Pistachio

What Pistachio does

Pistachio is an Oslo-headquartered, AI-native cybersecurity software company that sells two products — Presence (insider threat detection via behavioral anomaly analysis across cloud activity) and Practice (security awareness training via AI-generated phishing simulations and scenario-based training). The platform is designed to run fully autonomously after initial activation, with no implementation team or manual configuration required, and delivers training content directly into users' inboxes rather than through a separate learning portal. Its technology stack is anchored by a deep, native integration with Microsoft Entra ID and Microsoft 365, enabling sign-up and license management via Microsoft SSO in under 10 minutes; additional integrations with Gong, GitHub, HubSpot, and Slack mirror customers' actual work environments to contextualize simulations and insider threat detection.

Pistachio operates a hybrid product-led and enterprise field-sales go-to-market. Organizations can self-serve sign up via Microsoft SSO and bill monthly on a per-user subscription with license caps, while a dedicated sales team (Sales Managers Francis Hughes and Oliver Strömberg, Junior Account Executive Diogo Tomaz) closes tailored one-year contracts for larger accounts. Pricing is quote-based and not publicly disclosed for enterprise tiers. The company reports serving 600+ organizations across 16 countries as of April 2025 (up from ~100 organizations across 8 European countries at seed-stage in August 2023), has achieved ISO 27001 certification, and discloses a fourfold year-over-year increase in annual recurring revenue between 2023 and 2024.

Capital structure consists of a €3.25 million seed round led by Signals Venture Capital in August 2023 and a $7 million Series A led by Walter Ventures in April 2025, with participation from Idékapital, Angel Invest, MP PENSJON PK, and J12 Ventures. Pistachio has 11–50 employees, a headquarters in Oslo, and is opening a second office in Valencia to support expansion across Europe and North America. Customer logos include Allente, Avarn Security, Bula, Dæhlie, Gottex, Grieg, Gyldendal, Kari Traa, Les Hôtels de Paris, Moreld, Rikstoto, Widerøe, and Wiersholm, with verified G2 reviews highlighting Microsoft 365 integration and ease of setup.

Name

Pistachio

Legal name

Pistachio

Website

https://pistachioapp.com

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

101–250 employees

Short description

Pistachio is an Oslo-based AI cybersecurity software company that sells automated insider threat detection (Presence) and personalized security awareness training (Practice) to 600+ organizations across 16 countries via a Microsoft 365-anchored product-led and direct enterprise sales motion.

Ownership category

akta.pro rank

Product category

Cybersecurity Awareness and Insider Threat Software

NAICS

Security Systems Services (except Locksmiths) (561621)

SIC

Services-Detective, Guard & Armored Car Services (7381)

akta.pro primary industry

Insider Threat Program Design & Risk Assessments (BPAKADAM)

Keywords

• Security awareness training
• Insider threat detection
• Phishing simulation platform
• Cybersecurity awareness software
• Behavioral anomaly detection

Headquarters

HQ city

Oslo

HQ country

Norway

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Operations

Revenue model

1. Per-User SaaS Subscription: Pistachio charges a fixed per-user subscription fee. Online sign-up results in monthly billing based on the number of users synced in the platform. Organizations can set maximum license caps to prevent overages. Annual one-year contracts are available with tailored pricing for organizations of all sizes, handled directly by the sales team.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels4 records

Core offering

Pistachio provides an AI-driven cybersecurity awareness and insider risk platform delivered as a SaaS product. Its two core offerings, Presence (insider threat detection via behavioral anomaly analysis) and Practice (automated personalized security awareness training with phishing simulations), run on Microsoft 365 and Entra ID with no separate logins and no manual configuration. Customers pay a recurring per-user subscription fee and the product is sold both via self-serve and direct enterprise sales.

Product overview

Pistachio offers a unified platform with two core products: Presence (AI-driven insider threat detection) and Practice (automated security awareness training). The platform integrates natively with Microsoft 365 and Entra ID for SSO and user management, with additional integrations to tools like Gong, Slack, GitHub, and HubSpot. Both products are designed to run fully automated after initial setup, requiring no extra logins or heavy configuration.

Differentiator

Problem solved

Functional benefit

Brands

• Presence: AI-driven insider threat detection tool that monitors cloud activity and identifies unusual behavior patterns without inspecting devices or reporting every move.
• Practice

Products and services

• Pistachio Presence AI-driven insider threat detection for organizations using Microsoft 365, Entra ID, and integrated third-party tools (Gong, GitHub, HubSpot). It learns each organization's behavioral rhythm, highlights abnormal account activity, and surfaces threats without device inspection or productivity tracking, targeting security and IT teams at SMB through enterprise customers.
• Pistachio Practice Automated personalized security awareness training for end users, delivered via email inside the apps employees already use. It includes AI-generated phishing simulations and scenario-based learning, requires no separate logins, and is targeted at organizations that want habit-forming, non-punitive cybersecurity training at scale.

Quantifiable outcome

• Reduces phishing click rates from 33.1% to 4.1% for organizations implementing comprehensive training
• +3 more outcomes

Named customers17 records

Segments3 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration6 records

AI capability6 records

Feature4 records

Partnerships

Four partnerships are on record, tiered core and supporting.

• MicrosoftcoreTechnology or IntegrationDeep native integration with Microsoft Entra ID, Microsoft 365, and Microsoft SSO. Enables 10-minute platform activation with no implementation teams. Pistachio syncs with Entra ID every 30 minutes to maintain accurate active user licenses. This integration is fundamental to Pistachio's product architecture and GTM motion.
• GongsupportingTechnology or IntegrationGong is referenced as an integration partner whose data environment is mirrored by Pistachio to deliver realistic phishing simulations and security content relevant to users' actual workflows.
• GitHubsupportingTechnology or IntegrationGitHub is referenced as an integration partner whose data environment is mirrored by Pistachio for realistic insider threat detection and to deliver contextual security awareness content relevant to developers' actual workflows.
• HubSpotsupportingTechnology or IntegrationHubSpot is referenced as an integration partner that Pistachio's Presence (insider threat detection) integrates with to mirror the organization's actual work environment and identify behavioral abnormalities.

Scale indicators5 records

Recent moves8 records

Expansion highlights5 records

Direct peers

• Hoxhunt: Helsinki-based AI-driven security awareness and phishing simulation platform with a similar product-led, automated, personalized training approach. Closest direct competitor to Pistachio Practice in Europe, with comparable OSINT-style personalization philosophy.
• Cofense: Phishing detection, simulation, and security awareness platform with strong enterprise customer base. Direct competitor in phishing simulations, the core sub-product of Pistachio Practice.
• SoSafe: European (Germany-based) security awareness and phishing simulation platform with a strong focus on behavioral change and automated, gamified training. Closely comparable European competitor to Pistachio Practice in mid-market deals.

Broad incumbents

• KnowBe4: Largest dedicated security awareness training and phishing simulation vendor globally, with broad content library and enterprise field sales. Competes directly with Pistachio Practice for the same IT security buyer budget, but at vastly greater scale.
• Proofpoint Security Awareness: Enterprise security vendor offering security awareness training as part of its broader people-centric security platform. Targets the same CISO buyer as Pistachio but bundles training into a much larger email security and compliance portfolio.
• Microsoft Purview Insider Risk Management: Microsoft's native insider threat detection capability within the M365/Entra ecosystem. The most strategically important competitive threat because it is bundled into the same Microsoft stack Pistachio depends on for distribution.
• Varonis: Data security and insider threat detection platform for cloud and on-prem environments. Competes with Pistachio Presence for the same insider threat and behavioral analytics budget at larger enterprise accounts.
• Mimecast: Email and collaboration security vendor with security awareness training as part of its broader platform. Competes for awareness budget and overlaps with Pistachio on phishing/email-borne human risk reduction.

Emerging players

• Tessian: AI-driven email security platform focused on detecting accidental data loss and insider threats via behavioral analysis. Comparable in AI-driven insider risk detection philosophy, though anchored in email rather than the full M365 activity surface.
• Nudge Security: SaaS security posture and employee security behavior platform that nudges users toward secure practices without heavy controls. Adjacent competitor in behavioral security nudging and a partial alternative to Pistachio's awareness content.

Market position

Strengths4 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/PistachioApp_
• LinkedInlinkedin.com/company/pistachioapp-cybersecurity-training

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds3 records

Investors7 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A1 record

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Pistachio