RansomLeak Security Awareness Training

RansomLeak is a security awareness training and human risk management platform. It uses interactive 3D simulations rather than video/slide-based training, covering topics such as ransomware response and secure coding practices for injection, broken access control, XSS, CSRF, and SSRF, with support for languages including JavaScript, TypeScript, Java, C#, Python, Scala, PHP, Ruby, Go, and Kotlin. The platform computes a per-user human risk score (0-100) derived from simulation outcomes, phishing reports, and training completion, categorizing users into Low, Moderate, High, or Critical bands. Scores are explainable via weighted sub-scores and underlying events, and can incorporate external signals (risky sign-ins, SOC alerts, privilege flags) pushed from SIEM, IdP, or scripts via REST API, or uploaded via CSV. Rules can automatically enroll users in remediation training or alert managers based on score thresholds. Optional add-ons include phishing simulations (delivered via direct mailbox injection into M365 and Google Workspace to bypass spam filters, with Outlook/Gmail reporter button capture and full-funnel analytics from delivery to credential submission) and smishing simulations (SMS-based lures with tap/report tracking via signed tokens). Other features include campaign management with deadlines, reminders, and auto-escalation; per-campaign and quiz-level analytics; user/license management with CSV bulk import and SCIM auto-provisioning; manager views mirroring org structure; compliance evidence mapped to 25+ frameworks (SOC 2, ISO 27001, HIPAA, NIST CSF) with streaming integrations to Vanta and Drata; auditor-ready PDF/CSV report exports; SCORM 1.2/2004 export and LTI 1.3 launch with grade passback and roster sync for external LMS platforms; custom content upload (PDF, video, SCORM); gamification (achievements, streaks); and multilingual learner experience.