RansomLeak
Security awareness training with interactive 3D attack exercises, phishing and SMS simulations, from Tallinn
Quick Overview
| Company | RansomLeak OÜ |
|---|---|
| Category | Security Awareness Training |
| Headquarters | Tallinn, Estonia |
| Founded | 2025 |
| EU Presence | EU (Estonia) |
| Data Location | Per tenant: AWS EU region (Ireland, eu-west-1) or US (us-east-1); dedicated private cloud or on-premises on request |
| Open Source | No |
| Compliance | CSA STAR Level 1 (self-assessment); inherits AWS infrastructure certifications; WCAG 2.1 AA stated; no own ISO 27001 or SOC 2 stated |
| Pricing | No pricing page. The terms describe annual or multi-year licences paid against a quote and invoice (typically net 30), and the site offers a demo for enterprise features. The 200+ catalogue exercises can be tried free without signup. |
| Free Option | Free exercises playable without signup; enterprise features through a demo |
| Replaces | KnowBe4, Proofpoint Security Awareness Training |
Detailed Review
RansomLeak OÜ is a private limited company in Tallinn, Estonia, registry code 17362016, entered in the e-Business Register on 30 October 2025 with Dmytro Koziatynskyi as its sole board member and shareholder (checked on 27 October 2026). Its terms are governed by Estonian law with the Harju County Court. The company is a few months old, which shows in the track record, but the contracting party is clearly European.
The product is interactive 3D training. Employees step into a rendered desktop and phone, perform the real action (open the phishing email, answer a call, run a command) and see the consequence.
The site counts more than 200 exercises covering phishing, BEC, deepfakes, ransomware, GDPR, the EU AI Act and AI prompt injection, delivered as SCORM or LTI packages or through a hosted Cloud LMS in seven languages. A phishing and an SMS simulation module exist, with human risk scoring and SSO and SCIM for Entra ID, Okta and Duo.
Compared with the established platforms on this page, the gaps are real. No price is published and demos are the route to a quote. Voice phishing simulations are marked Soon on the site, so the vishing exercises are training scenarios rather than live call campaigns.
There is no ISO 27001 or SOC 2 report of its own, only a CSA STAR Level 1 self-assessment and the AWS infrastructure certifications it inherits. Tenants choose AWS Ireland or a US region, so check that the EU region is selected in the contract.
What RansomLeak does well
- RansomLeak OÜ is an Estonian company in the e-Business Register (code 17362016) under Estonian law
- Interactive 3D exercises where learners perform the attack steps
- 200+ exercises including GDPR, the EU AI Act and AI prompt injection
- SCORM, LTI and SSO and SCIM for Entra ID, Okta and Duo
- Free exercises playable without signup
Where RansomLeak falls short
- No published price; demo and quote only
- Company registered in October 2025, so little track record
- Live vishing simulations are marked Soon
- No own ISO 27001 or SOC 2, only CSA STAR Level 1 self-assessment
Standout feature. RansomLeak teaches by letting the learner carry out the attack steps inside a 3D scene, a format the video-led platforms here do not offer.
Pros and Cons
Pros
- RansomLeak OÜ is an Estonian company in the e-Business Register (code 17362016) under Estonian law
- Interactive 3D exercises where learners perform the attack steps
- 200+ exercises including GDPR, the EU AI Act and AI prompt injection
- SCORM, LTI and SSO and SCIM for Entra ID, Okta and Duo
- Free exercises playable without signup
Cons
- No published price; demo and quote only
- Company registered in October 2025, so little track record
- Live vishing simulations are marked Soon
- No own ISO 27001 or SOC 2, only CSA STAR Level 1 self-assessment
Alternatives to RansomLeak
Frequently Asked Questions
What is RansomLeak?
RansomLeak OÜ is a private limited company in Tallinn, Estonia, registry code 17362016, entered in the e-Business Register on 30 October 2025 with Dmytro Koziatynskyi as its sole board member and shareholder (checked on 27 October 2026). Its terms are governed by Estonian law with the Harju County Court. The company is a few months old, which shows in the track record, but the contracting party is clearly European.
Where is RansomLeak based?
RansomLeak operates from Tallinn, Estonia, which places it under EU (Estonia). Compliance: CSA STAR Level 1 (self-assessment); inherits AWS infrastructure certifications; WCAG 2.1 AA stated; no own ISO 27001 or SOC 2 stated.
What does RansomLeak cost?
No pricing page. The terms describe annual or multi-year licences paid against a quote and invoice (typically net 30), and the site offers a demo for enterprise features. The 200+ catalogue exercises can be tried free without signup.. Free exercises playable without signup; enterprise features through a demo.
Who is RansomLeak best for?
Teams wanting hands-on 3D exercises from a new Estonian vendor. RansomLeak teaches by letting the learner carry out the attack steps inside a 3D scene, a format the video-led platforms here do not offer.
What are the drawbacks of RansomLeak?
No published price; demo and quote only. Company registered in October 2025, so little track record. Live vishing simulations are marked Soon. No own ISO 27001 or SOC 2, only CSA STAR Level 1 self-assessment.
Is RansomLeak a good alternative to KnowBe4?
RansomLeak is built as a European alternative to KnowBe4: Security awareness training with interactive 3D attack exercises, phishing and SMS simulations, from Tallinn. It will not be a like-for-like feature match in every respect, so check the review above for where the two genuinely differ before switching.
How does RansomLeak compare to other Security Awareness Training tools?
RansomLeak is one of several European Security Awareness Training tools we cover. It is most often compared with KnowBe4, Proofpoint Security Awareness Training.