---
title: For Media Enquiries
description: "Press page for CyberCoach: media contact, boilerplate and company facts. The security training company that refuses to trick or score employees."
image: https://www.cybercoach.com/hubfs/media-page-featured-image.png
---

[![CyberCoach Full Logo with Bot Icon](https://www.cybercoach.com/hubfs/CyberCoach_Full_Logo_Black-2.svg)](https://www.cybercoach.com?hsLang=en)

- [English](https://www.cybercoach.com/media)
- [Suomi](https://www.cybercoach.com/fi/media)

- PRODUCT
  
  ## CyberCoach at a glance
  
  An industry-changing platform built on peer-reviewed research: phishing, secure coding, and AI skills training, delivered directly in Teams, Slack, or the browser.
  
  
  
  ### [The Science Behind CyberCoach Why traditional phishing simulations don't work, according to peer-reviewed research from ETH Zurich.](https://www.cybercoach.com/science-behind-cybercoach?hsLang=en)
  
  
  
  ### [Is Phishing Simulation Legal Under GDPR? 9 steps GDPR requires before you phish your employees — and a new simulation approach that doesn't need any of them.](https://www.cybercoach.com/legal-basis-phishing-simulation?hsLang=en)
  
  
  
  ### [Pricing Flexible plans, also monthly. ](https://www.cybercoach.com/pricing?hsLang=en)
  
  
  
  ### [Blog Latest insights into security awareness and what's new with CyberCoach.](https://blog.cybercoach.com?hsLang=en)
  
  
  
  ### [Customer Stories Read more about how CyberCoach has helped organizations across different industries modernize their approach to security and AI training. ](https://www.cybercoach.com/customer-stories?hsLang=en)
  
  
  
  ### [OT Security Training Targeted training for employees working with OT technology.](https://www.cybercoach.com/ot-security-training?hsLang=en)
- [AI TRAINING](https://www.cybercoach.com/ai-security-training?hsLang=en)
  
  ## [AI Training The most comprehensive role-based AI security and productivity training — built to help employees use AI effectively and safely, and keep your organization compliant with the EU AI Act.](https://www.cybercoach.com/ai-security-training?hsLang=en)
  
  
  
  ### [AI Security Training Why choose CyberCoach for your AI security training needs?](https://www.cybercoach.com/ai-security-training?hsLang=en)
  
  
  
  ### [EU AI Act Training Requirements: What You Actually Have To Do AI literacy training has been mandatory since February 2025.  ](https://www.cybercoach.com/eu-ai-act-training-requirements?hsLang=en)
- [FOR DEVELOPERS](https://www.cybercoach.com/secure-development-training-for-developers?hsLang=en)
  
  ## [For Developers Go beyond OWASP Top10 and offer hands-on interactive training for technical roles in secure coding and efficient use of AI. ](https://www.cybercoach.com/secure-development-training-for-developers?hsLang=en)
  
  
  
  ### [Secure Coding Skills Meet ISO/IEC 27001 or SOC 2 requirements for secure development practices with no-nonsense training for your developers and other technical roles, directly in Microsoft Teams or Slack chat. ](https://www.cybercoach.com/secure-development-training-for-developers?hsLang=en)
- [COMPANY](https://www.cybercoach.com/about-us?hsLang=en)
  
  ## [About us We're growing into the most diverse training platform company on the planet.](https://www.cybercoach.com/about-us?hsLang=en)
  
  
  
  ### [About Us Get to know our international team.](https://www.cybercoach.com/about-us?hsLang=en)
  
  
  
  ### [Contact Us Get in touch.](https://www.cybercoach.com/contact-us?hsLang=en)
  
  
  
  ### [Careers We are hiring.](https://www.cybercoach.com/careers?hsLang=en)
  
  
  
  ### [Partner with us Learn more about our partner program.](https://www.cybercoach.com/partnerships?hsLang=en)

- [English](https://www.cybercoach.com/media)
- [Suomi](https://www.cybercoach.com/fi/media)

[FREE TRIAL](https://www.cybercoach.com/free-trial?hsLang=en) [GET A DEMO](https://meetings-eu1.hubspot.com/maria-bique/cybercoach-demo?uuid=88959d26-2ff7-4dd0-8ebd-dd43eb31443e)

Press

# Media inquiries

CyberCoach coaches people the digital judgment their job now demands, from spotting a scam to deciding what to trust an AI with. The industry it competes in still does this by tricking employees and scoring them. We refuse to.

[dana.paredes@cultsecurity.com](mailto:dana.paredes@cultsecurity.com?subject=Media%20inquiry) · Dana Paredes, Communications & Operations

## About

Work changed faster than workplace training did. The industry that is supposed to prepare people for this instead sends them fake scam emails without warning, records who falls for it, and gives them a risk score. Peer-reviewed research says that does not change behavior and can make it worse.

CyberCoach does the opposite. It coaches people in a short chat where they know they are practicing: they work through a realistic situation in their own words and get an answer back straight away, inside the messaging app they already have open. What they practice depends on their role. Nobody is tricked, nobody is graded, and the company never sees how any individual answered.

It is also the first platform of its kind built for the person being trained rather than the department buying it. Employees choose training tone and difficulty, can skip what they already know by passing a skill test, and rate every interaction. Administrators see that average continuously, and it consistently stays above 4 out of 5.

## Boilerplate

Short

CyberCoach builds the digital judgment employees need at work: spotting scams, using AI well, writing safer software, through short role-based coaching conversations in the chat apps they already use. Unlike the rest of the industry, it never tricks or scores the people it trains: practice is announced, and learning is anonymous and psychologically safe by design.

Long

CyberCoach is a Finnish-US company that builds the digital judgment modern work demands: recognizing scams, using AI tools well and writing safer software, through short role-based coaching conversations inside Microsoft Teams, Slack or a browser. It was founded on peer-reviewed evidence that the industry standard, sending staff fake scam emails without warning and scoring them when they fail, does not change behavior and can make it worse. CyberCoach practice is announced instead of deceptive, and it is built so employees cannot be profiled: only that someone completed their training is recorded, never how they answered. Organizations still get the proof of training and useful group-level analytics. CyberCoach was founded by Maria Bique, Teemu Turunen and Mikko Toivanen, and is backed by Butterfly Ventures, Futurice and Villagecape Ventures.

## Facts

Founded by

Maria Bique (CEO), Teemu Turunen (CPO), Mikko Toivanen (CTO)

Company

A Finnish-US venture, born global. Consolidating under the CyberCoach brand as focus narrowed to the CyberCoach SaaS platform; earlier coverage and legal documents may carry the Cult Security name.

Investors

[Butterfly Ventures](https://butterflyventures.com), [Futurice](https://futurice.com), Villagecape Ventures

What it teaches

Role-based digital judgment: scams and social engineering, working with AI, secure software development, in Microsoft Teams, Slack or a browser

User rating

Above 4 out of 5, collected after every interaction and shown continuously to administrators.

Working week

Four days, as one of our commitments to diversity and creativity

## On the record

Three positions we hold, with the research behind them. Happy to discuss any of them, and to point you to the studies themselves:

- **Fake phishing emails do not make anyone safer.** Sending staff scam emails without warning is the most common form of security training in the world. Independent studies of more than 30,000 employees found it produces no lasting improvement, and that the people marched off to a training page after failing went on to click more scams, not fewer. [The research](https://www.cybercoach.com/science-behind-cybercoach?hsLang=en)
- **Scoring employees this way is surveillance, and in Europe it is likely illegal.** Keeping a record of which individuals fell for which fake email is profiling under EU privacy law, which employers may only do when it is genuinely necessary. Since the method does not work, it is hard to argue that it is. [The legal analysis](https://www.cybercoach.com/legal-basis-phishing-simulation?hsLang=en)
- **This whole industry answers to the wrong customer.** Training is bought by security departments, so it is built to reassure them rather than to be any good for the millions of employees who have to sit through it. Nobody asks those employees what they thought. We ask after every session and show the score to the companies that buy us.

## Brand assets

Logos, product screenshots and founder photos are available on request. 

## Not media?

For partnerships, careers, sales or customer support, [contact us](https://www.cybercoach.com/contact-us?hsLang=en).

![cybercoach_logo_white.svg.2023_03_15_16_58_04.0](https://www.cybercoach.com/hubfs/cybercoach_logo_white.svg.2023_03_15_16_58_04.0.svg)

### Product

- [For Developers](https://www.cybercoach.com/secure-development-training-for-developers?hsLang=en)
- [AI Security](https://www.cybercoach.com/ai-security-training?hsLang=en)
- [Manage Subscription](https://billing.stripe.com/p/login/28o4jRclF4gab1C6oo)
- [FAQ](https://www.cybercoach.com/faq?hsLang=en)

### Connect

- [Partner Program](https://www.cybercoach.com/partnerships?hsLang=en)
- [Careers](https://www.cybercoach.com/careers?hsLang=en)
- [For Media](https://www.cybercoach.com/media)
- [Contact Us](https://www.cybercoach.com/contact-us?hsLang=en)

### Legal

- [Privacy](https://www.cybercoach.com/cybercoach-website-privacy?hsLang=en)
- [General Terms](https://www.cybercoach.com/general-terms?hsLang=en)

### Company

- [About Us](https://www.cybercoach.com/about-us?hsLang=en)
- [Blog](https://blog.cybercoach.com?hsLang=en)
- [ESG Policy](https://www.cybercoach.com/esg-policy?hsLang=en)

© 2026 CyberCoach   
All rights reserved

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://www.cybercoach.com/#organization",
  "@type" : "Organization",
  "foundingDate" : "2019",
  "legalName" : "Cult Security",
  "logo" : "https://www.cybercoach.com/hubfs/CyberCoach_Full_Logo_Black-2.svg",
  "name" : "CyberCoach",
  "sameAs" : [ "https://www.linkedin.com/company/cult-security", "https://x.com/cybercoachUS", "https://www.instagram.com/cybercoachus/", "https://www.youtube.com/@CyberCoachOfficial" ],
  "url" : "https://www.cybercoach.com/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://www.cybercoach.com/#software",
  "@type" : "SoftwareApplication",
  "applicationCategory" : "BusinessApplication",
  "applicationSubCategory" : "Security awareness and AI skills training",
  "availableLanguage" : [ "English", "Spanish", "Portuguese (Brazil)", "Portuguese (Portugal)", "French", "Dutch", "German", "Swedish", "Finnish" ],
  "description" : "CyberCoach is a role-based security awareness, privacy and AI skills training platform that runs as a conversational app inside Microsoft Teams, Slack or a web browser. Employees practice AI skills and responding to social engineering in short, psychologically safe scenario-based sessions. Learning is anonymous while successful completions are recorded per user so the organization can evidence training completion for compliance. CyberCoach can also run on pseudonymous identifiers such as Slack or Microsoft UUIDs, with no personal data shared with CyberCoach.",
  "featureList" : [ "Conversational phishing and social engineering challenges", "Role-based training programs for technical and non-technical roles", "AI security and AI use training", "Secure coding training for developers", "OT security training", "Custom content creation", "Compliance assessments (ISO/IEC 27001, GDPR, AI compliance)", "Anonymous learning with per-user completion records for compliance", "Optional pseudonymous deployment using Slack or Microsoft UUIDs" ],
  "name" : "CyberCoach",
  "offers" : [ {
    "@type" : "Offer",
    "description" : "Cover the basics.",
    "name" : "Starter",
    "price" : "49",
    "priceCurrency" : "EUR"
  }, {
    "@type" : "Offer",
    "description" : "Broad topic coverage, custom content, hosted kick-off.",
    "name" : "Advanced",
    "price" : "159",
    "priceCurrency" : "EUR"
  }, {
    "@type" : "Offer",
    "description" : "Full coverage, 24/7 AI chat, compliance assessments, hosted kick-off.",
    "name" : "Complete",
    "price" : "179",
    "priceCurrency" : "EUR"
  } ],
  "operatingSystem" : "Microsoft Teams, Slack, Web browser, iOS, Android",
  "publisher" : {
    "@id" : "https://www.cybercoach.com/#organization"
  },
  "url" : "https://www.cybercoach.com/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://www.cybercoach.com/#faq",
  "@type" : "FAQPage",
  "mainEntity" : [ {
    "@type" : "Question",
    "acceptedAnswer" : {
      "@type" : "Answer",
      "text" : "CyberCoach is a security awareness, privacy and AI skills training platform that runs inside Microsoft Teams, Slack or a web browser. Employees practice role-based skills such as responding to social engineering, ethical and productive use of AI and even secure coding skills in short conversational scenarios. Learning is anonymous, while successful completions are stored so the organization can evidence training completion for compliance frameworks such as ISO/IEC 27001 and SOC 2."
    },
    "name" : "What is CyberCoach?"
  }, {
    "@type" : "Question",
    "acceptedAnswer" : {
      "@type" : "Answer",
      "text" : "Yes, but not by sending deceptive emails to employees. CyberCoach uses conversational phishing challenges in which employees practice recognizing and responding to social engineering scenarios in Teams, Slack or the browser. Peer-reviewed research, including Lain et al. (ETH Zurich, 2022 and 2024), finds that traditional email-based simulated phishing does not reduce risk and can increase misplaced trust in the inbox."
    },
    "name" : "Does CyberCoach do phishing tests?"
  }, {
    "@type" : "Question",
    "acceptedAnswer" : {
      "@type" : "Answer",
      "text" : "No. Learning is anonymous: how an employee answered a training scenario is never visible to managers or administrators. What is recorded is successful completion, so the organization can evidence who has completed required training for compliance purposes. This is privacy by design: the sensitive part of the interaction stays private, and only the completion fact is retained."
    },
    "name" : "Are individual employee answers visible to managers?"
  }, {
    "@type" : "Question",
    "acceptedAnswer" : {
      "@type" : "Answer",
      "text" : "Yes. CyberCoach can be deployed using pseudonymous identifiers, such as Slack or Microsoft UUIDs, so no personal data is shared with CyberCoach. Compliance reporting still works: the mapping between a UUID and a real person is resolved only for authenticated and authorized administrators within the customer's own organization."
    },
    "name" : "Can CyberCoach be used without sharing personal data?"
  }, {
    "@type" : "Question",
    "acceptedAnswer" : {
      "@type" : "Answer",
      "text" : "CyberCoach supports security awareness and secure development training requirements under ISO/IEC 27001 and SOC 2, and includes assessments covering ISO 27001, GDPR and AI compliance on the Complete plan."
    },
    "name" : "Which compliance requirements does CyberCoach support?"
  }, {
    "@type" : "Question",
    "acceptedAnswer" : {
      "@type" : "Answer",
      "text" : "CyberCoach is available in English, Spanish, Portuguese (Brazil), Portuguese (Portugal), Polish, French, Dutch, German, Swedish, Norwegian, Danish and Finnish, with more languages in development."
    },
    "name" : "Which languages does CyberCoach support?"
  }, {
    "@type" : "Question",
    "acceptedAnswer" : {
      "@type" : "Answer",
      "text" : "Plans start at 49 EUR per month for Starter, 159 EUR per month for Advanced and 179 EUR per month for Complete, available monthly or yearly, including through the Microsoft Azure Marketplace."
    },
    "name" : "How much does CyberCoach cost?"
  } ]
}
```