RansomLeak Security Awareness Training

RansomLeak watches your Jira Service Management service desk. When a security-relevant request comes in (a phishing report, a security incident, a risky access request, or an onboarding ticket), it assigns a short security-awareness module to the affected employee and records completion back on the issue.

You map each request type to a RansomLeak curriculum on the admin page and choose who gets trained: the reporter by default, or a specific user from a user field. On completion, the app adds a comment and sets a read-only Training status field on the request, so the evidence lives on the ticket.

The app runs on Atlassian’s Forge platform. It reads only what it needs to identify the affected employee (request ID, type, and work email), never stores the ticket body, and its only outbound call is to the RansomLeak API over TLS. No CSV exports, no manual roster work.