CyberPilot vs RansomLeak

CyberPilot is a web platform that brings security awareness training and phishing simulations together, with a focus on small and medium-sized companies. Its training includes more than 50 courses covering cybersecurity, GDPR, compliance, AI, and NIS2, along with training plans, reporting, and a branded platform. It creates customized phishing campaigns and reviews results to inform later campaigns. Reports can show opens, clicks, data submissions, and user behavior timelines. Automated user syncing and single sign-on are supported with Microsoft Entra ID and Google Workspace. With Entra ID integration and permissions configured, the platform can also pull Outlook-reported phishing events from Defender. CyberPilot advertises a 14-day free trial for awareness training without requiring a credit card, but has no free plan. The listed monthly plan is €13 a month for 1–20 users; the yearly plan is €13 a year for the same user range. CyberPilot says customer data is currently hosted and processed in AWS’s EU Frankfurt region while infrastructure migrates to Danish provider Scannet.

RansomLeak provides security awareness training through interactive 3D simulations and a cloud learning management system. Its library has more than 200 exercises visitors can try without signing up, spanning security awareness, privacy and compliance, AI and LLM security, real-world incidents, application and API security, Git and repository security, and cloud security. Organizations can add custom content and uploaded materials, create role-based learning paths and campaigns, and use analytics, reminders, and compliance reports. Training can be exported as SCORM 1.2 or 2004 packages, or launched through LTI 1.3 with grade passback and roster sync. Deployment choices include multi-tenant cloud, dedicated private cloud, and on-premises installation, including air-gapped networks. The documented REST API uses scoped per-tenant tokens; webhooks use HMAC-SHA256 signatures and include retries and delivery logs. The maker says stored data uses AES-256 encryption and data in transit uses TLS 1.2+/1.3. Multi-tenant hosting is available in US or EU regions. The service is not HIPAA-covered, and customers are advised not to upload personal health information. Paid platform pricing is by custom quote.