Avatao
Avatao is a Budapest-based security training platform founded in 2014 that delivers hands-on secure coding labs and phishing awareness training to SMBs and enterprise teams, mapped to ISO 27001, PCI-DSS, SOC 2, NIS2, FedRAMP, and NIST compliance frameworks.
- Company typePrivate
- Founded2014
- HeadquartersBudapest, Hungary
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Avatao does
Avatao (legal entity: Avatao.com Innovative Learning Kft.) is a Budapest-based security training platform founded in 2014 that delivers hands-on, code-based learning exercises to software developers and non-technical employees, with explicit control-level mapping to ISO 27001, PCI-DSS v4.0, SOC 2, NIS2, FedRAMP, and NIST SP 800-53. The platform is web-based, hosted on Google Cloud, and provides a library of 1000+ hands-on challenges across 8-9 programming languages (JavaScript, Python, C#, Java, Go, C/C++, Node.js, Ruby, Kotlin) covering OWASP Top 10, API security, DevSecOps, authentication, and emerging topics such as LLM/AI security. The product is organized into three tiers: Phishing Awareness ($36/user) for non-technical staff, Compliance Training ($120/user) for developers preparing for audits, and Continuous Learning ($360/user) for ongoing engagement with weekly content updates and CTF challenges. Core platform features include role-based learning paths, progress tracking with audit-ready reporting, SSO integration, and phishing simulation capabilities.
The company runs a hybrid go-to-market model: a self-serve e-commerce store at next.avatao.com/store for low-friction SMB and individual purchases, combined with enterprise demo requests and inside-sales engagement that captures compliance requirements, company size, and developer count to qualify larger opportunities. Avatao serves approximately 150+ clients globally, with named enterprise logos including Lufthansa, BlaBlaCar, Dataiku, DPD Group, IriusRisk, EveryMatrix, MoneyPark, and AdNovum, spanning aviation, transportation, logistics, financial services, gaming, and data science. The company is privately held with no disclosed venture capital backing beyond approximately $2.4 million raised across three seed-stage rounds (2017, 2018, 2021) from 212, 500 Global, FastVentures, Speedinvest, and Microsec. Leadership comprises co-founders Mark Felegyhazi (CEO), Gábor Pék (CTO), and Levente Buttyan, with the company maintaining a small 11-50 person team headquartered in Budapest, Hungary. Distribution is primarily EMEA-centric with global reach achieved through the web platform, and the company holds a vendor listing on Gartner's Secure Code Training Tools market with 12 peer reviews.
Avatao firmographics
Firmographics- Name
- Avatao
- Legal name
- Avatao.com Innovative Learning Kft.
- Website
- https://avatao.com
- Company type
- Private
- Founded year
- 2014
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Avatao is a Budapest-based security training platform founded in 2014 that delivers hands-on secure coding labs and phishing awareness training to SMBs and enterprise teams, mapped to ISO 27001, PCI-DSS, SOC 2, NIS2, FedRAMP, and NIST compliance frameworks.
- Ownership category
- akta.pro rank
Avatao industry classification
Industry- Product category
- Cybersecurity Training Software
- NAICS
- Computer Training (611420), Business Schools and Computer and Management Training (6114), Professional and Management Development Training (61143)
- SIC
- Services-Educational Services (8200)
- akta.pro primary industry
- Cybersecurity Technical Skills (Security Engineering, SOC, Pen Testing) (EDABAFAF)
- akta.pro secondary industry
- Security Culture, Policy Acknowledgement & Acceptable Use Training (EDABAGAL)
Keywords
Where Avatao is headquartered
LocationHeadquarters
- HQ city
- Budapest
- HQ country
- Hungary
- HQ region
- Europe
Offices1 record
Markets served
Avatao business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations
Revenue model
- Subscription Licensing: Per-user subscription model with three tiers: Phishing Awareness ($36/user), Compliance Training ($120/user), and Continuous Learning ($360/user). Licenses are purchased in advance and assigned to specific users for the subscription period.
- Enterprise License Packages: Team-based licensing where organizations purchase multiple licenses based on team size. The platform supports grouping learners by role or team for targeted training assignments.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Per seat | Annual | Entry-level phishing awareness training for all employees covering basic cybersecurity fundamentals |
| Per seat | Annual | Hands-on secure coding training for developers preparing for compliance audits |
| Per seat | Annual | Continuous professional development for teams building long-term secure coding habits |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels7 records
Avatao product offering
Product offeringCore offering
Avatao provides a web-based security training platform delivering hands-on, role-based training for software developers and non-technical employees. The platform offers 1000+ interactive coding challenges and exercises mapped to major compliance frameworks including ISO 27001, PCI-DSS, SOC 2, NIS2, FedRAMP, and NIST, enabling organizations to meet compliance audit requirements and reduce security incidents.
Product overview
Avatao is a compliance-focused security training platform offering three integrated training products: Phishing Awareness for non-technical employees, Compliance Training for developers preparing for audits, and Continuous Learning for ongoing secure coding skill development. All three products share a common hands-on exercise library of 1000+ challenges spanning multiple programming languages (Java, Python, JavaScript, C#, Go, C/C++, Node.js, Ruby) and security topics (OWASP Top 10, API Security, DevSecOps). The platform provides role-based learning paths, progress tracking, and audit-ready reporting mapped to compliance frameworks including ISO 27001, PCI-DSS, SOC 2, NIS2, FedRAMP, and NIST.
Differentiator
Problem solved
Functional benefit
Products and services
- Phishing Awareness Security awareness training for non-technical employees covering phishing recognition, social engineering tactics, suspicious links and attachments, secure password practices, and incident response procedures.
- Compliance Training Hands-on secure coding training for developers mapped to compliance frameworks including ISO 27001, PCI-DSS, SOC 2, NIS2, and NIST, featuring exercises in real programming languages.
- Continuous Learning Ongoing cybersecurity learning program for developers featuring bite-sized coding challenges released regularly to reinforce secure coding habits and maintain compliance readiness year-round.
- Security Training Content Library Library of 1000+ hands-on security exercises covering OWASP Top 10, API Security, Web Security, DevSecOps, Authentication & Sessions, Input Validation, Security Logging, and LLM & AI Security, available in 8+ programming languages.
Quantifiable outcome
- 87% of SMBs fail their first compliance audit without proper training (market statistic cited in compliance readiness materials)
- +2 more outcomes
Companies that use Avatao
Customer profileNamed customers8 records
Segments4 records
Ideal customer profiles2 records
Avatao technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability3 records
Feature8 records
Avatao partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- Google Cloudcore infrastructureGoogle Cloud EMEA Limited serves as the hosting service provider for Avatao's platform infrastructure. The platform runs on Google Cloud, providing the underlying compute and infrastructure for the training platform at next.avatao.com. This is a critical technology partnership ensuring platform reliability and performance.
Scale indicators4 records
Recent moves6 records
Expansion highlights5 records
Avatao competitors and assessment
Company assessmentEmerging players
- TryHackMe: TryHackMe provides gamified, hands-on cybersecurity and secure coding learning environments with a large content library, covering similar fundamentals to Avatao's Continuous Learning tier but more consumer/individual-skewing.
- HackerEarth Assessments: HackerEarth provides developer skill assessments and coding challenges with security-adjacent testing content, partially overlapping Avatao's continuous learning and hands-on lab model for developer upskilling.
- Codebashing (Checkmarx): Codebashing, integrated into Checkmarx's application security platform, offers secure coding microlearning for developers using SAST context, overlapping with Avatao's role-based secure coding labs and compliance training for development teams.
Broad incumbents
- Pluralsight: Pluralsight is a broad incumbent in technology skills training with a security/cyber track and skill assessments used by enterprise teams, overlapping with Avatao's developer training and compliance use cases at a broader tech-LMS scale.
- SANS Institute: SANS Institute is a broad incumbent in cybersecurity training and certifications, offering instructor-led and on-demand courses across secure development, incident response, and compliance, overlapping with Avatao's enterprise compliance audience.
Direct peers
- Secure Code Warrior: Secure Code Warrior is the most direct competitor to Avatao, offering hands-on secure coding training with role-based learning paths and compliance mapping for developers, with similar enterprise and SMB customer targets.
- Cybrary: Cybrary is an online cybersecurity training platform covering secure coding, hands-on labs, and compliance content for individual practitioners and enterprise teams, comparable to Avatao's blended developer/security training focus.
- RangeForce: RangeForce delivers hands-on cybersecurity skill development and compliance training through a SaaS platform, competing directly with Avatao's continuous learning and developer-focused training offerings.
- Phished.io: Phished.io is a phishing awareness and security training platform specifically focused on automated phishing simulations and training for SMBs, directly comparable to Avatao's Phishing Awareness tier.
- KnowBe4: KnowBe4 is a direct peer in the phishing awareness and security awareness training category, offering simulated phishing, compliance training, and security culture programs to SMB and enterprise buyers globally.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights6 records
Customer concentration
Avatao social profiles
Digital presenceAvatao compliance and trust
Trust signalCompliance6 records
Avatao financial estimates
Financial estimateRevenue estimate
Valuation estimate
Avatao leadership team
Management profileNumber of profiles
Profiles3 records
Avatao funding detail
Funding detailFunding overview
Funding rounds3 records
Investors5 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Avatao M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Avatao
What does Avatao do?
Avatao provides a web-based security training platform delivering hands-on, role-based training for software developers and non-technical employees. The platform offers 1000+ interactive coding challenges and exercises mapped to major compliance frameworks including ISO 27001, PCI-DSS, SOC 2, NIS2, FedRAMP, and NIST, enabling organizations to meet compliance audit requirements and reduce security incidents.
Is Avatao a public or private company?
Avatao is a private company. It is classified as venture growth investor backed and is currently operating.
When was Avatao founded?
Avatao was founded in 2014. It employs 11 to 50 people.
Where is Avatao based?
Avatao is headquartered in Budapest, Hungary, in the Europe region.
How does Avatao make money?
Two revenue lines are on record. Subscription Licensing is the primary driver. The others are enterprise License Packages.
Who are Avatao's main competitors?
Emerging players on record are TryHackMe, HackerEarth Assessments and Codebashing (Checkmarx). Broad incumbents are Pluralsight and SANS Institute. Direct peers are Secure Code Warrior, Cybrary, RangeForce, Phished.io and KnowBe4.
Does Avatao have an API?
No public API is recorded for Avatao.
What industry is Avatao in?
Avatao's product category is Cybersecurity Training Software. Its primary akta.pro industry code is EDABAFAF, Cybersecurity Technical Skills (Security Engineering, SOC, Pen Testing), with a secondary code of EDABAGAL, Security Culture, Policy Acknowledgement & Acceptable Use Training. Its NAICS code is 611420 and its SIC code is 8200.