Best Security Awareness Training Programs for Drata

Adaptive Security is OpenAI’s investment for AI cyber threats. The company was founded in 2024 by serial entrepreneurs Brian Long and Andrew Jones. Adaptive has raised $50M+ from investors like OpenAI, a16z and executives at Google Cloud, Fidelity, Plaid, Shopify, and other leading companies. Adaptive protects customers from AI-powered cyber threats like deepfakes, vishing, smishing, and email spear phishing with its next-generation security awareness training and AI phishing simulation platform. With Adaptive, security teams can prepare employees for advanced threats with incredible, highly customized training content that is personalized for employee role and access levels, features open-source intelligence about their company, and includes amazing deepfakes of their own executives. Customers can measure the success of their training program over time with AI-powered phishing simulations. Hyper-realistic deepfake, voice, SMS, and email phishing tests assess risk levels across all threat vectors. Adaptive simulations are powered by an AI open-source intelligence engine that gives clients visibility into how their company's digital footprint can be leveraged by cybercriminals. Today, Adaptive’s customers include leading global organizations like Figma, The Dallas Mavericks, BMC Software, and Stone Point Capital. The company has a world class NPS score of 94, among the highest in cybersecurity.

Fallax conducts internal phishing tests within your Google Workspace or Microsoft 365 tenant, providing instant training to users who click on simulated threats and generating evidence for audits. These simulations are directly inserted into mailboxes within your tenant, eliminating the need for a sending domain, which means there’s no requirement for SPF, DKIM, or DMARC configurations, thus preserving your email reputation. When users click on a phishing link, they are directed to a brief training page. The scheduling of these simulations is tailored to each individual and is automatically adjusted based on their previous interactions, following set rules for pacing and limits. A single export can demonstrate compliance with standards such as ISO 27001, SOC 2, NIS2, DORA, PCI DSS, HIPAA, GDPR Article 32, and NIST CSF, and it seamlessly integrates with Vanta, Drata, Secureframe, and Sprinto. Additionally, Fallax features automated phishing reports sourced through an Outlook or Gmail add-on, identifies popular applications that employees use, provides departmental performance standings, and offers a REST API along with an MCP server for added functionality. The service is hosted in the EU and strictly adheres to GDPR regulations, ensuring that submitted credentials are never stored. To encourage usage, the first ten user seats are free indefinitely. Moreover, this comprehensive approach not only enhances security awareness but also bolsters your organization’s overall cybersecurity posture.