Built by CISOs who lived the problem.
For twenty years the industry sold organizations the wrong solution to one of cybersecurity's most critical problems - and our founder ran those tools himself, reported the reassuring charts to the board, and privately knew none of it was working.
OutThink exists to end security awareness as we know it - and replace it with Human Risk Management: measurable, autonomous, humane. Founded in 2019 by CISOs; engineering HRM one capability at a time since.
2013
MSc thesis on human factors
2019
Founding
100+
Enterprise deployments
Visual
founder-era timeline strip
2013 MSc thesis on human factors → CISO years → 2019 founding → 100+ enterprise deployments.
It started as a frustration, not a business plan
Flavius Plesu had been obsessing over the secure behavior problem since 2013, when he wrote his MSc thesis on human factors in cybersecurity. As a CISO he deployed or tested every tool the market offered - and watched none of them change behavior. OutThink was born from knowing the job needed to be done differently, and having nothing that could do it.
Research first, code second
We spent years in applied psychology, behavioral science and learning theory before writing a line of code - and we've kept the discipline: PhDs researching social engineering at leading universities, and Professor Angela Sasse (FREng) as Chief Scientific Advisor. The product is opinionated because the science is.
100+ enterprise deployments
10+ billion behavioral data points. Millions of users across banking, manufacturing, mining, education and critical infrastructure.
Where we are now
100+ enterprise deployments. 10+ billion behavioral data points. Millions of users across banking, manufacturing, mining, education and critical infrastructure - and a manifesto that names, honestly, what the industry got wrong and what replacing it requires.
What we believe
People are the greatest asset in security, not the weakest link - so the platform coaches, never polices. Compliance is the floor, not the finish line. And a program that can't evidence falling risk isn't finished - it hasn't started.
I'm looking for security practitioners who believe what we believe. Who see the same gap, feel the same frustration, and refuse to accept that compliance theater is the best we can do.
- Flavius Plesu, Founder & CEO, OutThink
