Skip to content

CultureAI

UK human risk management platform that uses behavioral telemetry to surface employee security risk and trigger real-time coaching, nudges, and one-click technical fixes.

Visit Website ↗ + Add to Compare
55/100Incremental Innovator

Overview

CultureAI runs a human risk management platform that pulls behavioral telemetry from an organization’s existing security and productivity tools to identify risky employee actions in real time — not just phishing-simulation clicks, but broader signals like risky file-sharing, weak authentication choices, and other day-to-day security behaviors — and responds with targeted coaching, in-the-moment nudges, and one-click technical remediations employees can apply themselves, rather than relying solely on periodic training modules.

Founded in 2015 and headquartered in Manchester, UK, CultureAI closed a $10 million Series A round in July 2024 led by Mercia Ventures and Smedvig Ventures, with existing investors Passion Capital and Senovo also participating, bringing on capital explicitly earmarked for US market expansion. Its publicly named customer list includes UK financial and logistics brands such as Tide, Octopus Energy, GXO, Dojo, and NatWest, which is a meaningful, verifiable signal for a company of its size (around 50 employees).

CultureAI competes directly against both legacy security-awareness-training vendors retrofitting risk scoring onto older platforms and newer human-risk-management peers, including Living Security in the US market; its differentiation is breadth of behavioral telemetry sources feeding the risk score and the emphasis on one-click employee-side fixes rather than escalation-only workflows.

Innovation Matrix Assessment

Innovation Velocity 5/10

Raised a Series A in mid-2024 explicitly to fund product development and US expansion, indicating active investment in the platform, though specific release-cadence data is not independently published.

Operational Value 6/10

Pulls behavioral telemetry across multiple existing security and productivity tools to build a real-time risk score and pairs it with one-click employee-side remediation, a more operationally actionable design than training-completion-only awareness platforms.

Market Momentum 6/10

A $10M Series A in July 2024, following prior $4M seed and $5M rounds, shows a real, escalating capital trajectory, and named enterprise customers (Tide, NatWest, GXO) provide independent traction evidence beyond funding alone.

Category Disruption 5/10

Represents the more data-driven, telemetry-based evolution of security-awareness training versus legacy content-library vendors, though it now competes within an increasingly crowded human-risk-management category rather than standing alone as a novel approach.

Real-World Efficacy 5/10

Named, verifiable enterprise customers (Tide, Octopus Energy, GXO, NatWest) across regulated and consumer-facing industries is real independent evidence of deployment, though no independently audited risk-reduction outcome data specific to CultureAI was found.

Enduring Relevance 6/10

Human risk management addressing behavior beyond phishing-click rates is a growing, board-relevant CISO priority, and CultureAI's UK financial-services customer base reflects genuine demand in a compliance-driven vertical.

Why CISOs Should Care

Gives CISOs a behavioral-telemetry-driven risk score and one-click employee remediation across a broader set of risky actions than phishing-simulation-only platforms, backed by named UK financial-sector customers.

What Makes It Different

Pulls signal from a wider range of existing security and productivity tooling to compute risk scores, and pairs detection with one-click, employee-initiated technical fixes rather than escalation-only alerts to security teams.

The Matrix Verdict

55/100 — INCREMENTAL INNOVATOR

A well-funded, fast-growing human-risk-management platform with real, named enterprise traction in the UK; competes in an increasingly crowded category (including Living Security, already on this site) where differentiation is depth of telemetry integration rather than a wholly novel category.

Editorial Note: Claims vs. Verified Findings

Named customers (Tide, Octopus Energy, GXO, Dojo, NatWest) and funding figures ($10M Series A, prior $4M/$5M rounds) are independently reported in funding-tracker and trade press (Vestbee, GlobeNewswire). No independently audited risk-reduction outcome metrics specific to CultureAI were found; treat any risk-reduction percentage claims from the company's own materials as vendor-sourced pending independent verification.

Sources