SoSafe is a security awareness training and human risk management provider that helps organisations reduce human cyber risk by turning everyday behaviour into a measurable, improvable security control. Its approach combines behavioural science, adaptive learning, live threat context, and analytics so employees receive relevant guidance instead of generic, one-off awareness content.
The company’s portfolio is built around continuous risk reduction: training people, simulating attacks, surfacing behavioural insight, and triggering targeted interventions when risk changes. Through security awareness training, smart phishing simulations, Sofie, and Human Risk OS, SoSafe helps security teams strengthen secure habits, improve security culture, and support compliance with less administrative effort.
Offerings, Capabilities, and Integrations
SoSafe delivers a human risk management platform designed to change behaviour, not just complete awareness checkboxes. Its capabilities span personalised learning, realistic attack simulation, risk monitoring, human risk scoring, targeted interventions, security culture measurement, and audit-ready reporting. The platform is built for low-touch administration, fast rollout, and continuous optimisation, with managed-service support available for customers that want additional guidance.
SoSafe extends its platform through integrations that connect awareness activity with the broader security and IT stack. These integrations support email environments, collaboration tools, identity and provisioning systems, security operations workflows, and analytics platforms, helping customers automate user management, improve phishing reporting, centralise behaviour data, and deliver security guidance inside the tools employees already use.
Products and Services
- Security awareness training: Behavioural science-based cybersecurity training built around personalised, gamified microlearning that adapts content to employee role, behaviour, and risk context.
- Smart phishing simulations: Personalised phishing simulation capability with AI-powered setup, role- and behaviour-based targeting, and feedback loops that reinforce secure reporting and response habits.
- Sofie: Always-on AI cybersecurity copilot that delivers security alerts, answers employee questions, supports phishing guidance, and automates level-zero security support in collaboration channels.
- Human Risk OS: SoSafe’s human risk management platform for detecting, measuring, monitoring, and reducing human cyber risk through behaviour sensors, a Human Security Index, and intervention workflows.
- Phishing Report Button: One-click reporting tool that lets employees flag suspicious emails, receive immediate feedback, and feed reporting signals back into awareness and security operations workflows.
- SoSafe MSP Platform: Multi-tenant, white-label platform for managed service providers to deliver SoSafe training and phishing simulations to SME customers at scale.
Target Customers
SoSafe primarily serves security, risk, and compliance leaders that need to influence employee behaviour at scale, especially in organisations where phishing, social engineering, and policy adherence are material business risks. It is well suited to enterprises and upper-midmarket organisations that want measurable human risk reduction rather than periodic awareness campaigns.
The platform is particularly relevant for companies with distributed, multilingual, or frontline-heavy workforces, including manufacturers that need to reach employees from office teams to the factory floor while supporting audit and regulatory requirements. Through the SoSafe MSP Platform, it also serves managed service providers that want to extend awareness and phishing simulation services to SMEs and other resource-constrained organisations.
Cloud Integrations and Marketplace
- Azure Marketplace: SoSafe has a verified Microsoft Azure Marketplace presence tied to Microsoft Entra ID, supporting enterprise single sign-on for existing SoSafe customers.
- Microsoft Entra ID: Supports single sign-on and user access management, and is used within SoSafe’s broader provisioning and identity integration model.
- Microsoft 365: Supports phishing simulation integration for Microsoft email environments to streamline campaign delivery and reporting workflows.
- Gmail: Supports phishing simulation integration for Google mail environments.
- Google Workspace: Used for automated user provisioning and user management within Human Risk OS workflows.
- Microsoft Teams: Sofie can be deployed in Microsoft Teams to send alerts, answer security questions, and provide in-workflow guidance.
- Slack: Sofie can be deployed in Slack to deliver alerts, micro-learning, and security support where employees work.
- Jira / ServiceNow: Security operations integrations help automate feedback on phishing reports and connect awareness activity with SOC processes.
- Power BI: Supports analytics and data export workflows so customers can visualise human risk and awareness data in business intelligence environments.
Key People
- Dr. Niklas Hellemann: Co-Founder & CEO
- Peter Grausgruber: Chief Financial Officer
- Rob Daly: Chief Technology Officer
- Dan Farkas: Chief Revenue Officer
- Laura Ryan: Chief People Officer
- Thomas Owen: Chief Information Security Officer
- Thore Backen: Chief of Staff
- Christine Siu: Senior VP Product
- Daniel Hubrich: Senior VP Sales
- Sarra Ouaili: Senior VP Marketing
- Shannon Jaritz: Senior VP Customer Success
Key Facts
- Headquarters: Cologne, North Rhine-Westphalia, Germany
- Employees: 500+
- Annual Revenue: $100M-$250M
- Parent Company: None
- Subsidiaries: None
- Publicly Listed: Private
Analyst Recognitions
- Gartner: 2022 Innovation Insight on Security Behavior and Culture Program Capabilities — Representative Provider.
- Forrester: 2024 The Forrester Wave™: Human Risk Management Solutions, Q3 2024 — Strong Performer.
