Right Hand

Right-Hand (also referenced as Right-Hand Cyber Security / Right-Hand Cybersecurity) offers a SaaS platform for security awareness training and human risk management aimed at reducing employee-induced cyber risk. The product is positioned around modern social engineering threats, including deepfake voice attacks, business email compromise and phishing, omnichannel social engineering, shadow AI and AI governance, and sensitive data exposure.

The platform is organized around three capability areas. Training readiness covers AI-enabled awareness training with a content library, AI-generated content, role-based modules, automated reinforcement and gamification, and SCORM compatibility. Phishing readiness covers AI-generated phishing simulation campaigns using organization-specific scenarios, a user report button and email triage workflow, behavioral risk insights and dynamic teachable moments. Behavioral intelligence covers human risk scoring, integrations with the customer's existing security stack, behavioral analytics, risk-based prioritization and automated nudges. A partner description also cites compliance and policy assessments as part of the offering, framed around improving awareness, behaviour and culture across a workforce.

Right-Hand markets a "fleet" of AI agents: a deepfake vishing agent that simulates voice attacks using cloned executive voices in CXO scenarios, a phishing email agent that generates simulation templates informed by organizational context and attacker tactics, techniques and procedures, and a training agent that converts policies, threat intelligence and documentation into custom training content and videos.

Business model

Software-as-a-service platform sold to organizations, delivered as training, simulation and risk-scoring modules that integrate with a customer's existing security tooling; also distributed through technology/reseller partners such as Root Security in Singapore.

Traction

Public sources provide only qualitative traction signals: anonymized customer testimonials from a financial institution, a marketing technology organization and a utilities organization, and a Singapore reseller relationship. No customer counts, revenue or user figures are disclosed.

Latest developments

The company's current positioning centers on "agentic" security awareness, marketing a fleet of AI agents for deepfake vishing, phishing email generation and automated training content creation, alongside SOC 2 Type II certification and a published trust center.