Innovation Matrix Assessment
Added behavioral-analytics and developer-training capability via acquisition, a moderate pace of platform expansion.
Established training vendor with a recognizable brand, now integrating two smaller acquired companies.
Two acquisitions (Dcoya, SafeStack) broaden NINJIO's footprint in the security-awareness and training M&A space.
Operates within the established security-awareness-training category rather than disrupting it.
Long operating history and a recognized training brand support moderate confidence in efficacy.
Security-awareness training remains a baseline CISO requirement, though it's a highly commoditized category.
Why CISOs Should Care
NINJIO, a security-awareness training provider, acquired Dcoya (behavior-based awareness/phishing simulation) and SafeStack (secure developer training), giving CISOs a broader awareness-and-training platform spanning general employee phishing risk and secure-coding education for developers.
What Makes It Different
NINJIO differentiates its Hollywood-style narrative training approach by adding Dcoya's behavioral-risk analytics and SafeStack's developer-focused secure-coding curriculum, extending beyond general awareness training into role-based and behavior-driven programs.
The Matrix Verdict
40/100 — EMERGING / UNRANKED
A PE-backed security-awareness training vendor broadening its offering through the Dcoya and SafeStack acquisitions, giving it more behavioral and developer-focused training depth within the crowded, but persistently relevant, security-awareness category.
Editorial Note: Claims vs. Verified Findings
NINJIO is a cybersecurity-native company (security-awareness training); no non-cyber primary-business caveat applies.