NINJIO Acquires SafeStack to Expand Human Risk Management with Secure Code Training
Cybersecurity risk doesn’t begin and end with employee awareness.
It also lives in the software applications organizations build, maintain, and rely on every day.
That’s why we’re excited to announce that NINJIO has acquired SafeStack, a leading developer security and application security training platform. This acquisition expands NINJIO’s Human Risk Management platform beyond cybersecurity awareness training and phishing simulations to include secure coding education for software development teams.
By bringing SafeStack’s technology, team, and expertise fully into NINJIO, organizations can take a more comprehensive approach to reducing human cyber risk across both employees and developers.
Why Did NINJIO Acquire SafeStack?
The acquisition is a natural evolution of an already successful partnership.
SafeStack currently powers NINJIO Secure Code, our secure software development training solution. Through that partnership, we saw firsthand how combining security awareness training with developer security education creates a stronger defense against modern cyber threats.
As organizations increasingly recognize the importance of Human Risk Management, they need solutions that address risk across the entire workforce, not just end users.
Developers, engineers, architects, and security teams all influence an organization’s security posture. Educating those groups effectively helps reduce vulnerabilities before software ever reaches production.
As Gary Noke, CEO of NINJIO, explains:
“SafeStack has already been an important part of the NINJIO story as the engine behind NINJIO Secure Code. This acquisition allows us to go deeper and move faster. Together, we can offer organizations a more complete solution: security awareness for the workforce and secure code training for the teams building the technology they rely on every day.”
What Is SafeStack?
Founded by internationally recognized application security leader Laura Bell Main, SafeStack provides role-based security training for:
- Software developers
- Application security professionals
- Security teams
- Engineering organizations
SafeStack helps organizations improve software security through practical, real-world education that integrates directly into development workflows.
The company serves organizations around the world and has built a strong reputation for helping teams create safer software while scaling application security programs.
What Does This Mean for NINJIO Customers?
Organizations using NINJIO will gain access to a more unified approach to managing human cyber risk.
The combined platform helps organizations:
- Deliver cybersecurity awareness training to employees
- Train developers in secure coding practices
- Reduce software vulnerabilities
- Strengthen application security programs
- Manage human cyber risk across the organization
Customers can expect continued support for existing products while platform integration continues. NINJIO Secure Code will remain available and will continue to evolve with deeper integration of SafeStack capabilities.
Why Secure Coding Matters in Human Risk Management
Human Risk Management has traditionally focused on helping employees recognize phishing attacks, social engineering attempts, and other cyber threats.
But software vulnerabilities often originate from preventable development mistakes, insecure coding practices, or gaps in security education.
By expanding Human Risk Management to include software development teams, organizations can reduce risk earlier in the security lifecycle and create a stronger security culture across the business.
This broader approach helps align security awareness, application security, engineering, and compliance initiatives under a single strategic framework.
A Shared Vision for Security Education
NINJIO and SafeStack share a common belief: security improves when people receive practical, engaging, and role-specific education.
SafeStack founder Laura Bell Main has long advocated for making secure development a natural part of how software teams work. That vision aligns closely with NINJIO’s mission of changing behavior through effective learning experiences.
As Laura explains:
“SafeStack was built to help developers and security teams work together to create safer software. Through our partnership with NINJIO, we saw firsthand how powerful it could be to combine developer security training with broader human risk management. Joining NINJIO gives us the opportunity to bring that vision to more organizations globally and help make secure development a natural part of how teams build.”
Looking Ahead
This acquisition represents more than the addition of a product.
It expands the scope of Human Risk Management to include the people building technology as well as the people using it.
Together, NINJIO and SafeStack are creating a more complete approach to reducing cyber risk through education, behavior change, and secure software development.
Frequently Asked Questions
Yes. NINJIO has acquired SafeStack and will integrate its secure coding and application security training capabilities into the NINJIO platform.
SafeStack provides secure software development and application security training for developers, security professionals, and engineering teams.
Yes. NINJIO Secure Code will continue to be supported and enhanced as SafeStack capabilities become more deeply integrated into the platform.
Security leaders can now combine employee awareness training and developer security education within a more unified Human Risk Management strategy.
About NINJIO
NINJIO’s human risk management platform reduces cybersecurity risk through personalized security coaching, engaging awareness training, and adaptive testing. Our multi-pronged approach to risk mitigation focuses on the latest attack vectors to build employee knowledge and the behavioral science behind social engineering to sharpen users’ intuition. Our simulated phishing and coaching tools build a proprietary Emotional Susceptibility Profile for each user to identify their specific social engineering vulnerabilities and change behavior.
About SafeStack
At SafeStack, we believe software should be built to last, secure from today’s risks and safe for whatever comes next. Security protects against known threats, but safety prepares for the unknown. That’s why we embed AppSec directly into your workflow, making security second nature. Our courses and platform provide structured education and hands-on guidance to roll out a world-class application security program and meet compliance goals, all tailored to fit your team’s size and resources. SafeStack helps you build software that’s both safe and secure. Because security should support innovation for software that lasts and does good for the people who use it.
