SoSafe
Security awareness and human risk management that makes cybersecurity instinctive and measurable
By SoSafe SE · HQ Cologne, Germany · 4.5/5 Value-Position score (estimate)
Positioning guardrails
Best for
- Mid-market and enterprise security teams that must prove measurable behaviour change, not just training completion rates.
- European organisations that need to evidence NIS2, DORA or ISO 27001 human-risk controls for auditors, boards and works councils.
- Multinational workforces requiring training and simulations localised across 30+ languages and role-specific learning paths.
- Security teams with heavy manual programme overhead; SoSafe targets roughly 10–15 minutes of weekly admin.
Ideal size: 250–10,000 employees people · Scale-up or enterprise with a named security awareness owner
Not for
- Teams wanting a free or fully self-serve tool: every plan is quoted, per-user, from around €625 per month.
- Organisations seeking only a standalone phishing simulator without training, culture measurement or service wrap.
- Buyers with US-only data-residency or FedRAMP-style federal requirements, which SoSafe does not evidence.
Value metrics scorecard
Time-to-Value
2–4 weeks
~30 days to first production value
Total Cost of Ownership
$30,000/yr
Starts at $8,100 · Degressive per-user pricing billed annually; plans start from €625/month including 50 seats, onboarding and basic support
Implementation Friction
2/5
Engineering + admin effort required
Value-Position score
out of 5 · model estimate
Full cost breakdown
Mandatory implementation fee
None
Seat tiers
Entry plan covers 50 seats; users can be added mid-term and are billed for the remaining contract period; per-seat price falls as seat count grows
Add-on costs
- Sofie AI security assistant — add-on, quoted separately
- Enterprise support and implementation — priority handling, faster response times, dedicated customer success manager
- Compliance content bundles (EU, DACH, UK, AML) — listed as an add-on on every plan
- Friends and family training — 10% employee access included at Ultimate
- Policy-to-Lesson AI lesson creation — add-on on Essential and Professional
Company & support
Who is behind SoSafe, and how your team gets help once it is live.
Company
- Founded
- Not recorded
- Headquarters
- Cologne, Germany
How you get support
- PhoneNot listed
- EmailAll plans
- Live chatNot listed
- Support portal / ticketsNot listed
- Community forumNot listed
- Help centre / docsAll plans
- Dedicated account managerEnterprise only
- In person / on-siteNot listed
- Hours
- Not recorded
- Response time
- Not stated
Basic support via the Customer Success Helpdesk email plus self-service knowledge base and webinars is included in every plan. Enterprise support is a paid add-on with higher priority handling, faster response times and dedicated customer success managers.
“Not listed” means the vendor’s public pages don’t mention that channel, not that it is unavailable. Ask about it during evaluation.
Market position
Where SoSafe sits against its closest alternatives. Pick any two of cost, speed, friction and buyer score, and up to 9 companies to compare.
Quadrant view
Typical annual cost × Time-to-value
The lines cross at the median of the solutions shown, so about half sit on each side of each line. A dashed ring marks an outlier pinned to the edge; hover for its value.
Companies on the chart 6 / 10
- SoSafe
- VComply
- Blumira
- Strike Graph
- UpGuard
- Black Kite
Add or change companies
Up to 10 companies including SoSafe. Listed closest first.
Stack fit signal
Compatibility with standard B2B ecosystems.
No supported MCP path today, so it cannot be driven from an AI client.
AI & MCP readiness
What SoSafe ships in AI, and what it asks of your ecosystem.
AI features shipped
Sofie, the AI copilot, answers employee security questions 24/7 inside Teams and Slack; Simulation Studio with AI generates phishing templates from prompts; Policy-to-Lesson converts policy PDFs into multilingual e-learning; reported mails get instant AI-assisted feedback. Sofie is sold as a separate add-on.
Your data & models
- Trains on your data
- Never trains on your data
- Runs on
- OpenAI
- AI pricing
- Paid add-on
In your ecosystem
- AI connection
- Not supported
- Model key
- Not recorded
- AI usage audit
- Not recorded
Compliance attestations
* IAPP AIGP certifies individuals, not products. It means named staff hold the credential — not that the platform does.
Bottom line
SoSafe is a European security awareness and human risk management platform. It combines behaviour-led training with multi-channel phishing, smishing and vishing simulations, employee phishing reporting, the Human Risk OS behaviour index, and the Sofie AI copilot. Pricing is quoted on a degressive per-user basis from €625/month for 50 seats, with basic onboarding included. Native integrations cover Microsoft 365, Google Workspace, Slack, Jira and ServiceNow, with SCORM export to LMS platforms. Reporting maps to NIS2, DORA and ISO 27001.
Frequently asked questions
How is SoSafe priced?
SoSafe does not publish list prices. Plans start from €625 per month billed annually and include 50 seats, onboarding, ready-to-use phishing simulations, training and compliance-ready reporting. Pricing uses a degressive per-user model, so the per-user price falls as you add users without threshold cliffs. Existing contracts can add users mid-term, billed for the remaining contract period. Sofie, the AI copilot, is an add-on quoted separately, and enterprise support, compliance content bundles and friends-and-family training are also add-ons.
How long does implementation take and is there a mandatory implementation fee?
There is no mandatory implementation fee. Basic implementation is included in the price of every plan and provides a best-practice onboarding experience. A full-service Enterprise Implementation is available as a paid add-on with a guided selection of customisable templates and custom phishing scheduling. SoSafe states that fully automated campaigns plus expert consulting reduce ongoing admin to roughly 10–15 minutes per week.
Which systems does SoSafe integrate with?
Native integrations include Microsoft 365 (Outlook phishing report add-in), Google Workspace (Gmail reporting), Microsoft Teams and Slack (Sofie copilot), Jira and ServiceNow for security tickets, Microsoft Defender and CrowdStrike for risk signals, and Entra ID/Okta for SSO with automated provisioning from HRIS systems such as Workday, Personio and BambooHR. Content exports as SCORM 1.2 into LMS platforms including SAP SuccessFactors and Moodle, and an open REST API supports BI, EDR and SOAR workflows.
Does SoSafe use customer data to train AI models?
SoSafe's privacy notice states that AI service providers process transmitted data exclusively on SoSafe's behalf under a data processing agreement, and that the data is not used to train the provider's AI models. Transfers outside the EEA rely on Standard Contractual Clauses or EU-U.S. Data Privacy Framework certification, and the notice says no decisions are made solely by automated means under Article 22 GDPR. The Zendesk AI chatbot used for support is also described as not training models on your data.
Which compliance frameworks does SoSafe support?
SoSafe positions reporting around NIS2, DORA and ISO 27001, with ISO-compliant reporting included from the Professional plan and one-click behavioural audit exports in the Ultimate tier. Content bundles cover EU/UK data protection, occupational safety and anti-money-laundering topics. The vendor also states that the platform is GDPR compliant, German engineered and EU hosted.
What support is included?
Every plan includes basic access to the Customer Success Helpdesk via email, plus self-service resources such as the knowledge base and webinars, alongside a best-practice onboarding service. Enterprise support is a paid add-on offering higher-priority handling, faster response times and dedicated customer success managers for adoption and best practice.