Secure Practice
Trondheim privacy-first training with gamified e-learning, phishing simulation and a report button
Quick Overview
| Company | Secure Practice AS |
|---|---|
| Category | Security Awareness Training |
| Headquarters | Trondheim, Norway |
| Founded | 2017 |
| EU Presence | EEA (Norway) |
| Data Location | Cloud servers in the EU/EEA (Norway), as stated on the trust and privacy page |
| Open Source | No |
| Compliance | ISO/IEC 27001 compliance documentation is offered; no certificate is named on the page read |
| Pricing | Priced per user per month by the products chosen; the pricing page calculates a sample for 50 users and ends in a quote, with no amount in the page text |
| Replaces | KnowBe4, Proofpoint Security Awareness Training |
Detailed Review
Secure Practice is operated by Secure Practice AS in Trondheim, organisation number 919 420 197, registered in the Norwegian Business Register in August 2017. The CEO is Erlend Andreas Gjaere.
Its toolkit has five parts: PrepJam, interactive incident exercises that teams play together; MailRisk, which analyses suspicious emails people report and sends feedback; gamified e-learning; simulated phishing with follow-up loops; and Human Risk Metrics for team-level insight. The company says its mission is to help millions of people develop their cybersecurity abilities and knowledge and become more confident in using them.
Privacy is the product's pitch. The trust page says learning is personalised from anonymised behaviour data and that individual actions can never be tied back to a particular person, and that the company took part in the Norwegian Data Protection Authority regulatory sandbox for responsible AI.
Cloud servers are in the EU/EEA (Norway), and ISO/IEC 27001 compliance documentation is offered. Azure cognitive services run in private mode, so a US cloud provider is still involved. The trust page also says a data protection impact assessment is available to customers on request, and the regulator published a public version of the final sandbox report.
That design is a strength for a works council and a weakness for an auditor who needs a named record per employee, a point on which Fallax takes the opposite view.
The pricing page computes a sample for 50 users by selected products but shows no amount in the page text, and the vendor asks for a quote. The site is available in 17 languages; the lesson library size is not stated on the pages read. The pages read do not state how many lessons the e-learning library holds.
What Secure Practice does well
- Secure Practice AS is confirmed in the Norwegian Business Register, organisation number 919 420 197
- Cloud servers in the EU/EEA (Norway), stated on the trust page
- Individual actions are not tied to a named person, by design
- PrepJam adds live incident exercises that other platforms here do not list
- Took part in the Norwegian Data Protection Authority AI sandbox
Where Secure Practice falls short
- No per-person record, which a compliance auditor may expect
- No amount in the page text; a quote is requested
- ISO 27001 is stated as compliance documentation, not as a named certificate
- Azure services are used for AI features, even if in private mode
Standout feature. Secure Practice is built so that no individual employee can be singled out in the data, and it took part in a data protection authority sandbox to prove it.
Pros and Cons
Pros
- Secure Practice AS is confirmed in the Norwegian Business Register, organisation number 919 420 197
- Cloud servers in the EU/EEA (Norway), stated on the trust page
- Individual actions are not tied to a named person, by design
- PrepJam adds live incident exercises that other platforms here do not list
- Took part in the Norwegian Data Protection Authority AI sandbox
Cons
- No per-person record, which a compliance auditor may expect
- No amount in the page text; a quote is requested
- ISO 27001 is stated as compliance documentation, not as a named certificate
- Azure services are used for AI features, even if in private mode
Alternatives to Secure Practice
Frequently Asked Questions
What is Secure Practice?
Secure Practice is operated by Secure Practice AS in Trondheim, organisation number 919 420 197, registered in the Norwegian Business Register in August 2017. The CEO is Erlend Andreas Gjaere.
Its toolkit has five parts: PrepJam, interactive incident exercises that teams play together; MailRisk, which analyses suspicious emails people report and sends feedback; gamified e-learning; simulated phishing with follow-up loops; and Human Risk Metrics for team-level insight. The company says its mission is to help millions of people develop their cybersecurity abilities and knowledge and become more confident in using them.
Where is Secure Practice based?
Secure Practice operates from Trondheim, Norway, which places it under EEA (Norway). Compliance: ISO/IEC 27001 compliance documentation is offered; no certificate is named on the page read.
What does Secure Practice cost?
Priced per user per month by the products chosen; the pricing page calculates a sample for 50 users and ends in a quote, with no amount in the page text.
Who is Secure Practice best for?
Organisations with works councils or strict privacy rules that want training without individual tracking. Secure Practice is built so that no individual employee can be singled out in the data, and it took part in a data protection authority sandbox to prove it.
What are the drawbacks of Secure Practice?
No per-person record, which a compliance auditor may expect. No amount in the page text; a quote is requested. ISO 27001 is stated as compliance documentation, not as a named certificate. Azure services are used for AI features, even if in private mode.
Is Secure Practice a good alternative to KnowBe4?
Secure Practice is built as a European alternative to KnowBe4: Trondheim privacy-first training with gamified e-learning, phishing simulation and a report button. It will not be a like-for-like feature match in every respect, so check the review above for where the two genuinely differ before switching.
How does Secure Practice compare to other Security Awareness Training tools?
Secure Practice is one of several European Security Awareness Training tools we cover. It is most often compared with KnowBe4, Proofpoint Security Awareness Training.