Paphos, Cyprus | 2021 | Private | ||
Bondgate IT Bondgate IT is a managed service provider founded in 1998. | Darlington, United Kingdom | 1998 | Private | ||
Boston Managed IT Boston Managed IT is a managed service provider based in Waltham, Massachusetts, founded in 2017. | Waltham, United States | 2015 | Private | ||
BSI Group ISO/IEC 27001 certification audits and information security training from the UK national standards body, which also certifies quality, safety and medical devices. | London, United Kingdom | Private | |||
Bureau Veritas Cybersecurity Bureau Veritas Cybersecurity provides cybersecurity services covering people, processes, and technology. | Eindhoven, Netherlands | Owned by Bureau Veritas | |||
CodeTechLab CodeTechLab is a cybersecurity consulting and training firm based in Jaipur, India. | India | 2022 | Private | ||
Cofense Cofense provides phishing detection and response services using AI and human validation. | Arlington, United States | Private | |||
Elementrica Elementrica is a cybersecurity company based in Kraków with an office in Oslo. | Kraków, Poland | 2022 | Private | ||
ERMProtect ERMProtect provides cybersecurity assessments, penetration testing, compliance audits, and digital forensics services. | Coral Gables, United States | 1998 | Private | ||
GRIMM Michigan security research firm offering penetration testing and training for vehicles and other transport systems. | Cedar Springs, United States | Private | |||
GTMaritime GTMaritime provides secure communication and cybersecurity software for maritime IT teams. | Warrington, United Kingdom | Owned by Valstone | |||
Guardio Guardio provides online protection for individuals and businesses, securing accounts and devices. | Tel Aviv, Israel | Private | |||
Guardsi Cybersecurity Guardsi Cybersecurity is a Brazilian firm that has specialised in penetration testing and offensive security since 2015. | Uberlândia, Brazil | 2015 | Private | ||
Hornetsecurity Ltd. Hornetsecurity provides Microsoft 365 security, backup, and compliance services for managed service providers. | Hanover, Germany | 2007 | Part of Proofpoint | ||
I Infysec Infysec provides cyber security services, training, and research and development. | Chennai, India | Private | |||
IRONSCALES Provides AI-driven email security to stop phishing, business email compromise, and deepfake attacks. | Atlanta, United States | 2014 | Private | ||
Kaseya Kaseya provides software for IT management, security and automation to IT teams and managed service providers. | Miami, United States | 2000 | Private | ||
LHP Engineering Solutions US engineering consultancy offering ISO 21434 consulting, TARA, security verification and automotive cybersecurity training. | Columbus, Indiana, United States | 2001 | Private | ||
Mailinblack Mailinblack provides email security, password management, and cybersecurity awareness training for organisations. | Marseille, France | 2003 | Owned by Seven2 | ||
mainsec UG (haftungsbeschränkt) mainsec UG (haftungsbeschränkt) is an IT security consultancy based in Würzburg with a second location in the Sauerland. | Rimpar, Germany | 2025 | Private | ||
Mimecast Mimecast provides email security and human risk management services for organisations. | London, United Kingdom | 2003 | Owned by Permira | ||
NDIAS Tokyo firm assessing vehicle ECUs and connected services, with automotive security consulting, PSIRT support and training. | Tokyo, Japan | 2018 | Owned by DENSO and NRI Secure Technologies | ||
Niebezpiecznik Polish website publishes cybersecurity news and offers security training and audits. | Kraków, Poland | Private | |||
Nuvol Cybersecurity Nuvol Cybersecurity is a boutique cybersecurity firm founded in 2017 in Panama. | Mexico City, Panama | 2017 | Private | ||
OSINT Industries OSINT Industries provides open-source intelligence tools for online investigations. | London, United Kingdom | Private | |||
Qorum Secur'Num Qorum Secur'Num is a French collective of small and medium-sized cybersecurity firms and independent experts. | Puteaux, France | 2020 | Private | ||
UpGuard UpGuard provides a platform for managing cyber risk across vendors, attack surface, and workforce. | Mountain View, United States | 2012 | Private | ||
Vanta Vanta provides a platform for automating security compliance and risk management. | San Francisco, United States | 2018 | Private | ||
HACK KAP HACK KAP provides manual penetration testing, dark-web intelligence, and hacking labs for businesses worldwide. | Colombo, Sri Lanka | 2022 | Private | ||
Littlefish Littlefish provides managed IT services, cyber security, digital solutions, and data and AI services to organisations. | Nottingham, United Kingdom | 2003 | Owned by Bowmark Capital | ||
Netwrix Netwrix provides software to protect data and secure identities across IT environments. | Frisco, United States | 2006 | Owned by TA Associates | ||
Proofpoint Proofpoint provides cybersecurity solutions to protect people, data, and AI across email, cloud, and collaboration tools. | Sunnyvale, United States | 2002 | Owned by Thoma Bravo | ||
Safetica Technologies Safetica provides AI-powered data protection, insider risk, cloud security, and compliance software. | San Jose, United States | 2007 | Private |
Recent deals in security awareness and human risk
All security awareness and human risk dealsAcquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.
More in Email Security
See every category- Email security vendors 48 companies
- DMARC providers 18 companies
- Fraud prevention vendors 47 companies