Cologne-based SoSafe, a cybersecurity startup aiming to reduce human error, raises a $73M Series B led by Highland Europe and says it has over 1,500 customers
As we've learned in the last few years, ‘human error’-led cyber security breaches are the ones companies often find it hardest to guard against.
Context & Ripple Effects
SoSafe's $73M Series B lands in a funding lane that has been widening for years: startups attacking the human layer of security rather than the perimeter. UK-based Panaseer raised early money in 2018 to map 'cyber hygiene' across people, devices and apps ($10M Series A), and months after SoSafe's round its closest behavioral rival CybSafe pulled in a $28M Series B built on behavioral science and data analytics.
The throughline is that buyers and investors now treat employee behavior as an addressable attack surface with its own product category — and SoSafe's claim of over 1,500 customers gives it the scale argument in Europe while Highland Europe's lead check signals that generalist growth capital sees this as more than a niche.
First-order effects
- SoSafe gets the war chest to push beyond its 1,500-customer base and directly contest CybSafe for the same security-awareness budgets, turning a regional German player into a pan-European competitor.
- Highland Europe's lead marks a validation point: human-risk platforms are now raising at the same Series B magnitude as infrastructure security names like CyCognito's earlier $30M Accel-led round.
Second-order effects
- CybSafe and adjacent 'cyber hygiene' vendors like Panaseer are pushed to differentiate on measurable behavior change rather than training completion rates, because SoSafe can now outspend them on sales and product in shared accounts.
- Security risk-quantification players such as Safe Security, which later raised a $50M Series B, gain natural integration partners — awareness platforms need metrics to prove they reduced risk, feeding demand for quantification tooling.
Third-order effects
- If the pattern holds, enterprise security budgets structurally rebalance toward the human attack surface, with awareness platforms consolidating into suites that bundle training, phishing simulation and risk scoring.
- Boards and insurers increasingly expect demonstrable human-risk reduction, making behavior-data platforms a compliance artifact rather than an optional training line item — though whether that standardizes across markets remains open.
The trend: Cybersecurity investment is migrating from perimeter tooling to human-risk platforms, with European behavioral-security startups now raising at the same scale as their US infrastructure peers.