
RansomLeak is a security awareness training platform that teaches employees to recognize cyber threats through interactive 3D simulations. Instead of slides and video courses, employees step into realistic attack scenarios modeled on documented threat intelligence and make decisions that determine the outcome.
A phishing simulation doesn't show a screenshot with red circles around the warning signs. It places an email in the employee's inbox that looks like a real message from a vendor or colleague. They choose whether to click, report, or ignore it, and the simulation shows them what their decision would have triggered. Other scenarios cover social engineering calls, chat-based pretexting, data handling decisions, and physical security situations like tailgating and found USB devices.
The methodology is grounded in cognitive science. Active decision-making under pressure produces stronger retention than passive content. When an employee gets fooled by a simulated attack and sees the consequences, that experience sticks longer than any quiz answer.
Training topics:
Phishing and spear-phishing recognition
Business email compromise (BEC)
Social engineering across phone, chat, and in-person channels
Sensitive data handling and classification
Password and credential security
Physical security (tailgating, device theft, removable media)
Incident reporting procedures
Gamification with points, badges, leaderboards, and achievements keeps completion rates high across large organizations. Security teams get real-time visibility into performance and knowledge gaps.
Two deployment options:
SCORM packages (1.2 and 2004) for Cornerstone, Workday, SAP SuccessFactors, Docebo, 360Learning, Moodle, Canvas, Blackboard, and other LMS platforms
Standalone cloud LMS with user management, analytics, campaign scheduling, SSO/MFA, and custom branding
Built by the team behind Kontra Application Security Training for mid-market and enterprise organizations in finance, healthcare, technology, and government.
Dmytro Koziatynskyi