Hackiwi vs RansomLeak

Hackiwi is a security platform for organisational training, phishing simulations, suspicious-message triage and exposure monitoring. Its video and written lessons include interactive knowledge checks; teams can assign learning paths and track completion. The public training library is free to browse without an account, and its content is licensed under CC-BY-4.0. Organisations with up to 20 users can use the full platform free. Phishing campaigns are available only to verified organisations and domains, and track opens, clicks and reports with safety gates and audit logs. Submitted credentials are not retained; only the event is recorded. Staff can forward suspicious messages from desktop or phone mail clients for automated classification and reputation checks. Exposure tools cover scope-locked OSINT, website scanning, dependency CVE tracking, domain monitoring and alerts for newly registered lookalike domains. Hackiwi runs on the web or on an organisation’s own infrastructure under AGPL-3.0. Its simulator is not offered to individuals or families, and organisations above 20 users pay for premium tooling.

RansomLeak provides security awareness training through interactive 3D simulations and a cloud learning management system. Its library has more than 200 exercises visitors can try without signing up, spanning security awareness, privacy and compliance, AI and LLM security, real-world incidents, application and API security, Git and repository security, and cloud security. Organizations can add custom content and uploaded materials, create role-based learning paths and campaigns, and use analytics, reminders, and compliance reports. Training can be exported as SCORM 1.2 or 2004 packages, or launched through LTI 1.3 with grade passback and roster sync. Deployment choices include multi-tenant cloud, dedicated private cloud, and on-premises installation, including air-gapped networks. The documented REST API uses scoped per-tenant tokens; webhooks use HMAC-SHA256 signatures and include retries and delivery logs. The maker says stored data uses AES-256 encryption and data in transit uses TLS 1.2+/1.3. Multi-tenant hosting is available in US or EU regions. The service is not HIPAA-covered, and customers are advised not to upload personal health information. Paid platform pricing is by custom quote.