Skip to content
⚠ Compliance Notice: ISO/IEC 27001:2022 certified; GDPR-compliant, privacy-by-design platform architecture.

SoSafe

A mature, well-capitalized European leader in security-awareness training with real certifications behind it, though it operates in an inherently incremental category and faces strong competition from KnowBe4, Proofpoint and others.

Visit Website ↗ + Add to Compare Claim This Company
58/100Incremental Innovator

Innovation Matrix Assessment

Innovation Velocity 5/10

Applies behavioral science to gamified, adaptive security-awareness training -- a real methodological refinement of a well-established training category rather than a new technical approach.

Operational Value 7/10

Large European enterprise customer base and GDPR-native design from founding in Cologne; ISO/IEC 27001:2022 certified, indicating mature internal security operations.

Market Momentum 6/10

$73M (~€63.6M) Series B led by Highland Europe with Acton Capital and Global Founders Capital; no larger round publicly disclosed since, suggesting steadier rather than explosive recent momentum.

Category Disruption 4/10

Security-awareness training is a mature, well-served category; SoSafe's behavioral-science and gamification angle is a genuine improvement in engagement but not a re-invention of the category.

Real-World Efficacy 6/10

ISO/IEC 27001:2022 certification is independently verifiable; specific training-efficacy outcome metrics (e.g. phishing-click reduction rates) are primarily self-reported.

Enduring Relevance 7/10

Human-risk/security-awareness training remains a durable, often compliance-mandated need (GDPR, NIS2, insurance requirements), though budget prioritization can ebb and flow with broader security spend.

Why CISOs Should Care

SoSafe helps CISOs reduce human-risk exposure with GDPR-native, behavioral-science-driven security-awareness training and phishing simulation that's built for European compliance regimes (GDPR, NIS2) from the ground up, not retrofitted from a U.S.-first product.

What Makes It Different

Differentiates through a behavioral-science foundation and gamified engagement model, plus privacy-by-design architecture and ISO/IEC 27001:2022 certification tailored to European data-protection requirements, versus more generic global awareness-training vendors.

The Matrix Verdict

58/100 — INCREMENTAL INNOVATOR

A mature, well-capitalized European leader in security-awareness training with real certifications behind it, though it operates in an inherently incremental category and faces strong competition from KnowBe4, Proofpoint and others.

Editorial Note: Claims vs. Verified Findings

Specific phishing-click reduction and behavior-change statistics are company-reported rather than independently audited.

Sources