What do Reflex Security and SoSafe sell?

Reflex Security sells Reflex. SoSafe sells Human Risk OS.

Are Reflex Security and SoSafe in the same category?

They share Security awareness training. Reflex Security's primary category is Breach simulation and automated pen-testing and SoSafe's is Security awareness training.

Who are Reflex Security and SoSafe sold to?

From its own pages, SoSafe sells mainly to organisations that want to manage human risk through training and simulations.

Vendor comparison · 2 companies

Reflex Security vs SoSafe

Reflex Security says a breach cannot be controlled, and that a team cannot pick the day, the attacker or the exploit. SoSafe sells security awareness training, phishing and multi-channel simulations, threat reporting, and human risk monitoring on a single platform. CISO Tribune files both under Security awareness training. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

Reflex Security
SoSafe

Add a company

Reflex Security vs SoSafe: Products, Customers and Funding Compared
What it sells
	Reflex SecurityReflex Security says a breach cannot be controlled, and that a team cannot pick the day, the attacker or the exploit.reflexsecurity.io	SoSafeSoSafe sells security awareness training, phishing and multi-channel simulations, threat reporting, and human risk monitoring on a single platform.sosafe-awareness.com
What it sells	Reflex^[1][2][3]A crisis simulation platform that builds a live crisis from a team's real environment and adapts to each decision the team makes.	Human Risk OS^[2][4][6][7]A platform that brings learning data, simulation results, threat reporting, and risk scoring into one view of human risk.
Categories
Categories	Breach simulation and automated pen-testing (primary category) Incident response and forensics Security awareness training	Security awareness training (primary category) Human risk management
Headquarters
Headquarters	Not stated on its pages	Not stated on its pages
Founded
Founded	Not stated on its pages	2018^[1][9]
Ownership and funding
Ownership and funding	Not stated on its pages	Not stated on its pages
Named customers
Named customers	Not stated on its pages	Not stated on its pages
Recent news
Recent news	Not stated on its pages	Not stated on its pages
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: listed, seen November 10, 2026^[4] Gartner Peer Insights: Not stated on its pages	G2: listed, seen November 4, 2026^[5] Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	Not written yet	From its own pages, SoSafe sells mainly to organisations that want to manage human risk through training and simulations. SoSafe names banks, insurers and financial firms as a group it addresses, with content for payments, IT and the management body. Its pages also list manufacturing, healthcare, utilities, logistics and transportation, finance, IT services, pharma and public administration as industries. SoSafe describes its packages as fitting organisations establishing a security programme as well as those ready to manage human risk with greater precision.
Last verified
Last verified	November 5, 2026	November 9, 2026

Where they overlap

Reflex Security and SoSafe are both filed under Security awareness training.

Where they differ, field by field

Reflex Security's primary category is Breach simulation and automated pen-testing; SoSafe's is Security awareness training.
Reflex Security is also filed under Incident response and forensics. SoSafe is also filed under Human risk management.
Reflex Security lists Reflex. SoSafe lists Human Risk OS.
SoSafe was founded in 2018.

What it sells: Reflex Security

What Reflex does^[1][2][3]: Reflex builds a tailored scenario in minutes, catered to the real environment, tools and threats of the team. The team works a live breach while an adaptive adversary and pressured stakeholders push back in real time. AI agents play every side of the breach and react to each call the team makes.

What it sells: SoSafe

What Human Risk OS does^[2][4][6][7]: Human Risk OS shows who is most vulnerable, which attack vectors are active, and how behaviour is shifting. It feeds the Human Security Index. Signals from Microsoft Defender and CrowdStrike are pulled into it.

Questions about Reflex Security and SoSafe

What do Reflex Security and SoSafe sell?: Reflex Security sells Reflex. SoSafe sells Human Risk OS.
Are Reflex Security and SoSafe in the same category?: They share Security awareness training. Reflex Security's primary category is Breach simulation and automated pen-testing and SoSafe's is Security awareness training.
When were Reflex Security and SoSafe founded?: SoSafe was founded in 2018.
Who are Reflex Security and SoSafe sold to?: From its own pages, SoSafe sells mainly to organisations that want to manage human risk through training and simulations.

About Reflex Security

Reflex Security says a breach cannot be controlled, and that a team cannot pick the day, the attacker or the exploit. Reflex Security says a team's response is the only part of a breach that the team owns. Reflex Security says incident training usually means a traditional tabletop exercise made up of slides, a facilitator and a room.^[1][2][3]

Reflex lets a team describe the incident, or start from what Reflex already knows about the team. Reflex builds a tailored scenario in minutes, catered to the real environment, tools and threats of the team. Reflex users pick a threat, and Reflex handles the prep and the paperwork.^[3]

In a Reflex exercise, the team works a live breach while an adaptive adversary and pressured stakeholders push back in real time. Reflex tests breach coordination across technical, legal and executive teams.^[3]

Reflex produces an after-action report the moment the team finishes the exercise.^[2][3]

Reflex Security on the record

About SoSafe

SoSafe sells security awareness training, phishing and multi-channel simulations, threat reporting, and human risk monitoring on a single platform. SoSafe says the platform brings together personalised cybersecurity training, multi-channel attack simulations, and automated monitoring and reporting.^[2]

SoSafe describes its training as adaptive. The training turns policies into gamified lessons and covers phishing, ransomware, insider threats, and more. The training is available in 34+ languages. SoSafe modules run 1 to 8 minutes each and are adapted to each employee's role and risk level.^[6]

For simulations, SoSafe offers phishing and multi-channel simulations. SoSafe says it supports quick self-service or personalised templates. On the integrations page, SoSafe says the button works in Outlook across Microsoft 365 environments and in Gmail through Google Workspace. Reports can route into Jira or ServiceNow to create security tickets.^[7]

Sofie is SoSafe's AI security copilot. SoSafe says Sofie can be installed inside Microsoft Teams and inside Slack. Sofie answers employee security questions and delivers micro-learning nudges.^[7]

Human Risk OS is the human risk monitoring part of the platform. SoSafe says Human Risk OS brings together learning data, simulation results, threat reporting, and risk scoring into a single view of human risk. Security data from Microsoft Defender and CrowdStrike is pulled into Human Risk OS to enrich the Human Security Index. SoSafe says it generates compliance-ready reports for NIS2, DORA, and ISO 27001.^[6][7]

SoSafe describes its integrations in several groups. Export of SoSafe content as SCORM 1.2 packages lets customers deploy it into platforms including SAP SuccessFactors, Moodle, ILIAS, Cornerstone, and Workday Learning. SoSafe also offers an open REST API.^[7]

On deployment, SoSafe says technical setup takes roughly 90 minutes and that a customer can be live within two days. SoSafe says its pricing plans start from €625 per month, billed annually, and include 50 seats.^[6][8]

SoSafe says it was co-founded in 2018 by Dr Niklas Hellemann, who is its CEO. SoSafe says it is certified to ISO/IEC 27001:2022 and participates in TISAX. SoSafe says all data is hosted and processed within the EU.^{[2][3][6][7][8][10][11]}

SoSafe on the record

Sources

Reflex Security full record

[1]reflexsecurity.ioReflex Security · reflexsecurity.io · undated page, accessed November 5, 2026 · Tier A
[2]How ai powered tabletop exercises improve incident response readinessReflex Security · reflexsecurity.io · undated page, accessed November 5, 2026 · Tier A
[3]Reflex SecurityReflex Security · undated page, accessed November 10, 2026 · Tier A
[4]Reflex Security Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

SoSafe full record

[1]CompanySoSafe · sosafe-awareness.com · undated page, accessed September 27, 2026 · Tier A
[2]Proactive human risk managementSoSafe · sosafe-awareness.com · published November 12, 2024 · Tier A
[3]Sosafe secures 73 million in series bSoSafe · sosafe-awareness.com · published January 18, 2022 · Tier A
[4]Security awareness and human risk managementSoSafe · undated page, accessed October 28, 2026 · Tier A
[5]SoSafe Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed October 28, 2026 · Tier C
[6]Why SoSafe?SoSafe · undated page, accessed November 4, 2026 · Tier A
[7]SoSafe IntegrationsSoSafe · undated page, accessed November 4, 2026 · Tier A
[8]SoSafe pricing & plans - Choose your fitSoSafe · undated page, accessed November 4, 2026 · Tier A
[9]About SoSafeSoSafe · undated page, accessed November 4, 2026 · Tier A
[10]Security & Trust | SoSafeSoSafe · undated page, accessed November 4, 2026 · Tier A
[11]Financial Services Cyber Security That LastsSoSafe · undated page, accessed November 4, 2026 · Tier A

Spot a factual error? Request a correction.