OutThink
London-based human risk management platform founded by ex-CISOs that scores and reduces employee cyber risk using behavioral data instead of generic training.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
OutThink builds a human risk management (HRM) platform that replaces generic, check-the-box security awareness training with a data-driven approach: it pulls signals from a customer’s existing security stack (phishing simulations, endpoint and identity systems, and more) plus psychology-based assessments to build individual risk profiles for employees, then targets training and interventions at the people and behaviors that pose the greatest measured risk, rather than delivering the same content to everyone.
Founded in London by former Chief Information Security Officers, including CEO Flavius Plesu (formerly CISO at Bank of Ireland), OutThink has raised roughly $11.4 million in total funding, including a $10 million round led by AlbionVC with participation from Forward Partners, Gapminder, Innovate UK, and TriplePoint Capital. The company reports more than 100 enterprise deployments, with Danske Bank among its publicly named customers, and sits inside the human risk management category that Forrester created in 2024 to replace traditional security-awareness-training coverage.
Innovation Matrix Assessment
Founded in 2015 and has iterated on behavior-based human risk scoring since before Forrester formally created the Human Risk Management category in 2024, showing sustained rather than especially fast development.
Shifts practice away from generic compliance training toward targeting interventions at employees whose measured behavior poses the highest risk, addressing the well-documented reality that human error is implicated in a large share of breaches.
A $10M round led by AlbionVC, more than 100 reported enterprise deployments, and a named customer (Danske Bank) are real, credible signals, though modest next to established awareness-training incumbents like KnowBe4 and Proofpoint.
Human risk management is a genuine evolution beyond older security-awareness-training, validated by Forrester's 2024 recategorization of the space, but OutThink is one of several vendors operating in this newly defined category rather than its sole definer.
No independently published, third-party-validated efficacy studies (e.g., audited breach or click-through reduction rates) were found; risk-reduction claims come from OutThink's own case studies.
As long as human error remains a leading breach vector, behavior-driven risk scoring is likely to stay relevant, and the category now has analyst-level recognition (Forrester HRM Wave).
Why CISOs Should Care
Lets CISOs target security training and interventions at the specific employees and behaviors driving the most risk, instead of paying for the same generic training for everyone regardless of actual exposure.
What Makes It Different
Builds individual employee risk scores from real security-stack signals and psychology-based assessment, rather than only tracking training completion and phishing-simulation click rates.
The Matrix Verdict
62/100 — INCREMENTAL INNOVATOR
Incremental Innovator. OutThink was an early mover in what Forrester has since formalized as Human Risk Management, backed by credible funding and a real enterprise customer base, but it competes in a category with larger established players and lacks independently validated efficacy data.
Editorial Note: Claims vs. Verified Findings
Customer deployment counts and named accounts (e.g., Danske Bank) come from OutThink's own press materials; no independent third-party efficacy audit was found.
Sources
Alternatives to OutThink
Chainalysis
The dominant, category-defining incumbent in blockchain analytics -- broad government and financial-institution adoption, a decade-plus track record, and…
Vanta
Continuous automated compliance monitoring platform that replaces manual audit evidence-gathering with live, integration-based control checks.
AuditBoard (rebranded Optro)
Connected-risk platform for audit, SOX, risk, and compliance, recently rebranded from AuditBoard to Optro under an AI-agent-driven repositioning.
Arcova
Cybersecurity advisory and managed services firm, rebranded from MorganFranklin Cyber, offering GRC, IAM, OT security, and a cloud-based…
Credo AI
AI governance platform that discovers, assesses, and continuously monitors enterprise AI systems and agents against regulations like the…
Level 6 Cyber
CISO ReviewedContinuous decision-intelligence platform (LISN) that replaces point-in-time security audits with a live digital twin of a CISO's program.