
Adaptive Security is OpenAI’s investment for AI cyber threats. The company was founded in 2024 by serial entrepreneurs Brian Long and Andrew Jones. Adaptive has raised $50M+ from investors like OpenAI, a16z and executives at Google Cloud, Fidelity, Plaid, Shopify, and other leading companies.
Adaptive protects customers from AI-powered cyber threats like deepfakes, vishing, smishing, and email spear phishing with its next-generation security awareness training and AI phishing simulation platform.
With Adaptive, security teams can prepare employees for advanced threats with incredible, highly customized training content that is personalized for employee role and access levels, features open-source intelligence about their company, and includes amazing deepfakes of their own executives.
Customers can measure the success of their training program over time with AI-powered phishing simulations. Hyper-realistic deepfake, voice, SMS, and email phishing tests assess risk levels across all threat vectors. Adaptive simulations are powered by an AI open-source intelligence engine that gives clients visibility into how their company's digital footprint can be leveraged by cybercriminals.
Today, Adaptive’s customers include leading global organizations like Figma, The Dallas Mavericks, BMC Software, and Stone Point Capital. The company has a world class NPS score of 94, among the highest in cybersecurity.
Learn more

NINJIO is an all-in-one cybersecurity awareness training solution that lowers human-based cybersecurity risk through engaging training, personalized testing, and insightful reporting. This multi-pronged approach to training focuses on the latest attack vectors to build employee knowledge and the behavioral science behind human engineering to sharpen users’ intuition. Our proprietary NINJIO Risk Algorithm™ identifies users’ social engineering vulnerabilities based on phishing simulation data and informs content delivery to provide a personalized experience that changes individual behavior.
With NINJIO you get:
- NINJIO AWARE attack vector-based training that engages viewers with Hollywood style, micro learning episodes based on real hacks.
- NINJIO PHISH3D simulated phishing identifies the specific social engineering tricks most likely to fool users in your organization.
- NINJIO SENSE is our new behavioral science-based training course that shows employees what it “feels like” when hackers are trying to manipulate them.
Learn more
PhishTitan
Powerful Inline Phishing Protection for M365. Harness the power of AI and our LLM to defeat phishing. PhishTitan is next generation inline phishing protection and remediation, powered by TitanHQ, the global leaders in email cybersecurity.
Our learning model and AI integrates directly with Microsoft 365, both catching and remediating sophisticated phishing and BEC attacks that Microsoft misses. It provides users with in-the-moment warning banners to help them decide whether an email is malicious or safe, continually enhancing the human firewall.
Post delivery remediation (PDR) allows you to remove all of these phishing emails from your users inbox removing risk instantly. The removed email goes to the junk folder.
Our curated and unique email threat intelligence data is unmatched in its simplicity, visibility, coverage and accuracy.
Risk free deployment in 6 minutes. PhishTitan will filter your email to identify phishing threats and protect your users and business. That’s how you avoid that one wrong click that can lead to disaster – all it takes is 6 minutes!
Learn more
Phishing Club
Phishing Club helps security teams run authorized phishing exercises and red team operations from one self hosted platform. Install it on your own server with a single command or run it through Docker, then build, send, and track
campaigns from a web dashboard backed by a REST API.
The tool covers the full workflow: design multi stage lures, target recipients imported by CSV or synced through SCIM, schedule delivery around business hours, and send through SMTP or an OAuth capable API. Results come back as live
analytics, per user event timelines, and emailed PDF reports. Service providers can separate clients through built in multi tenancy, and admin access is protected with MFA and single sign on.
For offensive engagements it adds reverse proxy and remote browser phishing, session capture, content and URL rewriting, traffic obfuscation, JA4 and geo IP controls, and device code attacks.
Learn more