One platform for managing your human risk
Security awareness training and insider threat detection, in one platform. Automated for lean IT teams and MSPs.
Trusted by 1200+ customers & MSPs
Most breaches don't start with clever code. They start with a person on a busy day.
Your people carry risk in everyday moments:
When they're targeted
A convincing phishing email, a fake login, a malicious attachment.
of UK organisations were targeted by phishing this year
A convincing phishing email, a fake login, a malicious attachment.
When they're trusted
With access to data, systems and accounts that could be misused or exposed.
of breaches involve someone on the inside
With access to data, systems and accounts that could be misused or exposed.
Manage these risks with Pistachio
Security Awareness Training
Personalised training and phishing simulations that adapts to every employee and runs without your input.
Tailored, realistic simulations that adapt in difficulty and frequency to each person, showing you where the risk is.
Short, relatable scenario-based lessons that help people connect the dots and build instinctive responses.
A custom training journey for every employee, that builds resilience and awareness to modern cyber threats.
Insider Threat Detection
Make unusual behaviour and hidden account risk visible.
Detects malicious insiders, compromised accounts and accidental risk
Learns normal patterns for each user and flags meaningful deviations
Contextual alerts explain what happened and what to do next
Low effort for your team, with high impact on your human risk
Pistachio keeps reducing your human risk in the background, without adding to your teams workload.
Live in 10 minutes
Connect Microsoft Entra and sync your environment. No lengthy onboarding or months to configure your users.
No ongoing admin
Training and detection keep working in the background, so your protection doesn't lapse when your team is busy.
Always up to date
Training and threat coverage adapt automatically, so you're protecting against this year's attacks.
Trusted by lean teams across Europe
“We lacked confidence that employees would recognise today’s phishing threats or respond correctly. Since using the Pistachio platform, they are more attentive and proactive in identifying potential risks. The solution is easy to manage, quick to implement, and highly effective.
“The platform is easy to implement and provides clear insights into employee phishing awareness. Its bite-sized learning encourages participation, saves administration time, and allows us to focus more on real threat detection.”
“We were looking for a practical way to improve cybersecurity awareness across the organization. Pistachio made training simple and engaging, and we’ve seen a noticeable improvement in employee awareness with minimal effort.”
“Pistachio removed the burden of planning campaigns, collecting data, and evaluating results. The program challenges each employee at their own level and provides clear, simple reporting. Pistachio has streamlined our awareness training and strengthened our organization’s cybersecurity.”
“Our goal was to help employees better recognize phishing emails and avoid malicious links. Pistachio made this easy and engaging, and we’ve seen a clear improvement in detection, fewer clicks on phishing links, and reduced data disclosure. With minimal ongoing maintenance, it’s an effective and low-effort solution.”
“Within weeks, Presence had flagged several incidents that could have otherwise been missed, including employees forwarding company data to personal accounts during offboarding. The alerts are reliable and actionable, so we've built a full investigation process around them. Although I was skeptical at first, the value was obvious almost immediately.”
“Pistachio has reduced our manual workload to zero with its automated phishing simulations and in‑box delivery of scenario‑based trainings. This has allowed our team to dedicate time to other important security initiatives while Pistachio handles our Security Awareness program seamlessly.”
“Presence automatically detects suspicious behaviour and gives us the visibility we need without constant manual oversight. Within the first few weeks we were already seeing alerts that would have otherwise gone unnoticed as the system learns what is usual and unusual behaviour for our environment.”
“Before Pistachio, security awareness was something we could only offer to a few customers. Today it’s part of every managed service we deliver, and we haven’t had to grow the team to make that happen.”
Ready to reduce your human risk? Book your demo today.
“We lacked confidence that employees would recognise today’s phishing threats or respond correctly. Since using the Pistachio platform, they are more attentive and proactive in identifying potential risks. The solution is easy to manage, quick to implement, and highly effective.
“The platform is easy to implement and provides clear insights into employee phishing awareness. Its bite-sized learning encourages participation, saves administration time, and allows us to focus more on real threat detection.”
“We were looking for a practical way to improve cybersecurity awareness across the organization. Pistachio made training simple and engaging, and we’ve seen a noticeable improvement in employee awareness with minimal effort.”
“Pistachio removed the burden of planning campaigns, collecting data, and evaluating results. The program challenges each employee at their own level and provides clear, simple reporting. Pistachio has streamlined our awareness training and strengthened our organization’s cybersecurity.”
“Our goal was to help employees better recognize phishing emails and avoid malicious links. Pistachio made this easy and engaging, and we’ve seen a clear improvement in detection, fewer clicks on phishing links, and reduced data disclosure. With minimal ongoing maintenance, it’s an effective and low-effort solution.”
“Within weeks, Presence had flagged several incidents that could have otherwise been missed, including employees forwarding company data to personal accounts during offboarding. The alerts are reliable and actionable, so we've built a full investigation process around them. Although I was skeptical at first, the value was obvious almost immediately.”
“Pistachio has reduced our manual workload to zero with its automated phishing simulations and in‑box delivery of scenario‑based trainings. This has allowed our team to dedicate time to other important security initiatives while Pistachio handles our Security Awareness program seamlessly.”
“Presence automatically detects suspicious behaviour and gives us the visibility we need without constant manual oversight. Within the first few weeks we were already seeing alerts that would have otherwise gone unnoticed as the system learns what is usual and unusual behaviour for our environment.”
“Before Pistachio, security awareness was something we could only offer to a few customers. Today it’s part of every managed service we deliver, and we haven’t had to grow the team to make that happen.”
Fill out the form to book a demo:
Trusted by 1200+ customers & MSPs
Have a question?
Setup takes around 10 minutes. You log in with your Microsoft global admin credentials via single sign-on, create the security groups you need in Microsoft Entra ID, sync your organisation, and activate the platform with a single toggle. The system pulls in metadata (department, role, location, language) and starts working automatically, with machine learning beginning the moment you activate.
Yes. Microsoft SSO is in fact the only way to log into Pistachio.
Currently Pistachio works only with Microsoft Entra ID.
Pistachio offers two products that work independently or together on one platform. Practice is fully automated security awareness training: tailored simulations and scenario-based training built around each employee. Presence is AI-driven insider threat detection that alerts on genuinely risky behaviour in your environment. Practice lowers the chance of an incident by building safe habits; Presence catches problems if they happen. Together they manage human cyber risk from both sides.
Yes. Practice and Presence can be used independently or together on one shared platform. Bundling both is typically better value, and you can start with one and add the other later.
Practice integrates with Slack, Teams, and Outlook, so training and phishing reporting sit where your team already works. Presence connects to Microsoft 365 and offers optional integrations with HubSpot, Gong, and GitHub for additional audit logs, with more added over time. All integrations are included in the plan.