RansomLeak vs SentryMail
RansomLeak
ransomleak.com
SentryMail
sentrymail.deSide by side
| Figure | RansomLeak | SentryMail |
|---|---|---|
| Price from | Free | €0.83/mo |
| Free plan | Yes | Yes |
| Free trial | Yes | — |
| Open source | — | Yes |
| Web | Yes | Yes |
| Linux | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 2 | 12 |
| Spec score · Security Awareness Training Software | 7.7 (#14) | 8.8 (#2) |
| Compliance | The maker describes GDPR and CCPA measures, NIST alignment, NIS2 and DORA support, and AWS infrastructure certifications including SOC 2 and ISO 27001. | SentryMail says it helps organizations document awareness training for NIS2 and lists a compliance center covering GDPR, NIS2, ISO 27001, BSI ORP.3, and § 38 BSIG. |
| Data residency | Multi-tenant hosting is offered in US or EU regions, while dedicated private cloud can use a region selected by the customer. | The product is designed to run entirely on the operator’s infrastructure without vendor telemetry or cloud dependency. |
| Deployment | The product is available as multi-tenant cloud, dedicated private cloud, or an on-premises installation, including air-gapped networks. | The official installation guide describes a Docker Compose stack and lists Linux with Docker Engine as its operating-system requirement. |
| Headquarters | Tallinn, Estonia | The operator’s registered office is Lindental 8d, 94032 Passau, Germany. |
| Integrations | Named integrations include Vanta, Drata, Grafana, New Relic, Datadog, PagerDuty, Slack, Microsoft Teams, Jira Service Management, HiBob, Okta, and GitLab. | Documented connections include LDAP, Microsoft Entra ID, SCIM 2.0, OIDC, SAML, Splunk, Elasticsearch, Microsoft Sentinel and generic JSON. |
| Maker | RansomLeak OÜ lists its address in Tallinn, Estonia, and identifies Dmytro Koziatynskyi and Maksym Khamrovskyi as founders. | The legal notice identifies SecureBits Cyber Security UG (in formation), represented by Aurel Louis Hintzen, with a registered office in Passau, Germany. |
| Security | The maker states that stored data uses AES-256 encryption and data in transit uses TLS 1.2+/1.3. | The maker’s documentation lists Argon2id passwords, secrets encrypted at rest, two-factor authentication with backup codes, audit logging, and hardened containers. |
| Support | The contact page says inquiries are answered within one business day and offers a personalized 30-minute demo. | Community users are directed to GitHub support, while Business includes email support. |
Plans
SentryMail
- CommunityFree
- Business (2,501+ employees)€10 a year
- Business (1,001–2,500 employees)€11 a year
- Business (501–1,000 employees)€13 a year
- Enterprise (2,501+ employees)€14 a year
- Business (301–500 employees)€15 a year
- Business (151–300 employees)€18 a year
- Business (51–150 employees)€21 a year
- Business (25–50 employees)€25 a year
- Enterprise (25–50 employees)€35 a year
In their own words
RansomLeak
RansomLeak provides security awareness training through interactive 3D simulations and a cloud learning management system. Its library has more than 200 exercises visitors can try without signing up, spanning security awareness, privacy and compliance, AI and LLM security, real-world incidents, application and API security, Git and repository security, and cloud security. Organizations can add custom content and uploaded materials, create role-based learning paths and campaigns, and use analytics, reminders, and compliance reports. Training can be exported as SCORM 1.2 or 2004 packages, or launched through LTI 1.3 with grade passback and roster sync. Deployment choices include multi-tenant cloud, dedicated private cloud, and on-premises installation, including air-gapped networks. The documented REST API uses scoped per-tenant tokens; webhooks use HMAC-SHA256 signatures and include retries and delivery logs. The maker says stored data uses AES-256 encryption and data in transit uses TLS 1.2+/1.3. Multi-tenant hosting is available in US or EU regions. The service is not HIPAA-covered, and customers are advised not to upload personal health information. Paid platform pricing is by custom quote.
SentryMail
SentryMail is a self-hosted phishing-awareness platform for planning simulated campaigns and reviewing recipient-level responses. Teams can schedule campaigns, build them from HTML or Markdown templates, import .eml files, create landing pages, and track opens, clicks, and form submissions for each recipient. Reports include campaign analytics, a dashboard risk score, and CSV export. The Enterprise LMS adds self-hosted mandatory video training, automatic course assignments for low awareness scores, quizzes, and certificates. Listed integrations include LDAP, Microsoft Graph, SCIM 2.0, OIDC/SSO providers, and SMTP services. Enterprise adds SAML SSO, SIEM exports, and LMS xAPI export. Security measures listed include Argon2id passwords, encrypted secrets, two-factor authentication, audit logs, hardened containers, and hash-chained audit entries with an exportable evidence package. Community is free forever and self-hosted. Paid plans require at least 25 employees; Business and Enterprise license purchases are marked as coming soon. Installation documentation calls for Docker Compose and Linux with Docker Engine.