Secure Practice

What Secure Practice does

Secure Practice AS is a Norwegian SaaS company, founded in 2017 and headquartered in Trondheim, that operates a privacy-first human cyber risk management platform for enterprise and public-sector buyers. The platform bundles five integrated modules: MailRisk (real-time ML-based email threat reporting and classification, integrated with Outlook and Gmail), Simulated Phishing (email, SMS, and voice attack simulations), Gamified E-learning (personalized training content with points, certificates, and leaderboards), PrepJam (live, branching interactive cybersecurity exercises scalable to 500 participants), and Human Risk Metrics (anonymized behavioral analytics built on 100+ configurable risk factors). Architecture is designed around guaranteed employee anonymity using a joint-controllership legal framework, EU/EEA-only cloud hosting, ISO/IEC 27001 compliance, and GDPR-by-design controls validated through the Norwegian Data Protection Authority's AI Sandbox.

The company sells on a modular subscription basis at approximately €4 per user per month for a typical bundle, with annual billing and custom quotes for larger deployments. Go-to-market is sales-led direct to enterprise, complemented by a channel partner program for managed service providers (MSPs), security consultancies, and resellers. Named customers include DNB (Norway's largest financial services group, with 10,000+ managers trained), Intility (a major Nordic MSP that bundles MailRisk into its managed offering), Storebrand, and Tussa, with the company reporting active deployments in 30+ countries. The business has been primarily grant-funded (EU/ECCC, Innovation Norway, Research Council of Norway, EEA and Norway Grants) with Microsoft for Startups ecosystem support, and operates with a small team (1–10 employees).

Name

Secure Practice

Legal name

Secure Practice AS

Website

https://securepractice.co

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

1–10 employees

Short description

Secure Practice AS is a Norwegian SaaS company providing a privacy-first human cyber risk management platform, combining ML-based email threat reporting, phishing simulation, gamified e-learning, and anonymized behavioral analytics for enterprises in 30+ countries.

Ownership category

akta.pro rank

Product category

Cybersecurity Training / Human Risk Management Software

NAICS

Computer Training (61142)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Cybersecurity Training & Awareness Programs (BPAEANAF)

akta.pro secondary industries

Security Awareness & Phishing Simulation (Email/Collab-focused) (HDADAKAJ), Endpoint, Email & Web Safe-Use Practices Training (EDABAGAF), Cybersecurity Learning Platforms (EDAFANAF)

Keywords

• Cybersecurity training software
• Human risk management
• Security awareness platform
• Phishing simulation software
• Email threat reporting

Headquarters

HQ city

Trondheim

HQ country

Norway

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations

Revenue model

1. SaaS Subscription: Subscription-based pricing model calculated per user per month. Customers select from product modules (MailRisk, Phishing, E-learning, PrepJam) with Human Risk Metrics included in the full bundle. Pricing varies based on product combination and contract terms, with annual billing typically implied.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels5 records

Core offering

Secure Practice sells a privacy-first SaaS human risk management platform for enterprise cybersecurity training. Its offering bundles five integrated modules: MailRisk for one-click suspicious email reporting and automated threat analysis; Simulated Phishing for email/SMS/voice attack simulations; Gamified E-learning for personalized training content; PrepJam for live interactive cybersecurity exercises; and Human Risk Metrics for anonymized behavioral analytics across the platform. The product is sold primarily to enterprise IT, security, and HR teams on a per-user subscription basis.

Product overview

Secure Practice is a privacy-focused human risk management SaaS platform combining cybersecurity tools, educational content, and training services. The platform comprises five integrated modules: MailRisk (email threat reporting), Simulated Phishing (multi-channel attack simulation), Gamified E-learning (personalized training content), PrepJam (interactive cybersecurity exercises), and Human Risk Metrics (anonymized behavioral insights). The products work together through shared behavioral data and targeting capabilities - Human Risk Metrics aggregates insights from all activities to enable personalized learning journeys, while MailRisk data feeds into phishing simulations and targeted training. Human Risk Metrics is available only with the full platform bundle.

Differentiator

Problem solved

Functional benefit

Products and services

• MailRisk Email reporting and analysis tool that provides one-click reporting of suspicious emails directly from Outlook and Gmail, with real-time machine-learning threat classification for phishing, malware, fraud, impersonation, and spam, plus instant automated feedback to employees who report. Targets enterprise IT and security teams seeking to increase threat reporting rates and reduce manual helpdesk triage.
• Simulated Phishing

Quantifiable outcome

• Up to 50x increase in email threat reporting rates
• +3 more outcomes

Named customers4 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration7 records

AI capability8 records

Feature5 records

Partnerships

One partnership is on record.

• Norwegian Data Protection Authority (Datatilsynet)coreStrategic or Co-development PartnerRegulatory collaboration through AI Sandbox program. Engaged in extensive workshops covering legal, technical, and socio-technical aspects of human cyber risk innovation. Conducted joint Data Protection Impact Assessment (DPIA) resulting in privacy-by-design safeguards.

Scale indicators5 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Sophos Phish Threat: Phishing simulation and awareness training offered as part of the broader Sophos endpoint/network security portfolio. Competes with Secure Practice via bundling into existing Sophos customer contracts, often at lower marginal price.
• Proofpoint Security Awareness: Enterprise security awareness suite bundled with Proofpoint's broader email security and threat intelligence platform. Overlaps with Secure Practice's MailRisk and phishing simulation capabilities but as part of a much larger portfolio targeting Fortune-class buyers.
• Microsoft Attack Simulation Training: Built-in phishing simulation and training within Microsoft Defender for Office 365, included for many M365 enterprise customers. The most aggressive price-disrupting competitor — Secure Practice must justify premium positioning against 'good enough' native functionality.
• KnowBe4: Largest pure-play security awareness and simulated phishing vendor globally, offering training content, phishing simulations, and compliance modules. Competes with Secure Practice across the entire awareness category but with vastly greater content library, sales coverage, and content production budgets.

Direct peers

• Cofense: Phishing detection, reporting, and simulation specialist whose Cofense Reporter button is the closest functional analogue to Secure Practice's MailRisk. Targets the same IT/SOC buyer personas with a focus on phishing-driven human detection.
• Hoxhunt: Helsinki-based cybersecurity awareness and phishing simulation platform with a behavior-change, gamified methodology and strong Nordic enterprise presence. Most directly comparable to Secure Practice on product philosophy (positive reinforcement, measurable behavior change) and target customer base (regulated European enterprises).
• AwareGO: Iceland-based security awareness and human risk management vendor with a strong privacy and behavior-change narrative across Europe. Comparable in size, Nordic footprint, and philosophy to Secure Practice, often seen as the closest rival in the EMEA mid-market.

Emerging players

• CybSafe: UK-based human risk and security behavior platform with a metrics-driven, science-led approach overlapping Secure Practice's Human Risk Metrics philosophy. Comparable on buyer (CISO, risk, HR) and methodology, with stronger US presence.
• Living Security: US-based gamified and experiential security awareness and human risk platform. Comparable on engagement-oriented training methodology (games, exercises, simulations) but with a North American go-to-market focus.

Others

• SANS Institute: Global cybersecurity training and certification body whose SecAware program provides awareness content and assessments often used in conjunction with platforms like Secure Practice. Comparable as content/training ecosystem participant rather than direct product competitor.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• YouTubevimeo.com/securepractice
• LinkedInlinkedin.com/company/securepractice
• Xx.com/securepractice
• Facebookfacebook.com/sikkerpraksis

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Secure Practice