RansomLeak

RansomLeak is a security-awareness platform combining interactive 3D exercises with a cloud LMS. It is a strong fit for organizations that need role-specific training, measurable human-risk programs, and deployment beyond a standard SaaS tenant. The free exercise library lowers the barrier to evaluation, while paid access requires a custom quote and excludes HIPAA-covered use.

Overview

More than 200 exercises can be tried without an account, covering security awareness, privacy and compliance, AI and LLM security, real-world incidents, application and API security, Git and repository security, and cloud security. That unusually broad scope makes RansomLeak relevant to technical teams as well as general employees. The open library is also a practical way to check whether the 3D approach suits your audience before procurement.

Beyond content, the platform combines phishing simulations, automated training, and risk scoring. Campaigns, reminders, analytics, and compliance reports support a continuing program rather than a single annual course. It is aimed at organizations measuring human risk and preparing for compliance obligations, not individuals seeking casual security lessons.

Key features

Training and measurement

Administrators can create custom content, upload existing materials, and assemble role-based learning paths. Campaign controls and automated training reduce manual assignment work, while reminders help chase incomplete learning. Analytics, risk scoring, and compliance reports give security and compliance teams evidence of participation and exposure. Phishing simulations add a behavioral test, although the value of the resulting scores will depend on how thoughtfully campaigns are designed.

LMS and integrations

Courses can be exported as SCORM 1.2 or 2004 packages, or delivered through LTI 1.3 with grade passback and roster synchronization. That makes the product more workable alongside an existing learning environment than an LMS-only replacement. Named integrations include Vanta, Drata, Grafana, New Relic, Datadog, PagerDuty, Slack, Microsoft Teams, Jira Service Management, HiBob, Okta, and GitLab, covering compliance, observability, collaboration, HR, identity, and development workflows.

API, security, and deployment

The REST API uses scoped, per-tenant tokens. Webhooks are signed with HMAC-SHA256 and include retries and delivery logs, useful for controlled automation and troubleshooting. Deployment spans a multi-tenant cloud, dedicated private cloud, and on-premises installation, including air-gapped networks. Stored data is protected with AES-256 and data in transit with TLS 1.2 or 1.3. Multi-tenant hosting offers US or EU regions; dedicated private cloud can use a customer-selected region.

RansomLeak describes GDPR and CCPA measures, NIST alignment, NIS2 and DORA support, and AWS infrastructure certifications including SOC 2 and ISO 27001. It is explicitly not a HIPAA-covered service, and customers are advised not to upload personal health information. That restriction rules it out for workflows requiring HIPAA-covered handling.

Pricing

The free option is an evaluation library, not a complete organizational rollout: it provides exercises to inspect, while the paid platform supplies the delivery, administration, reporting, and deployment capabilities. Custom quoting can suit buyers with unusual seat counts or infrastructure requirements, but it prevents straightforward price comparison and requires a sales conversation. The contact team states that inquiries receive a response within one business day and offers a personalized 30-minute demo.

Platforms

RansomLeak is offered through web access, an API, and self-hosted deployment. Cloud customers can choose multi-tenant US or EU hosting, or a dedicated private-cloud region; organizations with strict isolation requirements can use on-premises or air-gapped installation.

Who it's for

Choose RansomLeak when a security or compliance team needs broad subject coverage, role-based paths, human-risk measurement, and integration with existing LMS, identity, monitoring, or ticketing systems. Its deployment range also suits organizations that cannot place training data in a conventional shared cloud. It is a poor fit for HIPAA-covered programs, small buyers wanting transparent per-user pricing, or anyone needing only a simple phishing tool.

Pros and cons

• Pro: More than 200 no-signup exercises let teams assess the content before buying.
• Pro: Role-based paths, campaigns, automation, reminders, analytics, risk scoring, and compliance reports support a mature program.
• Pro: SCORM, LTI, API, signed webhooks, and numerous named integrations help fit existing systems.
• Pro: Cloud, private-cloud, on-premises, and air-gapped options cover demanding deployment policies.
• Con: Paid pricing is custom, so budget comparison requires a quote based on seats and scope.
• Con: The platform is not HIPAA-covered and should not receive personal health information.

Alternatives

For a freemium service with Android and iOS apps, basic annual training, limited reporting, and reminder emails, consider Wizer. DarkPhish is the better choice when a free Community plan with up to 100 managed users, one active campaign, simulation, basic reporting, and a core REST API is sufficient. Choose Gophish for a free, open-source phishing framework across desktop and self-hosted platforms. SentryMail is an alternative self-hosted or web option. Cofense PhishMe offers free and enterprise plans for buyers considering that product's phishing-focused lineup. Hackiwi suits individuals or organizations of up to 20 seeking a free platform and library. Pick Hoxhunt when employee-count-based custom quoting and broad desktop/mobile coverage are the priority. Infosec IQ is an alternative for buyers seeking enterprise training with LMS integration and SCORM support. Browse the Security Awareness Training Software list for more options.

Verdict

RansomLeak is best for mid-size and large organizations that want varied, role-aware security training tied to measurable risk, compliance reporting, and controlled deployment. Its strongest reason to choose it is the combination of an inspectable exercise library and enterprise-grade delivery flexibility. Look elsewhere if HIPAA coverage or transparent pricing is essential, or if your needs stop at a basic phishing campaign.