ABOUT US

Built by CISOs who lived the problem.

For twenty years the industry sold organizations the wrong solution to one of cybersecurity's most critical problems - and our founder ran those tools himself, reported the reassuring charts to the board, and privately knew none of it was working.

OutThink exists to end security awareness as we know it - and replace it with Human Risk Management: measurable, autonomous, humane. Founded in 2019 by CISOs; engineering HRM one capability at a time since.

It started as a frustration, not a business plan

Flavius Plesu had been obsessing over the secure behavior problem since 2013, when he wrote his MSc thesis on human factors in cybersecurity. As a CISO he deployed or tested every tool the market offered - and watched none of them change behavior. OutThink was born from knowing the job needed to be done differently, and having nothing that could do it.

2013

MSc thesis on human factors in cybersecurity

CISO years

Deployed or tested every tool the market offered - none changed behavior

2019

OutThink founded to do the job differently

Today

100+ enterprise deployments

Research first, code second

We spent years in applied psychology, behavioral science and learning theory before writing a line of code - and we've kept the discipline: PhDs researching social engineering at leading universities, and Professor Angela Sasse (FREng) as Chief Scientific Advisor. The product is opinionated because the science is.

Professor Angela Sasse portrait

Where we are now

100+ enterprise deployments. 10 billion behavioral data points. Across banking, manufacturing, mining, education and critical infrastructure - and our vision for HRM that names, honestly, what the industry got wrong and what replacing it requires.

100+

enterprise deployments

10B

behavioral data points

Across

Banking
Manufacturing
Mining
Education
Critical infrastructure

What we believe

People are the greatest asset in security, not the weakest link - so the platform coaches, never polices. Compliance is the floor, not the finish line. And a program that can't evidence falling risk isn't finished - it hasn't started.

Flavius Plesu
Flavius PlesuFounder and CEO, OutThink

The most pertinent problem in cybersecurity. Come solve it with us.