Skip to main content

Security Awareness Training Your Team Completes

Interactive 3D simulations covering phishing, ransomware, AI threats, GDPR, and the EU AI Act. 100+ free exercises where employees practice under real attack pressure.

RansomLeak Human Risk Management platform interface showing interactive 3D phishing simulation, email security exercise, and threat detection dashboard

Exercise Library

Free interactive cybersecurity exercises to build your human firewall. Practice phishing, ransomware, vishing, and AI threat scenarios. No sign-up required. See all free exercises →

OWASP Top 10 for LLM & Agentic AI

AI & LLM Security Training Exercises

AI systems introduce new attack surfaces that traditional security training doesn't cover. Our exercises address risks from the OWASP Top 10 for LLM Applications and the OWASP Top 10 for Agentic Applications, covering prompt injection, data poisoning, AI-generated phishing, agent goal hijacking, and autonomous tool misuse.

Privacy, GDPR, EU AI Act & OWASP

Data Privacy & Regulatory Compliance Training

Interactive exercises covering GDPR, the EU AI Act, the OWASP Top 10 Privacy Risks, and data protection fundamentals. Practice data subject rights, breach notification, AI risk classification, human oversight, consent management, and cross-border transfer rules through realistic regulatory scenarios.

Platform Features

Everything enterprise security teams need to run a Human Risk Management program. Interactive training, SCORM delivery, analytics, compliance reporting.

Interactive 3D Simulations SCORM Compliance Real-Time Analytics Gamification Elements Custom Content Content Uploads Custom Learning Paths Campaigns Single Sign-On (SSO) Multi-Factor Authentication (MFA) Reminders Reports Tenant Whitelabeling Teams Role-Based Access Control SIEM Export Slack & Teams Calendar Integration IP Whitelisting

What Is Human Risk Management?

Human Risk Management (HRM) measures and reduces the cyber risk that comes from employee behavior. It replaces one-off compliance videos with hands-on simulations, behavioral analytics, and role-specific coaching. Verizon's 2024 Data Breach Investigations Report found that 68% of breaches involve a human element.

RansomLeak is a browser-based HRM platform. Interactive 3D simulations cover phishing, ransomware, social engineering, vishing, smishing, business email compromise, deepfake whaling, AI prompt injection, GDPR, and the EU AI Act. Training ships as SCORM 1.2 / 2004 packages for any LMS, or runs on the RansomLeak cloud with SSO, analytics, and campaign management.

Dmytro Koziatynskyi and Maksym Khamrovskyi founded RansomLeak in 2025 in Tallinn, Estonia. The platform has 100+ free exercises with no sign-up and produces compliance reports for SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, the EU AI Act, and NIS2.

Frequently Asked Questions

Everything you need to know about deploying enterprise security awareness training

  • How does RansomLeak integrate with our existing Learning Management System?

    RansomLeak supports SCORM 1.2 and SCORM 2004, tested with 50+ LMS platforms including Moodle, SAP SuccessFactors, Cornerstone, Workday, Docebo, Canvas, Blackboard, and 360Learning. Each exercise exports as a SCORM package in one click.

    Your LMS handles progress tracking, completion, and scores. Exercises run inside your LMS with no external calls, which handles data residency. Offline packaging is available for air-gapped networks.

  • What security and compliance standards does RansomLeak follow?

    AES-256 at rest, TLS 1.3 in transit. Keys rotate through AWS KMS.

    We align with GDPR, CCPA, NIST, NIS2, and DORA. CSA STAR Level 1 documented. SOC 2 Type II and ISO 27001 inherited through AWS. Outside firms audit the platform yearly.

  • Can we customize training content to align with our organizational policies?

    Pick from scenario packs for healthcare, finance, retail, and government. Set up per-department curricula for engineering, HR, and executive teams. For unique threat profiles, our content team builds custom exercises around your attack surface and operations.

    You can also upload your own materials directly: PDFs, presentations, videos, images, and third-party SCORM packages all live alongside RansomLeak exercises in a single content library.

  • What analytics and reporting capabilities are available for administrators?

    A real-time analytics dashboard shows completion rates by department, team, or individual. Knowledge assessment scores track comprehension across topics like phishing identification and data handling.

    All reports are audit-ready and formatted for SOC 2, ISO 27001, and HIPAA compliance. Data exports are available in PDF, CSV, and Excel. Scheduled automated reports can be delivered weekly or monthly.

  • How scalable is the platform for organizations with thousands of employees?

    Runs on AWS with auto-scaling for 50 to 50,000+ employees. Multi-tenant setup keeps each org's data isolated. Import users by CSV, sync through SCIM, or auto-enroll through the API.
  • What level of support and onboarding assistance is provided?

    Every enterprise client gets a dedicated success manager who runs the rollout end to end. Support is 24/7 with response times set by your SLA tier. Most orgs are live within days.
  • How frequently is training content updated to address emerging threats?

    New training content ships monthly, with additional updates for significant threat developments. Recent additions cover AI-powered phishing, deepfake social engineering, QR code phishing (quishing), and business email compromise.

    A content review board of active security researchers validates every exercise before release. Existing exercises are updated to reflect the latest tactics documented in frameworks like MITRE ATT&CK.

Still have questions? Our team is here to help.

Chat With Us