OutThink

OutThink provides a cybersecurity human risk management platform that centers on quantifying and reducing the risks associated with employee behavior. Founded in 2015 by a group of Chief Information Security Officers (CISOs), including CEO Flavius Plesu, the company was established to address the shortcomings of traditional security awareness training. Plesu, formerly a CISO at Bank of Ireland, was motivated by the realization that a data-driven approach was needed to manage the human element of cybersecurity, which is implicated in up to 90% of data breaches.

The company operates on a Software as a Service (SaaS) business model, offering its cloud-based platform to a range of clients, including large, multinational enterprise organizations. The platform is designed to move beyond simple compliance training by combining human intelligence with data from a client's existing security systems to identify risk patterns. It uses machine learning and applied psychology to assess employee attitudes and security behaviors, enabling the delivery of personalized, adaptive training content. Key features include an AI-powered phishing simulator, adaptive security awareness training based on user risk profiles, human risk intelligence analytics, and integrations with enterprise tools like Microsoft 365 and Sentinel.

OutThink has achieved significant milestones, including securing support from the European Innovation Council in 2021 and raising $10 million in a seed funding round in 2022, led by AlbionVC. This funding has supported the company's international expansion and product development. The platform is recognized by industry analysts like Gartner and Forrester and is trusted by major companies such as Danske Bank, Whirlpool, and Vinci.

Keywords: human risk management, cybersecurity training, security awareness, phishing simulation, risk intelligence, behavioral security, SaaS, CISO tools, employee security, risk-based training, adaptive learning, data breach prevention, security culture, threat detection, compliance management, enterprise security, insider threat, cyber resilience, risk analytics, security automation