INFIMA

What INFIMA does

INFIMA Security Inc. is a private Orlando-based software company founded in 2017 by college roommates Joel and Kevin, operating a multi-tenant human risk management and security awareness training (SAT) platform sold 100% through managed service providers (MSPs). The company pivoted from a broader cybersecurity offering to specialized SAT in January 2020 and committed exclusively to the MSP channel in January 2021, foreclosing direct end-user sales to protect partner relationships and margin.

The platform is built around a closed-loop human risk management model: each user's 0–1000 risk score is computed from training completion, phishing simulation results, real phishing reports, credential and dark-web breach exposure, and role sensitivity, with weights grounded in behavioral-science principles (Kahneman's two-system model). Scores update continuously as new activity is recorded, and the same loop drives targeted training and phishing assignments whose outcomes re-measure risk. Adjacent product modules include native dark web monitoring with automated user remediation, compliance framework mapping to 18+ regulatory regimes (CMMC, HIPAA, PCI-DSS, etc.) with audit-ready evidence collection, interactive training content with progress gating and realistic mockups, end-user learning portal, scheduled phishing, and a REST Reporting API that also powers the ConnectWise Security 360 integration. Native integrations span ConnectWise PSA, Datto Autotask, HaloPSA, Drata, Microsoft 365 (Graph directory sync and email delivery), and Google Workspace (Gmail API), with infrastructure hosted on AWS using AES-256 at-rest and TLS 1.2+ in-transit encryption; the company is SOC 2 Type II certified.

Commercial mechanics are per-user/per-seat monthly subscription billing with no seat minimums and month-to-month flexibility, positioned against enterprise competitors that impose annual commitments and seat floors. MSPs white-label the platform under their own brand, manage all client tenants from one console, and use the PSA integrations for automated user-count sync and billing. Pricing is not publicly disclosed. Acquisition is demo-led (personalized walkthroughs) supplemented by a partner referral program, content marketing including comparison pages versus competitors such as KnowBe4, and MSP community engagement. The company remains a micro-cap, with disclosed headcount of 1–10 employees and no external funding disclosed in available materials.

Name

INFIMA

Legal name

INFIMA Security Inc.

Website

https://infimasec.com

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

11–50 employees

Short description

INFIMA is a multi-tenant security awareness training and human risk management platform sold 100% through managed service providers (MSPs), offering per-user subscription pricing with PSA integrations, dark web monitoring, and compliance framework tracking for SMB clients.

Ownership category

akta.pro rank

Product category

Security Awareness Training Software

NAICS

Computer Systems Design and Related Services (54151), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Managed Security Services (MSSP) & 24/7 SOC Operations (BPAKAHAA)

Keywords

• Security awareness training
• Phishing simulation platform
• Human risk management
• MSP channel software
• Compliance framework tracking

Headquarters

HQ city

Orlando

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Operations, Marketing or Sales, Infrastructure, Supply Chain

Revenue model

1. Per-User/Per-Seat Subscription: Subscription-based pricing charged per user or endpoint device. Mid-month additions are pro-rated on next bill. Mid-month cancellations still incur full monthly cost. Supports per-tenant invoicing for MSP partners.
2. White-Label Resale: MSP partners white-label the platform under their own brand and resell security awareness training as a service to their clients. Partners maintain client relationships and margin.

Pricing tiers

Go-to-market motion2 records

Distribution channels1 record

Marketing channels5 records

Core offering

INFIMA sells a multi-tenant human risk management SaaS platform built exclusively for Managed Service Providers (MSPs). The platform delivers security awareness training, phishing simulations, dark web monitoring, and compliance framework mapping as a single integrated product, with a per-user risk score that updates continuously and rolls up across the MSP's entire client book in one white-labeled console.

Product overview

INFIMA Security offers a multi-tenant human risk platform built exclusively for MSPs, combining three integrated capabilities — Human Risk Management, Compliance & Frameworks, and Dark Web Monitoring — sitting on top of a shared operational layer of security awareness training, phishing simulations, and reporting. The core architecture is a single closed loop: each user's risk score is computed from their training completion, phishing simulation results, real phishing reports, credential breach exposure, and role; that score drives targeted training and phishing assignments; and the results feed back into a re-measured score. Compliance evidence collects automatically as the program runs. All capabilities are delivered through a white-labeled, multi-tenant console where MSPs manage their entire book of business from one login.

Differentiator

Problem solved

Functional benefit

Products and services

• Human Risk Management Per-user risk scoring platform that computes a 0–1000 risk score from training completion, phishing simulation results, real phishing reported, credential/breach exposure, and role sensitivity. Rolls up across all clients managed by the MSP into a single multi-tenant console with signal-level transparency.
• Compliance & Frameworks Compliance framework tracking that maps training, phishing, and policy activity to 18+ regulatory frameworks (CMMC, HIPAA, PCI DSS, and others), building audit-ready evidence automatically as the program runs.
• Dark Web Monitoring Breach database monitoring that detects when a user's credentials appear in known data breaches, notifies the affected user with guided remediation, tracks acknowledgement, and feeds the result into the user's risk score.
• Security Awareness Training Interactive, behavioral-science-grounded security awareness training with active learning elements, progress gating, and realistic mockups. Automated assignment based on training cadence and user risk level, with a NIST-aligned baseline (Security Awareness Foundations) running automatically on directory sync.
• Phishing Simulations Automated phishing simulation engine that sends phishing tests to users, tracks clicks and reports, and supports behavior-based remediation. Includes a phish-reporting button add-in for users to report simulated and real phishing, with refreshable phishing templates and landing pages supporting credential collection and attachment opening tests.
• Reporting API REST API providing programmatic access to partner data, client data, user records, training results, phishing results, and report generation using X-API-Key authentication. Powers the ConnectWise Security 360 integration and custom partner reporting dashboards.

Quantifiable outcome

• 600,000+ false clicks prevented YTD
• +4 more outcomes

Named customers9 records

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration6 records

AI capability3 records

Feature6 records

Partnerships

Eight partnerships are on record, tiered core.

• HaloPSAcoreTechnology or Integration · 2 December 2025Integration with Halo PSA for automated user count syncing and subscription-based billing. Daily overnight syncs keep user counts accurate. Creates subscriptions automatically when client is mapped. Pro-rata support for mid-cycle additions.
• ConnectWisecoreTechnology or IntegrationPSA integration for automated user count sync to ConnectWise agreements for accurate billing. Also integrates with ConnectWise Security 360.
• Datto AutotaskcoreTechnology or IntegrationPSA integration with Datto Autotask for nightly user count synchronization to keep Autotask contracts up-to-date.
• Microsoft 365coreTechnology or IntegrationDirectory sync and email delivery through Microsoft Graph - no whitelisting required. Integration simplifies deployment for MSPs with M365 clients.
• Google WorkspacecoreTechnology or IntegrationDirectory sync and email delivery through Gmail API. Supports Google Groups and Organizational Units for granular sync.
• Amazon Web Services (AWS)coreTechnology or IntegrationInfrastructure hosting provider. Customer data encrypted at rest using AES-256 and in transit using TLS 1.2+. Database encrypted at rest managed through AWS with appropriate security configurations.
• StripecoreTechnology or IntegrationFinance and payments processing for subscription billing.
• Google Workspace (Google LLC)coreTechnology or IntegrationEmail delivery service for sending training invitations, phishing simulations, and notifications.

Scale indicators7 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• KnowBe4: Largest independent security awareness training and phishing simulation platform. INFIMA maintains an explicit 'INFIMA vs KnowBe4' comparison page, making KnowBe4 the primary direct competitor targeting the same MSP-and-SMB channel.
• Hoxhunt: Enterprise security behavior and human risk platform combining training, phishing simulations, and risk scoring. Comparable in that it sells a closed-loop human risk product, though Hoxhunt historically focuses on larger enterprises rather than MSP-led SMB delivery.
• Curricula: Security awareness training platform focused on engaging, story-driven content. Comparable as a SAT competitor in the SMB/MSP segment, though less differentiated on multi-tenant MSP operations than INFIMA.
• NINJIO: Security awareness training provider offering animated episodes and phishing simulations, with an MSP partner program. Competes for the same MSP-driven SMB awareness budget as INFIMA.
• Terranova Security: Security awareness and phishing simulation vendor with multilingual content and compliance focus. Comparable as a SAT competitor, particularly for organizations with regulatory-driven training requirements.

Broad incumbents

• Proofpoint Security Awareness: Broad incumbent offering security awareness training as part of a larger people-centric security portfolio. Competes with INFIMA for MSP and enterprise awareness budget but is part of a much wider product suite rather than an MSP-native platform.
• Sophos Phish Threat: Phishing simulation and awareness offering from Sophos, sold primarily through MSPs as part of the broader Sophos portfolio. Competes in the same MSP channel but bundled with Sophos's larger endpoint/network stack.
• Microsoft Defender for Office 365 Attack Simulation Training: Microsoft's built-in phishing simulation and awareness training included with M365 licensing. Represents a baseline free alternative that MSPs can already enable for clients, competing with INFIMA on price for M365-centric SMBs.
• Mimecast Awareness Training: Awareness training module within Mimecast's broader email security and resilience platform. Competes for MSP attention but is typically sold as part of an email-security bundle rather than as a standalone MSP-native platform.

Emerging players

• Phished: AI-driven security awareness and phishing platform with a strong European MSP partner base. Comparable as an emerging SAT/human risk player targeting the managed service channel, with similar platform-led positioning.

Market position

Strengths4 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/infimasec

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about INFIMA