Frame Security, Immersive, Jericho Security and SoSafe

About Immersive

Immersive sells Immersive One, which tests how people, AI-enabled workflows, security teams, and agents perform under pressure. Immersive One turns AI-era cyber readiness into evidence. Immersive One shows where risk is changing and where capability must improve. The Immersive One Platform provides realistic simulations and hands-on cybersecurity labs to evaluate individual and team capabilities across the entire workforce. Immersive One Cyber Drills recreate real incidents across people, process, and technology. Immersive unifies labs, ranges, simulations, agent harnesses and reporting in a loop that runs continuously: Prove, Improve, Benchmark, Report. Access to Immersive One capabilities is determined by the customer’s agreed scope and deployment model.^[3][4][5]

Immersive supports creating, tailoring and routing practical learning experiences that build cyber and AI readiness. Immersive provides realistic scenarios for rehearsing technical, operational, workforce, supply-chain, and crisis response. Immersive validates safe AI adoption, AI-assisted development, AI red-team activity, and agent behavior before production use. Immersive turns activity, assessment, pathway, and exercise evidence into readiness insight for teams. Immersive uses live-fire environments to test people, workflows and agents against real adversary behavior. Every run is scored against the customer's peers, the customer's history, and a baseline of humans versus agents. Immersive generates evidence from the same system that ran the test.^[5][7]

A hands-on cybersecurity lab from Immersive is a browser-based environment where an individual completes a real security task against live systems and tooling. Immersive supports self-paced journeys for SOC, AppSec, CloudSec, AI, OT, OffSec, and wider workforce roles. The Immersive threat research team publishes hands-on content in response to emerging vulnerabilities and active campaigns. Immersive lets customers build and customize practical labs around proprietary code, emerging threats, and organization-specific security requirements. Immersive trains technical and non-technical teams to identify AI-specific risks and practice secure use and secure build workflows. Immersive lets customers test configurable AI analyst archetypes against realistic SIEM data and security workflows before allowing them to operate in production environments.^[6][7]

A cyber range is a virtual environment designed to simulate real-world cyber threats, allowing individuals and teams to practice cybersecurity skills, test defenses, and improve incident response. A Cyber Drill exercise is a simulated cyber attack that tests an organization's ability to detect, respond to, and recover from threats. Cyber Range Exercises and Dynamic Threat Range are typically run with technical and SOC teams, and Cyber Drills extend to business functions such as legal and comms. Offensive AI Ranges and Developer AI Ranges benchmark model performance against attack scenarios and MITRE ATT&CK/ATLAS coverage, and validate whether AI-assisted development introduces security risk.^[7]

Immersive exercises people through scenarios in which they interact with AI threat actors and dynamic social, chat, and video feeds. Immersive builds realistic crisis simulations around an organization using its systems, playbooks, risks, and threats. Business risk exercising is the practice of measuring and reducing the risk an organization's people introduce. Immersive uses practical exercising and capability validation to help expose supply chain risk.^[8]

Immersive offers a Resilience Score that quantifies an organization's ability to detect, respond to, and recover from cyber threats. Immersive's Resilience Score combines nine measured factors into a single value benchmarked against industry peers. Immersive measures workforce capability against the NIST NICE framework. Immersive maps defensive capabilities against real-world adversary tactics across the MITRE ATT&CK framework.^[3][6][9]

A Resilience Pathway from Immersive is a structured, role-based development journey that maps an individual's or team's current capability to the skills a role requires. Custom Goals let customers define organization-specific capability targets. AI Knowledge Pass validates a person's AI-related knowledge before they're granted access to AI tools.^[10]

Immersive AppSec brings together practical labs and dynamic range exercises that embed security into developer workflows. Developers use labs and interactive range exercises to demonstrate practical skills in identifying and mitigating vulnerabilities. Immersive hands-on cyber labs simulate threats across offensive, defensive, and application security domains. Immersive offers content that helps workforces prepare for Operational Technology (OT)-related attacks. Immersive One includes Red and Blue Team labs, secure coding, cloud security, and more. Immersive delivers its hands-on cybersecurity training, team exercises, and cyber drills in a single Enterprise platform.^{[2][4][5][6][7][9][10][11][12][13]}

About Jericho Security

Jericho Security sells a cybersecurity awareness training platform and phishing simulations for employees. Jericho Security is designed to protect against email, SMS and deepfake threats. Jericho Security says its platform learns about a business and uses generative AI to create simulations. Jericho Security's single platform tests across internal roles and external vendors and surfaces dark web data. Jericho Security's training platform escalates difficulty, tailors content and rewards users.^[1][2][3][4]

Jericho Security's phishing simulator is used to build and launch custom simulated phishing emails through multiple-choice selections. Phishing simulations from Jericho Security include conversational phishing and deepfake phishing simulation scenarios. Recipients in the phishing email simulator can be individuals, groups or whole contact lists. Attack types in the phishing simulator include clicking a link, opening an attachment or entering personal information. Pretexts in the phishing simulator include LinkedIn requests, urgent proposals and gift card offers. After a campaign, the phishing simulator shows metrics such as email opens, clicks and form submissions. When an employee clicks a link or submits information in a simulated phishing email, Jericho Security can redirect that employee to targeted training content. Jericho Security describes a deepfake phishing simulation as one that uses AI-generated audio or video to impersonate a trusted person, such as a CEO or manager.^[3]

Jericho Security's cybersecurity dashboard is used to create and run phishing simulations, deliver custom training and monitor employee performance. Campaigns in the dashboard can be created from templates or built as dynamic emails from scratch. Jericho Security's platform supports the generation of cybersecurity risk assessment reports. The training library in the dashboard features cybersecurity topics including deepfakes, social engineering and mobile security. Employees can be added to the dashboard, grouped by categories and assigned targeted training based on their roles or previous performance in security assessments. Jericho Security provides analytics on open rates, click rates, fail rates and report rates for each employee or department. After reviewing the data, custom cybersecurity training can be assigned to employees who need extra help.^[1][5]

Jericho Security delivers custom video content within 72 hours. Jericho Security's custom training covers threats including phishing, malware, social engineering and ransomware. Jericho Security's training modules are video-based. Employees can access Jericho Security's training modules on demand. Jericho Security describes operating from a centralized hub to track, assign and resolve incidents. Jericho Security's phishing triage solution is designed to help organizations detect, prioritize and respond to phishing threats in real time. Jericho Security describes a triage solution as one that automates threat analysis, response workflows and remediation.^[7][8]

Jericho Security designs training modules after an assessment of an organization's current vulnerabilities, addressing its unique risks. Jericho Security's program continuously updates its training modules to reflect the latest attack methods. Jericho Security tracks employee progress in real time and supports personalized training modules. Jericho Security's anti-phishing training covers email spoofing, malicious attachments and fraudulent links. Jericho Security trains employees in plant operations, engineering and facilities management against scenarios attackers use to target their roles. Jericho Security maps training modules to NERC CIP, IEC 62443 and NIST 800-82 frameworks with automated compliance reporting. Jericho Security's compliance-aligned modules are described as helping organizations meet NERC CIP, IEC 62443, NIST 800-82 and DOD CMMC requirements. Jericho Security gives employees who are deceived immediate, contextual training. Jericho Security says every simulation generates behavioral data on who was deceived, how and why.^{[2][9][10][11]}

Jericho Security offers customized cybersecurity training for small businesses. Jericho Security notes that small businesses often do not have a dedicated IT team to handle cybersecurity threats. Jericho Security's small business training involves real-world simulations, such as phishing attempts, malware attacks and password security scenarios. Jericho Security offers enterprise cybersecurity training for teams facing AI-driven cyber threats. Jericho Security's centralized training platform provides consistent instruction. Jericho Security states that every organization can benefit from cybersecurity awareness training, regardless of size or industry.^{[2][5][12][13]}

Jericho Security describes tools designed for the public sector and solutions tailored to financial services. Jericho Security describes solutions for the needs of state and local governments and for the information of students and staff. Jericho Security describes security solutions for patient data and for production lines and intellectual property. Jericho Security also describes cybersecurity protection for online businesses.^{[1][5][7][10]}

About SoSafe

SoSafe sells security awareness training, phishing and multi-channel simulations, threat reporting, and human risk monitoring on a single platform. SoSafe says the platform brings together personalised cybersecurity training, multi-channel attack simulations, and automated monitoring and reporting.^[2]

SoSafe describes its training as adaptive. The training turns policies into gamified lessons and covers phishing, ransomware, insider threats, and more. The training is available in 34+ languages. SoSafe modules run 1 to 8 minutes each and are adapted to each employee's role and risk level.^[6]

For simulations, SoSafe offers phishing and multi-channel simulations. SoSafe says it supports quick self-service or personalised templates. On the integrations page, SoSafe says the button works in Outlook across Microsoft 365 environments and in Gmail through Google Workspace. Reports can route into Jira or ServiceNow to create security tickets.^[7]

Sofie is SoSafe's AI security copilot. SoSafe says Sofie can be installed inside Microsoft Teams and inside Slack. Sofie answers employee security questions and delivers micro-learning nudges.^[7]

Human Risk OS is the human risk monitoring part of the platform. SoSafe says Human Risk OS brings together learning data, simulation results, threat reporting, and risk scoring into a single view of human risk. Security data from Microsoft Defender and CrowdStrike is pulled into Human Risk OS to enrich the Human Security Index. SoSafe says it generates compliance-ready reports for NIS2, DORA, and ISO 27001.^[6][7]

SoSafe describes its integrations in several groups. Export of SoSafe content as SCORM 1.2 packages lets customers deploy it into platforms including SAP SuccessFactors, Moodle, ILIAS, Cornerstone, and Workday Learning. SoSafe also offers an open REST API.^[7]

On deployment, SoSafe says technical setup takes roughly 90 minutes and that a customer can be live within two days. SoSafe says its pricing plans start from €625 per month, billed annually, and include 50 seats.^[6][8]

SoSafe says it was co-founded in 2018 by Dr Niklas Hellemann, who is its CEO. SoSafe says it is certified to ISO/IEC 27001:2022 and participates in TISAX. SoSafe says all data is hosted and processed within the EU.^{[2][3][6][7][8][10][11]}