RansomLeak

RansomLeak is an organizational security-awareness platform for teams that need to train staff, measure human risk, and support compliance work. Its mix of broad exercises and flexible deployment makes it a strong candidate for complex programs, while custom pricing and its exclusion of personal health information rule it out for some buyers.

Overview

The free library gives prospective buyers more than 200 exercises to try without an account. Its coverage extends beyond phishing to privacy and compliance, AI and LLM security, real-world incidents, application and API security, repositories, and cloud security. That breadth can serve teams building a varied program, although the paid platform’s custom pricing makes budgeting less straightforward than a published seat price.

RansomLeak combines training delivery with phishing simulations, automated training, risk scoring, and reporting. It is built for organizational programs, not individual learners seeking a personal training subscription.

Key features

Program delivery and measurement

Administrators can develop custom content, upload materials, set role-based learning paths, and run campaigns. Analytics, reminders, and compliance reports support continuing programs rather than isolated exercises. Risk scoring and phishing simulations add ways to assess and reinforce behavior; automated training can reduce the administrative work of keeping learners on track.

LMS and integrations

Teams can export courses as SCORM 1.2 or 2004 packages, or launch them through LTI 1.3 with grade passback and roster sync. Those options make RansomLeak more practical for organizations that already deliver training through an LMS. Named integrations include Vanta, Drata, Grafana, New Relic, Datadog, PagerDuty, Slack, Microsoft Teams, Jira Service Management, HiBob, Okta, and GitLab, connecting the training program to a range of compliance, operations, collaboration, HR, and identity tools.

API, security, and deployment

The REST API uses scoped per-tenant tokens; webhooks use HMAC-SHA256 signatures and include retries and delivery logs. These are useful controls for teams integrating training events into internal systems. RansomLeak can run as multi-tenant cloud, dedicated private cloud, or on premises, including air-gapped networks. Multi-tenant hosting is offered in US or EU regions, while dedicated private cloud can use a customer-selected region.

The maker says stored data is encrypted with AES-256 and data in transit with TLS 1.2+/1.3. It describes GDPR and CCPA measures, NIST alignment, NIS2 and DORA support, and AWS infrastructure certifications including SOC 2 and ISO 27001. RansomLeak is not a HIPAA-covered service, and customers are advised not to upload personal health information; organizations handling that data should choose another service or keep it out of the platform.

Pricing

PlanPriceWhat it includesFree exercise libraryfree200+ exercises; try without signupPaid platformCustom quotePricing depends on seat count and feature scopeThe free library is a useful way for a team to evaluate the exercise content, but it is not the full training platform. The paid plan is the relevant choice for organizations needing campaigns, reporting, risk scoring, integrations, or deployment options; the quote-based model means cost depends on both seats and scope. Inquiries are answered within one business day, and the company offers a personalized 30-minute demo. No trial length or renewal term is stated.

Platforms

RansomLeak supports API, self-hosted, and web use. The deployment choices range from shared cloud to dedicated private cloud and on-premises installations, including air-gapped networks, giving organizations with stricter hosting requirements more options than a cloud-only service.

Who it's for

RansomLeak is best suited to organizations running structured security-awareness programs that need role-based learning, human-risk measurement, compliance reporting, and control over hosting or data region. It is less suitable for individuals, teams that need a simple public per-seat price, or organizations that must process personal health information in their training platform.

Pros and cons

Pros: A 200+ exercise library can be explored without signup, lowering the effort required to assess content fit.

Pros: Role-based paths, campaigns, analytics, reminders, and compliance reports support an ongoing program rather than one-off training.

Pros: SCORM, LTI, named integrations, API, and signed webhooks give teams several ways to connect training with existing systems.

Pros: Multi-tenant, private-cloud, and on-premises options, including air-gapped deployment, suit organizations with differing hosting needs.

Cons: The paid platform uses custom pricing based on seats and feature scope, so buyers cannot estimate cost from a public rate.

Cons: It is not a HIPAA-covered service, and personal health information should not be uploaded.

Alternatives

Wizer is worth considering for teams that want a freemium option with a free plan covering basic annual awareness training, basic user management, limited reporting, and automatic learner reminders.

Proofpoint Email DLP and Encryption is another paid option for buyers comparing security software across web and mobile platforms.

Gophish is the better fit for teams seeking a free, open-source phishing framework they can run on Linux, macOS, Windows, or self-hosted infrastructure.

Hoxhunt may suit organizations seeking a paid platform priced by employee count and required capabilities.

Cofense PhishMe is another paid option, with a free plan also available.

DarkPhish may fit teams wanting a free community tier with up to 100 managed users, one active campaign, a simulation engine, basic reporting, and a core REST API.

Hackiwi offers free access for individuals and families to browse its whole library and premium tools without an account.

Infosec IQ is another paid platform to consider, with enterprise options that include LMS integration and SCORM support.

For a broader comparison, see Security Awareness Training Software.

Verdict

Choose RansomLeak if your organization needs broad security training, measurement and reporting, and the flexibility to connect it to existing LMS and IT systems or deploy it privately. The free library is a sensible first step for judging its exercises. Look elsewhere if you need transparent paid pricing or a platform suitable for personal health information.