Riot

Riot is a Paris-based human risk management platform, founded in 2020, that runs continuous phishing simulations, bite-sized security-awareness training, and real-time employee vulnerability monitoring through a chatbot-style interface integrated into Slack and Microsoft Teams. The company’s framing is that most successful attacks start with human error, so security awareness needs to feel more like an ongoing, low-friction habit than an annual compliance training module employees click through once a year.

Riot has raised $44 million across three rounds, including a $12 million Series A led by Base10 Partners and a $30 million Series B in February 2025, funding that the company has tied explicitly to defending against AI-era social engineering (deepfake voice/video pretexting, AI-generated phishing) rather than only traditional email phishing. That funding trajectory places Riot among the better-capitalized players in the security-awareness-training category, competing directly with incumbents like KnowBe4 and newer entrants such as Dune Security.

Riot’s differentiation is delivery mechanism and cadence — chat-native, continuous micro-training rather than a periodic LMS-style course — which is a real behavioral-design bet, though independent, vendor-neutral evidence that this cadence produces measurably better security outcomes (versus simply higher completion rates) is not established in public reporting. CISOs evaluating Riot should weigh its Series B-stage traction and AI-threat-specific roadmap against the broader question every awareness-training vendor faces: whether training completion translates into fewer successful social-engineering incidents in their specific environment.