Fastest-growing Human Risk companies, Q3 2026

Frame Security is a cybersecurity company focused on human security, specifically addressing risks that arise from employee behavior and susceptibility to phishing attacks. The company launched with $50 million in funding to develop its platform.

• Provides automated analysis of employee-reported suspicious emails
• Offers an inbox add-on (button) that allows employees to report suspicious emails directly without forwarding
• Uses AI to scan reported emails, analyzing headers, content, links, and attachments to return an automated verdict
• Gives security administrators a centralized dashboard to review all reported emails across the organization
• Enables org-wide actions such as deleting a malicious email for all employees simultaneously

Adaptive Security provides AI-driven security awareness training designed to address modern threats including deepfakes and AI-powered scams. The company was founded in 2024 by Brian Long and Andrew Jones, who previously built TapCommerce and Attentive together.

CyberNut provides cybersecurity awareness training specifically designed for K-12 educational institutions. The company focuses on helping school districts protect student data and comply with various education privacy regulations including FERPA, SOPPA, New York Education Law § 2-d, and Massachusetts 603 CMR 23.00.

Cymphony is a cybersecurity company focused on human risk management. The company develops a platform called Cymphony, designed to unify signals related to security, identity, access, behavior, and intent across an organization's workspace into a single human-centric system.

• Consolidates disconnected signals from across the workspace into a unified view
• Focuses on human behavior, identity, and access patterns as primary risk indicators
• Aims to reduce alert fatigue and noise for security teams
• Designed to enable cross-functional collaboration within security operations

SimSpace provides a high-fidelity cyber range platform designed for cybersecurity training, testing, and operational readiness. Founded in 2015 by innovators from US Cyber Command and MIT Lincoln Laboratory, the company delivers realistic simulations of production environments where security teams can practice incident response, test security controls, and validate their defensive capabilities.

Fable Security develops a human risk management platform that addresses security vulnerabilities caused by employee behavior and human error. The company was founded by Nicole Jiang and Sanny Liao, who previously worked in product and data science roles at Abnormal Security, where they observed that organizations remained vulnerable to preventable human errors despite having advanced cybersecurity technology stacks.

SimuPhish provides a Human Risk Management+ platform designed to help organizations build cyber-resilient and compliant workforces. Founded in 2025 by practitioners with offensive security and red-team backgrounds, the platform moves beyond traditional security awareness training toward continuous human detection and response.

Riot is an employee security posture management platform designed to help organizations assess and improve the cybersecurity posture of their workforce. The platform targets cybersecurity teams across companies of all sizes, positioning employees as a first line of defense against cyberattacks.

Riot's core offering centers on monitoring and managing employee security behavior in real time. Key features include an integrated security scoring system called the "Karma score," which provides a unified view of each employee's security posture.

Zepo Intelligence is a cybersecurity company focused on human risk management and security awareness. The company addresses the human element of cybersecurity by helping organizations build security-conscious cultures and develop risk-ready workforces.

• Phishing simulation campaigns to test and improve employee awareness
• Security awareness training grounded in behavioral science and neuroscience
• Human risk management programs targeting cognitive biases and social engineering vulnerabilities
• Consulting and thought leadership on transitioning organizations from compliance-based to culture-based security approaches