RiskSight
- Company typePrivate
- Founded2016
- HeadquartersTallinn, Estonia
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What RiskSight does
RiskSight OÜ is a Tallinn-headquartered Estonian private limited company that builds cybersecurity training and awareness platforms for enterprise and government buyers. Originally founded in 2016 as CybExer Academy and rebranded to RiskSight in January 2023, the company delivers a framework-based e-learning and risk assessment platform aligned to standards including NIST, ISO 27001, PCI DSS, and NIS2, paired with STRATEX, its proprietary tabletop exercise software originally piloted with Microsoft. A free sub-brand, MyCyberHygiene, addresses individual end-user hygiene. The platform combines framework-mapped training modules, automated phishing and resilience testing, and customizable crisis simulation exercises into a single integrated offering.
RiskSight firmographics
Firmographics- Name
- RiskSight
- Legal name
- RiskSight OÜ
- Website
- https://risksight.io
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Ownership category
- akta.pro rank
RiskSight industry classification
Industry- Product category
- Cybersecurity Awareness and Training Software
- NAICS
- Investigation and Security Services (5616)
- SIC
- Services-Detective, Guard & Armored Car Services (7381)
- akta.pro primary industry
- Security Consulting, Risk Assessment & Security Program Design (BPABAMAE)
- akta.pro secondary industries
- Insider Threat Program Design & Risk Assessments (BPAKADAM), Threat Intelligence Services (BPAEADAC), Vulnerability Management, Pen Testing & Attack Surface Management (ASM) (HLACAJAN)
Keywords
Where RiskSight is headquartered
LocationHeadquarters
- HQ city
- Tallinn
- HQ country
- Estonia
- HQ region
- Europe
Offices1 record
Markets served
RiskSight business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Others
Revenue model
- E-Learning & Risk Assessment Subscriptions: Ongoing access to cybersecurity awareness, compliance, and custom e-learning courses delivered through the company's training platform, typically sold on a per-seat or organizational license basis.
- Training & Exercise Services: Strategic cybersecurity exercises, NIS2 cybersecurity exercises, and classroom trainings delivered as professional services, often bundled with platform access for comprehensive risk management programs.
- Phishing & Resilience Testing: Customized phishing campaigns and resilience testing services that assess organizational maturity against social engineering attacks.
- Custom Content & Consultancy: Custom solutions including consultancy, custom content creation, and content provision for customers' own learning management systems.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Tailored enterprise pricing based on organization size and scope |
Go-to-market motion1 record
Distribution channels4 records
Marketing channels5 records
RiskSight product offering
Product offeringCore offering
RiskSight provides framework-based cybersecurity awareness e-learning, compliance training, phishing simulation campaigns, and strategic cybersecurity tabletop exercises through its proprietary STRATEX platform. The offerings target organizations across Energy, Finance, and Healthcare sectors of varying sizes, with governance alignment to ISO 27001, NIS2, and PCI DSS, delivered across multiple languages and combined with continuous risk assessment.
Product overview
RiskSight is a framework-based training platform company specializing in cybersecurity awareness and strategic cybersecurity exercises. The portfolio consists of: E-Learning & Risk Assessment offerings (Cyber Security Awareness Training, Compliance Training, Custom Courses); Trainings & Exercises (Strategic Cybersecurity Exercises, NIS2 Cybersecurity Exercises, Classroom Trainings); Security & Orchestration (Phishing Awareness Training, Resilience Testing Phishing); and Additional Services (Custom Solutions, consultancy). The company offers the STRATEX automated tabletop exercise software and provides a free consumer-focused offering called MyCyberHygiene. Formerly known as CybExer Academy, the company rebranded in January 2023 while maintaining all products, services, and personnel.
Differentiator
Problem solved
Functional benefit
Brands
- STRATEX: An automated tabletop exercise software platform used for strategic cybersecurity exercises and simulations.
- MyCyberHygiene
Products and services
- Cyber Security Awareness Training
- Strategic Cybersecurity Exercises
- Compliance Training
- Awareness Training Phishing (Phishing Campaigns)
- Classroom Trainings
- Custom Courses
- NIS2 Cybersecurity Exercises
- Resilience Testing Phishing
- Custom Solutions
- STRATEX
- MyCyberHygiene
Quantifiable outcome
- Training for ~500 people over 7 years with measurably decreasing risk levels (as reported by Bigbank AS)
- +2 more outcomes
Companies that use RiskSight
Customer profileNamed customers5 records
Segments6 records
Ideal customer profiles5 records
RiskSight technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature4 records
RiskSight partnerships and signals
Strategic signalPartnerships
19 partnerships are on record, tiered core and minor.
- ECYBRIDGE ConsortiumcoreRiskSight is an active member of the ECYBRIDGE project (2024-2025), focused on cybersecurity in civil-military cooperation. The company is leading Work Package 8, which includes 4 training events designed to strengthen synergies between civil and defence cybersecurity sectors across Europe. Partners include Constanta Maritime University, Safetech Innovations, Euro-Atlantic Resilience Centre, Baltic Defence College, BIT SENTINEL, InnovX, ICI Bucharest, CYSCOE, Cyber Dacians, Nikola Vaptsarov Naval Academy, and Military Technical Academy Ferdinand I.
- ISSPminorISSP is listed as an official partner of RiskSight, distributing or reselling RiskSight's cybersecurity training and awareness solutions.
- BytelifeminorBytelife is an official RiskSight partner providing localized cybersecurity training delivery, particularly active in the Estonian market.
- Cyber8labminorCyber8lab is an official RiskSight partner, contributing to the distribution of RiskSight's training solutions.
- AstrobalticsminorAstrobaltics serves as an official RiskSight partner in the Baltic region.
- Constanta Maritime UniversitycoreConstanta Maritime University is both an ECYBRIDGE project partner and an official RiskSight partner, hosting ECYBRIDGE Training Event 1 in Constanta, Romania (May 2025).
- CoursyminorCoursy is listed as an official RiskSight partner for delivering or distributing cybersecurity training solutions.
- O2itsminorO2its is an official RiskSight partner operating in the Czech market.
- OixiominorOixio is an official RiskSight partner contributing to the distribution of training solutions in the Baltic/Nordic region.
- CyberTexminorCyberTex is an official RiskSight partner for cybersecurity training distribution.
- BlueITminorBlueIT is an official RiskSight partner based in Estonia, providing localized training delivery.
- NexarisminorNexaris is listed as an official RiskSight partner, contributing to market reach in the Portuguese region.
- MicrosoftcoreRiskSight and Microsoft conducted a pilot strategic decision-making exercise using the STRATEX platform with Microsoft employees. The collaboration aimed to raise cyber awareness and provide a foundation for discussions on relevant and controversial cybersecurity topics, with positive feedback for further development.
- CR14coreCR14 contracted RiskSight to conduct a cybersecurity tabletop exercise for Goldilock Secure Limited under the NATO DIANA Accelerator Programme, focusing on decision-making and deployment of Goldilock's Drawbridge microgrid disconnection devices.
- Goldilock Secure LimitedminorGoldilock Secure Limited was the subject of a tabletop exercise conducted by RiskSight under the NATO DIANA Accelerator Programme, testing the deployment decisions of Goldilock's physical microgrid disconnection technology.
- Prague Security Studies InstituteminorRiskSight conducted a national-level cybersecurity tabletop exercise simulation for the Prague Security Studies Institute's annual Cyber Academy for young experts, covering threat vectors including ransomware, election security, and malware in critical information systems.
- ÄripäevminorRiskSight collaborated with Äripäev (leading Estonian business media) to deliver a strategic decision-making simulation at the Äripäev Leaders' Colloquium, expanding market reach through a trusted media partner.
- SK ID SolutionsminorRiskSight participated as an exhibitor at SK ID Solutions' Annual Conference 2023 (#AC2023), showcasing cybersecurity awareness and strategic cybersecurity exercise solutions alongside technology industry leaders.
- CTF Tech / Cyber Battle of the Nordic-BalticsminorRiskSight participated as a sponsor in the Cyber Battle of the Nordic-Baltics 2023 competition, contributing a special sponsor challenge for the Capture-The-Flag (CTF) contest and exhibiting cybersecurity awareness tools.
Scale indicators3 records
Recent moves6 records
Expansion highlights6 records
RiskSight competitors and assessment
Company assessmentEmerging players
- RangeForce: Cyber skills and simulation platform providing interactive training and exercises for security teams. Adjacent competitor to RiskSight's STRATEX-style simulation and exercise offering, particularly in the technical-team segment.
- CybSafe: UK-based human risk management platform that combines awareness training with behavioral analytics and risk scoring. An emerging competitor to RiskSight's risk-assessment-driven training approach, with overlap in regulated enterprise verticals.
Broad incumbents
- SANS Institute: Globally recognized cybersecurity training and certification body that also runs cyber range exercises and tabletop simulations. Competes with RiskSight in the executive/strategic exercise category but from a much larger training and certification franchise.
- Proofpoint (Security Awareness): Enterprise security vendor with a dedicated Security Awareness training portfolio covering phishing simulations, compliance, and risk scoring. Competes with RiskSight at the enterprise buyer level but bundles awareness within a broader email and information-protection platform.
- (ISC)²: Global cybersecurity professional certification and training organization (CISSP, etc.) that also delivers executive cyber exercises. Adjacent competitor to RiskSight for board-level and strategic cybersecurity training audiences.
Direct peers
- KnowBe4: Market-leading security awareness and phishing simulation platform serving enterprise customers globally. Direct competitor to RiskSight's core Cyber Security Awareness, Phishing Campaigns, and Compliance training offerings, with much larger scale and a broader content library.
- Lucy Security: European (Swiss) provider of security awareness training and phishing simulations with an LMS-style platform. Closely overlaps RiskSight in product scope and in selling to mid-market and enterprise buyers across Europe.
- Hoxhunt: Nordic-based (Finland) security awareness and phishing simulation platform with strong European enterprise penetration. Highly comparable to RiskSight in geography, buyer profile, and human-risk management methodology.
- Immersive Labs: Cyber resilience platform offering continuous training, exercises, and crisis simulations for technical and executive teams. Closest direct competitor to RiskSight's STRATEX strategic tabletop exercise and continuous-training model.
- Cofense (PhishMe): Phishing defense and awareness training vendor focused on simulated phishing campaigns and resilience testing. Directly comparable to RiskSight's Phishing Campaigns and Resilience Testing products.
Market position
Strengths5 records
Weaknesses4 records
Competitive moat5 records
Key risks5 records
Key highlights6 records
Customer concentration
RiskSight social profiles
Digital presenceRiskSight financial estimates
Financial estimateRevenue estimate
Valuation estimate
RiskSight leadership team
Management profileNumber of profiles
RiskSight funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
RiskSight M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about RiskSight
What does RiskSight do?
RiskSight provides framework-based cybersecurity awareness e-learning, compliance training, phishing simulation campaigns, and strategic cybersecurity tabletop exercises through its proprietary STRATEX platform. The offerings target organizations across Energy, Finance, and Healthcare sectors of varying sizes, with governance alignment to ISO 27001, NIS2, and PCI DSS, delivered across multiple languages and combined with continuous risk assessment.
Is RiskSight a public or private company?
RiskSight is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was RiskSight founded?
RiskSight was founded in 2016. It employs 1 to 10 people.
Where is RiskSight based?
RiskSight is headquartered in Tallinn, Estonia, in the Europe region.
How does RiskSight make money?
Four revenue lines are on record. E-Learning & Risk Assessment Subscriptions are the primary driver. The others are training & Exercise Services, phishing & Resilience Testing and custom Content & Consultancy.
Who are RiskSight's main competitors?
Emerging players on record are RangeForce and CybSafe. Broad incumbents are SANS Institute, Proofpoint (Security Awareness) and (ISC)². Direct peers are KnowBe4, Lucy Security, Hoxhunt, Immersive Labs and Cofense (PhishMe).
Does RiskSight have an API?
No public API is recorded for RiskSight.
What industry is RiskSight in?
RiskSight's product category is Cybersecurity Awareness and Training Software. Its primary akta.pro industry code is BPABAMAE, Security Consulting, Risk Assessment & Security Program Design, with a secondary code of BPAKADAM, Insider Threat Program Design & Risk Assessments. Its NAICS code is 5616 and its SIC code is 7381.