RansomLeak

RansomLeak provides security awareness training and human risk management software for organizations. The platform replaces traditional video-based training with immersive, interactive 3D simulations and hands-on exercises covering topics such as phishing, ransomware, business email compromise, social engineering, and deepfake-based attacks. Its exercise library includes over 200 scenarios indexed against frameworks including CWE, OWASP, MITRE ATT&CK, CIS, NIST CSF, GDPR, and the EU AI Act. The company also offers dedicated application security training for developers, covering secure coding practices for issues such as injection, broken access control, XSS, CSRF, and SSRF across multiple programming languages, aimed at supporting PCI DSS 6.2 and secure-coding programs. Add-on modules include phishing simulations delivered via direct mailbox injection into Microsoft 365 and Google Workspace, and smishing simulations delivered over real SMS, both with full-funnel analytics tracking delivery, clicks, credential submission, and reporting, along with automated remediation training for employees who fail simulations. The platform calculates a per-employee Human Risk Score based on simulation outcomes, training completion, and external signals pulled from SIEM, identity providers, or custom data feeds via API or CSV upload. Rules can be configured to automatically trigger training or manager alerts based on risk thresholds. RansomLeak is delivered as a cloud-based platform with SCORM export for integration with existing LMS systems, SSO/MFA authentication, custom branded content, and compliance reporting for frameworks such as SOC 2, ISO 27001, and HIPAA. It was founded by Dmytro Koziatynskyi, previously founder of Kontra Application Security Training, and Maksym Khamrovskyi.