SocialProof Security
SocialProof Security is a San Francisco-based cybersecurity training firm, founded in 2017, that delivers social engineering penetration testing, customized security awareness training videos, keynotes, workshops, and red team training to large enterprise and government clients including Google, Meta, NASA, JPMorgan, and the United Nations.
- Company typePrivate
- Founded2017
- HeadquartersSan Francisco, United States
- Headcount1–10
- GTM typeB2B
- OfferingServices
What SocialProof Security does
SocialProof Security is a privately held, founder-led cybersecurity training and awareness company headquartered in San Francisco, founded in 2017. The firm positions itself as "friendly hackers" that conduct social engineering engagements to expose human security vulnerabilities and train client personnel to defend against them. Its customer base spans large enterprises across technology (Google, Meta, Uber, Twitter/X, WhatsApp, Salesforce, Cisco, Palo Alto Networks, Akamai, Duo Security, Trend Micro), financial services (JPMorgan Chase, Prudential, Personal Capital, Diamond Credit Union, Northwest Bank), healthcare (Medtronic, St. Jude Children's Research Hospital), government and intergovernmental (NASA, United Nations), retail (Lululemon), consumer goods (Kimberly-Clark), utilities (National Grid), education (Georgetown, UT Austin), and nonprofit (EFF) sectors.
SocialProof Security firmographics
Firmographics- Name
- SocialProof Security
- Legal name
- SocialProof Security
- Website
- https://socialproofsecurity.com
- Company type
- Private
- Founded year
- 2017
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- SocialProof Security is a San Francisco-based cybersecurity training firm, founded in 2017, that delivers social engineering penetration testing, customized security awareness training videos, keynotes, workshops, and red team training to large enterprise and government clients including Google, Meta, NASA, JPMorgan, and the United Nations.
- Ownership category
- akta.pro rank
SocialProof Security industry classification
Industry- Product category
- Security Awareness Training
- NAICS
- Computer Training (61142), Professional and Management Development Training (611430)
- SIC
- Services-Educational Services (8200)
- akta.pro primary industry
- Cybersecurity Training & Awareness Programs (BPAEANAF)
- akta.pro secondary industries
- Fraud Prevention & Identity Theft / Account Takeover Awareness (EDABAGAO), Security Culture, Policy Acknowledgement & Acceptable Use Training (EDABAGAL), Security Awareness, Training & Compliance Attestation (HDADAIAJ)
Keywords
Where SocialProof Security is headquartered
LocationHeadquarters
- HQ city
- San Francisco
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
SocialProof Security business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Marketing or Sales, Technology or R&D, Operations
Revenue model
- Security Awareness Training Videos: Sale of short 2-3 minute video training modules covering cybersecurity topics with music-based learning approach. SCORM packages sold as annual subscriptions with quarterly content updates.
- Live Training Sessions: Customized, role-based, hands-on interactive training sessions for organizations. Can be conducted as all-hands events or individualized team events. Training durations range from 60 minutes to full day sessions.
- Keynote Speeches: Security awareness and social engineering keynotes for conferences, sales kickoffs, panels, Q&A, and AMA sessions. Topics include 'Inside the Mind of a Hacker', 'How I Would Hack You & How to Stop Me', and 'The State of Social Engineering'.
- Social Engineering Penetration Testing: Social engineering testing via phone, email, chat, SMS, social media, and account takeover. Includes full report, executive briefing, and recommendations.
- Workshops & Team Building: Hands-on workshops including Social Engineering OSINT and pretexting CTF, vishing and phishing development, and hacking competition team building.
- Social Engineering Protocol Update Workshop: Hands-on workshop focusing on updating identity verification methods to reduce risk of account takeover, ransomware, financial and data loss.
- Red Team Training: Training for infosec, red teams, blue teams, customer support, IT support, and helpdesk teams on OSINT, vishing, phishing, pretexting and social engineering skillsets.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Customized enterprise training engagements |
Go-to-market motion3 records
Distribution channels2 records
Marketing channels8 records
SocialProof Security product offering
Product offeringCore offering
SocialProof Security sells enterprise security awareness training focused on defending against social engineering attacks. Its core product is a SCORM-packaged music and spoken-word training video library (2-3 minute modules covering phishing, ransomware, passwords, social media, MFA, and social engineering) sold via annual subscriptions with quarterly content updates. This is reinforced by customized live role-based training sessions, social engineering penetration testing, keynote speeches, hands-on workshops, red team training, and live AI deepfake / hacking demonstrations for enterprise clients.
Product overview
SocialProof Security is a cybersecurity training and awareness company offering a portfolio of services centered on social engineering defense. The core offerings include music and spoken-word Security Awareness Training Videos (SCORM packages), Live Social Engineering Prevention Training, and Social Engineering Penetration Testing. These are complemented by speaking/keynote engagements, hands-on workshops (OSINT/CTF, vishing, phishing development, team building), Red Team Training, and live hacking/AI deepfake demonstrations. The company positions itself as 'friendly hackers' who infiltrate client organizations to strengthen their human security defenses through education, engagement, and practical skill-building.
Differentiator
Problem solved
Functional benefit
Products and services
- Security Awareness Training Videos (SCORM Library) Annual subscription to a 2-3 minute music and spoken-word training video library covering phishing, ransomware/malware, passwords, social media, social engineering, and MFA, delivered as customizable SCORM packages compatible with enterprise LMS systems. Designed for enterprise security awareness programs that need refreshing, easy-to-deploy content.
- Live Social Engineering Prevention Training Customized, role-based, hands-on interactive training sessions delivered to enterprise audiences to mitigate human security risk. Sessions range from 30-minute quick trainings to full-day deep dives and can be delivered as all-hands or team-specific events.
- Social Engineering Penetration Testing Authorized social engineering testing conducted via phone, email, chat, SMS, social media, and account takeover. Delivered with a full report, executive briefing, and prioritized recommendations.
- Social Engineering & Security Awareness Keynotes Keynote presentations and talks for conferences, sales kickoffs, panels, Q&A, and AMA sessions covering the human element of security and the tactics used in modern social engineering attacks.
- Social Engineering Protocol Update Workshop Hands-on workshop that helps organizations modernize their identity verification methods to mitigate account takeover, ransomware, and financial / data loss risk.
- Live Hacking, AI Deepfake & Social Engineering Demos Live demonstrations conducted by Rachel Tobac in which a volunteer is targeted, a pretext is developed, and a social engineering campaign is prepared with recommendations, including a live AI deepfake (voice cloning) demonstration. Delivered as webinars, in-person events, or media appearances.
- Social Engineering & Hacking Workshops Workshop bundle including Social Engineering OSINT & Pretexting Capture-the-Flag, a Vishing & Phishing Development workshop, and a Hacking Competition Team Building workshop.
- Red Team Training Hands-on training program that upskills Infosec, Red, Blue, Customer Support, IT Support, and Helpdesk teams on OSINT, vishing, phishing, pretexting, and broader social engineering techniques.
- eBook: The Hacker's Guide to Securing Your Org Free eBook covering how cyber criminals use principles of persuasion to manipulate targets, how to catch attackers in the act, threat modeling fundamentals, and AI's impact on the future of hacking and defense.
Quantifiable outcome
- Social engineering attacks cost organizations $4.47M per attack on average (IBM, Cost of Data Breach Report) - training can significantly reduce this risk
Companies that use SocialProof Security
Customer profileNamed customers28 records
Segments5 records
Ideal customer profiles3 records
SocialProof Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature3 records
SocialProof Security partnerships and signals
Strategic signalScale indicators3 records
Recent moves6 records
Expansion highlights5 records
SocialProof Security competitors and assessment
Company assessmentBroad incumbents
- Terranova Security: Terranova Security offers multilingual security awareness training content and phishing simulation for large enterprises and government — directly comparable to SocialProof on SCORM-style awareness content for regulated buyers.
- Proofpoint Security Awareness: Proofpoint bundles security awareness training (formerly Wombat) into its broader threat protection suite, competing for the same enterprise security awareness dollars as SocialProof but as part of a much larger email and GRC platform.
- SANS Institute: SANS Institute delivers technical cybersecurity training and an enterprise security awareness platform (SecAware), overlapping SocialProof's training-and-awareness offering — notably, SANS is itself a SocialProof client, validating overlap in buyer mind.
Direct peers
- Living Security: Living Security combines human risk assessment, engaging training content, and cyber escape-room experiences for enterprises — an analogous awareness-plus-experiential positioning to SocialProof's training-plus-live-demo model.
- Ninjio: Ninjio produces short, narrative-driven security awareness episodes for enterprises — closely analogous to SocialProof's music/spoken-word video approach in terms of bite-size, story-based adult-learning content.
- Curricula: Curricula sells short, engaging animated security awareness training content to SMB and mid-market — the closest format competitor to SocialProof's music- and narrative-based video modules aimed at non-technical employees.
- Cofense: Cofense specializes in phishing defense, phishing simulation, and security awareness — closely aligned with SocialProof's phishing-and-social-engineering defense training focus and enterprise customer base.
- Hoxhunt: Hoxhunt is an AI-driven security awareness and phishing simulation platform with a gamified, behavior-change focus — directly comparable to SocialProof's emphasis on engaging, repeated employee training to reduce human security risk.
- KnowBe4: KnowBe4 is the dominant security awareness training and phishing simulation platform, selling the same combination of SCORM-style training content, live-style simulations, and enterprise LMS integrations that SocialProof offers — the closest direct competitor for both subscription video content and social engineering-focused training.
Emerging players
- Phished: Phished is an AI-driven phishing simulation and security awareness platform focused on behavioral change — a comparable emerging vendor competing for the same SMB/mid-market security awareness budget as SocialProof.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights6 records
Customer concentration
SocialProof Security social profiles
Digital presenceSocialProof Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
SocialProof Security leadership team
Management profileNumber of profiles
Profiles2 records
SocialProof Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
SocialProof Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about SocialProof Security
What does SocialProof Security do?
SocialProof Security sells enterprise security awareness training focused on defending against social engineering attacks. Its core product is a SCORM-packaged music and spoken-word training video library (2-3 minute modules covering phishing, ransomware, passwords, social media, MFA, and social engineering) sold via annual subscriptions with quarterly content updates. This is reinforced by customized live role-based training sessions, social engineering penetration testing, keynote speeches, hands-on workshops, red team training, and live AI deepfake / hacking demonstrations for enterprise clients.
Is SocialProof Security a public or private company?
SocialProof Security is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was SocialProof Security founded?
SocialProof Security was founded in 2017. It employs 1 to 10 people.
Where is SocialProof Security based?
SocialProof Security is headquartered in San Francisco, United States, in the North America region.
How does SocialProof Security make money?
Seven revenue lines are on record. Security Awareness Training Videos are the primary driver. The others are live Training Sessions, keynote Speeches, social Engineering Penetration Testing, workshops & Team Building, social Engineering Protocol Update Workshop and red Team Training.
Who are SocialProof Security's main competitors?
Broad incumbents on record are Terranova Security, Proofpoint Security Awareness and SANS Institute. Direct peers are Living Security, Ninjio, Curricula, Cofense, Hoxhunt and KnowBe4. Phished is listed as an emerging player.
Does SocialProof Security have an API?
No public API is recorded for SocialProof Security.
What industry is SocialProof Security in?
SocialProof Security's product category is Security Awareness Training. Its primary akta.pro industry code is BPAEANAF, Cybersecurity Training & Awareness Programs, with a secondary code of EDABAGAO, Fraud Prevention & Identity Theft / Account Takeover Awareness. Its NAICS code is 61142 and its SIC code is 8200.