🧠 Food for thought

Implications, context, and why it matters.

A growing market is moving from generic training to AI-based defense

• Tools built to stop social engineering attacks, scams that trick people into giving up access or information, make up a market worth US$3.5 billion in 2024 and projected to hit US$13.21 billion by 2033 1.
• The market is expanding because older methods fall short. About 96% of organizations run security awareness programs, yet roughly 90% of data breaches still involve people 2.
• The pressure is rising as attackers use AI to clone voices and run spear-phishing campaigns, highly targeted scam messages aimed at specific people, at huge scale and near-zero cost 2.
• Frame runs tailored attack simulations based on a company’s policies and tech setup, taking aim at the static content libraries sold by older security vendors 3.
• The founders worked in Unit 8200, a well-known Israeli military intelligence and cyber unit, which gives their plan more credibility against tougher threats 4.

Cybersecurity is turning into a personalized employee growth tool

• These platforms create training and risk scores by role, pushing cybersecurity toward behavior and employee development as well as technical defense 2.
• That approach puts Frame up against KnowBe4 and Proofpoint, cybersecurity companies widely used for security awareness training that have expanded into broader human risk management 5.
• A new software category could emerge that blends security, compliance, and human resources, with cyber awareness treated as a professional skill tracked for each employee 1.
• Adoption may be slowed by high setup costs and a shortage of security staff trained in behavioral analytics, which uses employee behavior data to find risk patterns 1.