SoSafe
SoSafe is a European security awareness and human risk management SaaS platform that uses behavioral science, AI-driven simulations, and a Human Risk OS to train employees at 6,000+ organizations across regulated industries, reducing phishing susceptibility and compliance risk.
- Company typePrivate
- Founded2018
- HeadquartersKöln, Germany
- Headcount251–500
- GTM typeB2B
- OfferingSoftware
What SoSafe does
SoSafe is a European security awareness and human risk management SaaS platform headquartered in Cologne, Germany, founded in 2018. The company targets enterprise and mid-market buyers across regulated verticals, including financial services, manufacturing, healthcare, public sector, automotive, retail, telecommunications, and nonprofit, serving over 6,000 organizations and 5.4 million end users globally. Geographic concentration is in DACH and broader Europe (Germany, France, Netherlands, Spain, Italy), with a March 2025 entry into Australia extending the footprint into Asia-Pacific.
The platform comprises four integrated products: (1) Security Awareness Training using gamified microlearning, spaced repetition, and storytelling across 32 languages; (2) Smart Phishing Simulations covering email, SMS, QR code, social media, vishing, and USB channels, with a one-click Phishing Report Button; (3) Sofie, an always-on AI-powered conversational chatbot built on OpenAI's GPT models with Eleven Labs voice synthesis; and (4) Human Risk OS, a real-time risk analytics layer that aggregates behavioral, identity, and threat data into a Human Security Index with targeted intervention recommendations. The stack runs on AWS EU infrastructure with ISO 27001, GDPR, TISAX, HIPAA, NIS2, and SOC 2 compliance, integrating with Microsoft 365, Google Workspace, Slack, Okta, Microsoft Entra ID, ServiceNow, and Jira.
SoSafe sells annual per-user SaaS subscriptions with quote-based pricing and offers a managed-service tier with dedicated Customer Success Managers. Go-to-market is hybrid: enterprise field sales for larger accounts, complemented by a product-led motion via the self-service portal (app.sosafe.de), free cyber readiness assessments, and the Danger Lab phishing game for SMB conversion. The company has raised a $73 million Series B led by Highland Europe in January 2022, with Acton Capital, Global Founders Capital, and La Famiglia as co-investors, and is referenced alongside Summit Partners in press coverage. The company operates with 251-500 employees as Europe's largest security awareness and human risk management provider.
SoSafe firmographics
Firmographics- Name
- SoSafe
- Legal name
- SoSafe SE
- Website
- https://sosafe-awareness.com
- Company type
- Private
- Founded year
- 2018
- Operating status
- Operating
- Headcount range
- 251–500 employees
- Short description
- SoSafe is a European security awareness and human risk management SaaS platform that uses behavioral science, AI-driven simulations, and a Human Risk OS to train employees at 6,000+ organizations across regulated industries, reducing phishing susceptibility and compliance risk.
- Ownership category
- akta.pro rank
SoSafe industry classification
Industry- Product category
- Security Awareness and Human Risk Management Software
- NAICS
- Software Publishers (513210), Computer Training (611420)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Security Awareness, Training & Compliance Attestation (HDADAIAJ)
- akta.pro secondary industries
- Email Phishing & BEC Protection (HDADAKAB), IT Risk Management (ITRM) (HDADAIAD)
Keywords
Where SoSafe is headquartered
LocationHeadquarters
- HQ city
- Köln
- HQ country
- Germany
- HQ region
- Europe
Offices2 records
Markets served
SoSafe business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Revenue model
- SaaS Subscription (Per-User): SoSafe operates as a SaaS platform with subscription pricing structured per user/organization size. Customers pay recurring fees for access to the full platform including security awareness training, phishing simulations, AI chatbot, and Human Risk OS. Pricing is tailored to organization size and feature scope with transparent, straightforward pricing with no hidden fees. The platform offers a managed-service option for enterprise deployments.
- Enterprise Professional Services: Optional managed-service support for larger deployments, including dedicated Customer Success Manager assistance throughout implementation and ongoing engagement. Implementation support with 20-day onboarding requiring minimal customer effort.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Per seat | Annual | Per-user SaaS subscription with organization-specific tiers |
Go-to-market motion2 records
Distribution channels4 records
Marketing channels12 records
SoSafe product offering
Product offeringCore offering
SoSafe provides a behavioral science-based, SaaS security awareness and human risk management platform that combines personalized gamified training, multi-channel phishing simulations, an AI-powered security chatbot, and a Human Risk OS for continuous real-time risk monitoring. The platform is sold primarily to enterprise and mid-market organizations across Europe and selected international markets on a per-user subscription basis, with delivery in 32 languages and full GDPR/ISO 27001/TISAX/SOC 2 compliance from EU-hosted infrastructure.
Product overview
SoSafe is a behavioral science-based security awareness and human risk management platform. The core offering consists of four integrated products: (1) Security Awareness Training — personalized, gamified, and story-based microlearning that builds cybersecurity habits; (2) Smart Phishing Simulations — multi-channel attack simulations (email, SMS, QR code, social media, vishing, USB) with one-click threat reporting; (3) Sofie AI Cybersecurity Chatbot — an always-on AI copilot providing bite-sized learning and real-time security guidance; and (4) Human Risk OS — an all-in-one platform that continuously monitors human risk in real time using behavioral data, cultural insights, and AI-driven interventions, providing a unified Human Security Index. Together, these products form a unified platform from training delivery through simulation testing to risk analytics and AI-powered support.
Differentiator
Problem solved
Functional benefit
Products and services
- Security Awareness Training
Quantifiable outcome
- Up to 74% reduction in phishing interactions (Fellowmind case study)
- +10 more outcomes
Companies that use SoSafe
Customer profileNamed customers18 records
Segments6 records
Ideal customer profiles4 records
SoSafe technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration8 records
AI capability9 records
Feature7 records
SoSafe partnerships and signals
Strategic signalPartnerships
15 partnerships are on record, tiered core and supporting.
- Amazon Web Services (AWS) EMEA SARLcoreAWS serves as SoSafe's primary hosting provider for all platform components including API interfaces, data storage systems, analytical tools, and communication capabilities. All data is stored in certified EU data centers. AWS is a non-optional sub-processor with EU standard contractual clauses in place.
- Atlassian Pty Ltd.supportingAtlassian provides customer support cloud solution software for SoSafe's customer service operations. This is a non-optional sub-processor with data stored in EU (Ireland, Frankfurt) and Australia data centers.
- Planhat ABsupportingPlanhat provides customer success management and account management services for SoSafe's customer success operations. All data is processed and stored exclusively within the EU (Ireland) on Google Cloud infrastructure.
- Datadog Inc.supportingDatadog provides technical monitoring services for SoSafe's hybrid cloud applications via its SaaS-based data analytics platform. This is a non-optional sub-processor with all data processed and stored within the EU.
- Sentry (Functional Software, Inc.)supportingSentry provides product error tracking and performance monitoring for SoSafe's platform. This is a non-optional sub-processor with all data processed and stored within the EU.
- Kombo Technologies GmbHsupportingKombo provides Active Directory integration for SoSafe, enabling automated uploading and regular updating of end-user data on the platform. This is an optional sub-processor with all data processed and stored within the EU.
- OpenAI Ireland Ltd.coreOpenAI provides interactive awareness and support and other AI-powered tooling (including GPT-based capabilities for the Sofie chatbot and AI simulation features) when selected by the controller. This is an optional sub-processor with data processed in EU, and US where EU-only solution is not available.
- Microsoft 365corePhishing simulation integration with Microsoft 365. Enables organizations to run realistic phishing simulations within the Microsoft 365 environment, testing employees' ability to detect threats in their primary email and collaboration tools.
- Gmail / Google WorkspacecorePhishing simulation integration with Gmail and Google Workspace. Allows organizations to deploy phishing simulations across Google email and productivity suites.
- SlackcoreIntegration with Slack for communication and collaboration-based social engineering simulation support.
- JirasupportingIntegration with Jira for tracking and managing security awareness training and simulation-related tasks and workflows.
- Microsoft Entra IDcoreIntegration with Microsoft Entra ID (formerly Azure Active Directory) for identity management, automated user provisioning, and seamless single sign-on for the SoSafe platform.
- OktacoreIntegration with Okta for identity management and single sign-on (SSO) capabilities, enabling seamless authentication for SoSafe platform users.
- JumpCloudsupportingIntegration with JumpCloud for directory and identity management services, supporting automated user provisioning for organizations using JumpCloud as their IDP.
- ServiceNowsupportingIntegration with ServiceNow for enterprise workflow management, enabling phishing simulation campaigns and security awareness tracking within ServiceNow ITSM workflows.
Scale indicators13 records
Recent moves7 records
Expansion highlights7 records
SoSafe competitors and assessment
Company assessmentDirect peers
- KnowBe4: KnowBe4 is the global market leader in security awareness training and phishing simulation, directly competing with SoSafe on every core capability — phishing simulations, awareness training content, compliance reporting, and AI-driven personalization. As the category-defining incumbent, KnowBe4 sets the bar SoSafe must beat on content library, sales coverage, and enterprise footprint.
- Hoxhunt: Hoxhunt is a Finnish security awareness and phishing simulation platform with a similar behavioral-science, gamification, and personalization approach. Hoxhunt is SoSafe's closest direct European competitor, competing head-to-head in Nordic and broader EU enterprise deals with comparable per-user SaaS pricing and AI-driven personalization.
- Cofense: Cofense is a direct competitor in phishing simulation and security awareness, with deep phishing-specific reporting and a threat-intelligence angle. It overlaps with SoSafe's Smart Phishing Simulations product, particularly in regulated industries and large enterprises prioritizing phishing defense.
- Ninjio Cybersecurity Awareness: Ninjio is a direct competitor in security awareness training, using episodic, story-based animated content aimed at engaging employees. It competes with SoSafe's gamified, story-driven training approach in mid-market accounts.
Broad incumbents
- Proofpoint Security Awareness: Proofpoint is a major cybersecurity incumbent offering security awareness training as part of its broader enterprise security portfolio (email security, DLP, threat intelligence). It competes with SoSafe primarily in large enterprise deals where bundled security suites are preferred over best-of-breed awareness platforms.
- Sophos Phish Threat: Sophos (owned by Thoma Bravo) bundles phishing simulation and awareness training into its broader endpoint and network security platform, competing with SoSafe in mid-market and enterprise accounts where customers prefer an integrated security vendor.
- Microsoft Defender Attack Simulation Training: Microsoft Defender Attack Simulation Training is a free/included phishing simulation and training module bundled with Microsoft 365 Defender. It is a credible free alternative to SoSafe's Smart Phishing Simulations, particularly for SMB and mid-market customers already standardized on the Microsoft ecosystem.
Emerging players
- Curricula: Curricula is an emerging player in security awareness training focused on story-based, engaging learning content for SMB and mid-market customers. It competes with SoSafe's narrative-driven training approach, though at smaller scale and with less enterprise-grade feature breadth.
- Living Security: Living Security is an emerging player in human risk management combining security awareness training with measurable behavioral outcomes. It is comparable to SoSafe's Human Risk OS positioning and competes in enterprise accounts seeking data-driven human risk quantification.
Others
- SANS Institute: SANS Institute is a leading cybersecurity training and certification organization that also offers enterprise security awareness solutions (SANS Security Awareness). While SANS is more known for technical training, its awareness product competes with SoSafe in regulated, compliance-driven enterprise accounts.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights6 records
Customer concentration
SoSafe social profiles
Digital presenceSoSafe compliance and trust
Trust signalCompliance6 records
SoSafe financial estimates
Financial estimateRevenue estimate
Valuation estimate
SoSafe leadership team
Management profileNumber of profiles
Profiles8 records
SoSafe funding detail
Funding detailFunding overview
Funding rounds3 records
Investors4 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
SoSafe M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about SoSafe
What does SoSafe do?
SoSafe provides a behavioral science-based, SaaS security awareness and human risk management platform that combines personalized gamified training, multi-channel phishing simulations, an AI-powered security chatbot, and a Human Risk OS for continuous real-time risk monitoring. The platform is sold primarily to enterprise and mid-market organizations across Europe and selected international markets on a per-user subscription basis, with delivery in 32 languages and full GDPR/ISO 27001/TISAX/SOC 2 compliance from EU-hosted infrastructure.
Is SoSafe a public or private company?
SoSafe is a private company. It is classified as venture growth investor backed and is currently operating.
When was SoSafe founded?
SoSafe was founded in 2018. It employs 251 to 500 people.
Where is SoSafe based?
SoSafe is headquartered in Köln, Germany, in the Europe region.
How does SoSafe make money?
Two revenue lines are on record. SaaS Subscription (Per-User) is the primary driver. The others are enterprise Professional Services.
Who are SoSafe's main competitors?
Direct peers on record are KnowBe4, Hoxhunt, Cofense and Ninjio Cybersecurity Awareness. Broad incumbents are Proofpoint Security Awareness, Sophos Phish Threat and Microsoft Defender Attack Simulation Training. Emerging players are Curricula and Living Security. SANS Institute is listed as an others.
Does SoSafe have an API?
No public API is recorded for SoSafe.
What industry is SoSafe in?
SoSafe's product category is Security Awareness and Human Risk Management Software. Its primary akta.pro industry code is HDADAIAJ, Security Awareness, Training & Compliance Attestation, with a secondary code of HDADAKAB, Email Phishing & BEC Protection. Its NAICS code is 513210 and its SIC code is 7372.