What does SoSafe sell?

SoSafe sells Human Risk OS. Human Risk OS: A platform that brings learning data, simulation results, threat reporting, and risk scoring into one view of human risk.

From its own pages, SoSafe sells mainly to organisations that want to manage human risk through training and simulations. SoSafe names banks, insurers and financial firms as a group it addresses, with content for payments, IT and the management body. Its pages also list manufacturing, healthcare, utilities, logistics and transportation, finance, IT services, pharma and public administration as industries. SoSafe describes its packages as fitting organisations establishing a security programme as well as those ready to manage human risk with greater precision.

How does CISO Tribune file SoSafe?

CISO Tribune files SoSafe under Security awareness training, with Human risk management as a secondary category.

Company record · security vendor

Who leads security at SoSafe

CISO Tribune company record: SoSafe, current seat holder not yet confirmed

The most recent move CISO Tribune has on record at SoSafe was announced on February 7, 2024: too long ago to say who holds the seat today. The history below stands; the current holder is not yet confirmed.

Tracked by the Wire since February 7, 2024 · 1 recorded move · every claim links to a sourced record · Updated November 10, 2026

Where SoSafe appears on the record (31)

Every page on CISO Tribune and its network that carries this company, 31 in all.

On the Wire: Andrew Rose named Chief Security Officer at SoSafe · 2024-02-07
Compared with (28): vs AccessIT Group, vs Adaptive Security, vs Arctic Wolf, vs Brite, vs Cofense, vs Defendify, vs Doppel, vs Egress, vs Elbit Systems, vs Fable Security, vs Forte Technologies, vs Frame Security, vs Google, vs Helix, vs Hornetsecurity, vs Hoxhunt, vs IANS, vs Immersive, vs Jericho Security, vs Keepnet Labs, vs KnowBe4, vs Living Security, vs NINJIO, vs Proofpoint, vs Reflex Security, vs Third Wave Innovations, vs Trustifi, vs UpGuard
In the vendor directory (2): Security awareness training vendors · primary category
Human risk management vendors · category

About SoSafe

CISO Tribune's Leadership Bench files SoSafe under Cybersecurity Vendors and Europe. The Wire has one security-leadership move at SoSafe on record, announced on February 7, 2024.

Security leadership timeline

2024-02-07

Andrew Rose named Chief Security Officer at SoSafe

SoSafe announced the appointment of Andrew Rose as its new Chief Security Officer.

Security leaders of SoSafe on our record

Andrew Rose: named Chief Security Officer, announced on February 7, 2024 record

Security chiefs at other Cybersecurity Vendors organizations

Other organizations CISO Tribune files under Cybersecurity Vendors with a named security chief on record: those in Europe first, in alphabetical order from SoSafe onward.

Filigran: Mathieu Rigotto, Chief Information Security Officer.
Keepit: Kim Larsen, group chief information security officer (CISO).
Outpost24: Olivia Brännlund, CISO.
Quorum Cyber: John Bruce, Chief Information Security Officer.
Tanium: Paul Black, Chief Information Security Officer.
Tenable: Robert Huber, Chief Security Officer.
Trellix: David Soto, Chief Information Security Officer.
UltraViolet Cyber: Andrew Park, Chief Information Security Officer (CISO).

The full Cybersecurity Vendors bench

What the company sells

SoSafe sells security awareness training, phishing and multi-channel simulations, threat reporting, and human risk monitoring on a single platform. SoSafe says the platform brings together personalised cybersecurity training, multi-channel attack simulations, and automated monitoring and reporting.

SoSafe describes its training as adaptive. The training turns policies into gamified lessons and covers phishing, ransomware, insider threats, and more. The training is available in 34+ languages. SoSafe modules run 1 to 8 minutes each and are adapted to each employee's role and risk level.

For simulations, SoSafe offers phishing and multi-channel simulations. SoSafe says it supports quick self-service or personalised templates. On the integrations page, SoSafe says the button works in Outlook across Microsoft 365 environments and in Gmail through Google Workspace. Reports can route into Jira or ServiceNow to create security tickets.

Sofie is SoSafe's AI security copilot. SoSafe says Sofie can be installed inside Microsoft Teams and inside Slack. Sofie answers employee security questions and delivers micro-learning nudges.

Human Risk OS is the human risk monitoring part of the platform. SoSafe says Human Risk OS brings together learning data, simulation results, threat reporting, and risk scoring into a single view of human risk. Security data from Microsoft Defender and CrowdStrike is pulled into Human Risk OS to enrich the Human Security Index. SoSafe says it generates compliance-ready reports for NIS2, DORA, and ISO 27001.

SoSafe describes its integrations in several groups. Export of SoSafe content as SCORM 1.2 packages lets customers deploy it into platforms including SAP SuccessFactors, Moodle, ILIAS, Cornerstone, and Workday Learning. SoSafe also offers an open REST API.

On deployment, SoSafe says technical setup takes roughly 90 minutes and that a customer can be live within two days. SoSafe says its pricing plans start from €625 per month, billed annually, and include 50 seats.

SoSafe says it was co-founded in 2018 by Dr Niklas Hellemann, who is its CEO. SoSafe says it is certified to ISO/IEC 27001:2022 and participates in TISAX. SoSafe says all data is hosted and processed within the EU.^{[2][3][6][7][8][10][11]}

Categories: Security awareness training (primary category)
Human risk management
Compare SoSafe with companies in the same category
Headquarters: Not established from our sources
Founded: 2018^[1][9]
Ownership: Not established from our sources
CISO on record: Not yet on our record. Send a verified source
Website: sosafe-awareness.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

Human Risk OS^[2][4][6][7]
A platform that brings learning data, simulation results, threat reporting, and risk scoring into one view of human risk.
Human Risk OS shows who is most vulnerable, which attack vectors are active, and how behaviour is shifting. It feeds the Human Security Index. Signals from Microsoft Defender and CrowdStrike are pulled into it.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of SoSafe's categories, then alphabetical. A list from the record, never a ranking.

On security awareness training, SoSafe competes with Frame Security, Immersive, Jericho Security, KnowBe4, NINJIO, Adaptive Security, Google, Cofense, Doppel, Hoxhunt and 14 more.
On human risk management, SoSafe competes with Hoxhunt, Keepnet Labs, Living Security, Fable Security, Cofense, Doppel, Frame Security, Immersive, Jericho Security, KnowBe4 and 4 more.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

G2 · 4.5 out of 5 · 804 reviews^[5]seen November 4, 2026

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

[1]CompanySoSafe · sosafe-awareness.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
[2]Proactive human risk managementSoSafe · sosafe-awareness.com · published November 12, 2024 · Tier A: the company, a regulator or a filing
[3]Sosafe secures 73 million in series bSoSafe · sosafe-awareness.com · published January 18, 2022 · Tier A: the company, a regulator or a filing
[4]Security awareness and human risk managementSoSafe · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
[5]SoSafe Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed October 28, 2026 · Tier C
[6]Why SoSafe?SoSafe · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
[7]SoSafe IntegrationsSoSafe · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
[8]SoSafe pricing & plans - Choose your fitSoSafe · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
[9]About SoSafeSoSafe · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
[10]Security & Trust | SoSafeSoSafe · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
[11]Financial Services Cyber Security That LastsSoSafe · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing

Last verified November 9, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 4, 2026 from the references above.

Work for SoSafe? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.

Questions CISOs ask about SoSafe

Who are the security chiefs at other Cybersecurity Vendors organizations?: On CISO Tribune's record they include Mathieu Rigotto at Filigran, Kim Larsen at Keepit, Olivia Brännlund at Outpost24 and John Bruce at Quorum Cyber.
What does SoSafe sell?: SoSafe sells Human Risk OS. Human Risk OS: A platform that brings learning data, simulation results, threat reporting, and risk scoring into one view of human risk.
Who does SoSafe fit?: From its own pages, SoSafe sells mainly to organisations that want to manage human risk through training and simulations. SoSafe names banks, insurers and financial firms as a group it addresses, with content for payments, IT and the management body. Its pages also list manufacturing, healthcare, utilities, logistics and transportation, finance, IT services, pharma and public administration as industries. SoSafe describes its packages as fitting organisations establishing a security programme as well as those ready to manage human risk with greater precision.
How does CISO Tribune file SoSafe?: CISO Tribune files SoSafe under Security awareness training, with Human risk management as a secondary category.
When was SoSafe founded?: SoSafe was founded in 2018.

Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.