Belgium-based Aikido Security has announced the launch of Noon, a workforce security business that extends its protection beyond software to the people who use it. The platform unifies email protection, device protection, AI governance, and phishing simulation training in a single solution. The move responds to the growing scale and sophistication of AI-powered social engineering attacks.
Two Acquisitions Form the Foundation
Noon is being built on two acquisitions that Aikido completed in September 2026. Poland-based Cyberly, founded in 2024, brought AI-driven attack simulations and AI usage visibility, while Belgium-based Outkept, founded in 2020, added email security and phishing awareness training. Before the acquisitions, Cyberly protected over 300,000 employees across more than 200 organizations, and Outkept served more than 1,000 organizations and 250,000 users across over 100 countries.
AI Expands the Threat Landscape
Aikido said that AI has made sophisticated phishing, deepfakes, and coordinated social engineering attacks cheaper, easier to execute, and more scalable. Attackers can now generate targeted emails, clone a colleague's voice for a deepfake call, and run campaigns across email, SMS, and chat at scale. At the same time, AI assistants and autonomous workflows have become part of everyday work, often with limited visibility for security teams.
Industry Data Highlights the Shift
Verizon's 2026 Data Breach Investigations Report found that mobile social engineering attacks, including fraudulent texts and voice calls, succeeded 40% more often than email phishing. The report also found that employee use of unapproved AI tools had tripled to 45%. These trends show that legacy workforce security stacks, built for generic phishing emails and scheduled tests, no longer match the current threat environment.
A Unified Platform for Employee Security
Noon brings employee protection into one platform, replacing disconnected tools that many organizations currently piece together. Its email protection detects phishing and business email compromise attacks that slip past native filters and removes them. Simulations and training recreate real-world attacks, including deepfake voice calls, SMS, QR codes, and multi-step campaigns, with role-based lessons delivered through Noon and platforms such as Slack, Microsoft Teams, and Google Chat.
Device Protection and AI Governance
The platform also includes device protection that can be deployed throughout an organization to guard against malicious packages and AI instructions across websites and applications. AI governance provides a history of AI tools, models, and connections employees use across their devices, aligned with organizational policies. This combination aims to give security teams broader visibility into modern workforce risks.
Integration and Compliance Support
Noon connects directly to Microsoft 365, Google Workspace, Slack, and Microsoft Teams, and its results are built to feed into governance, risk, and compliance platforms. Campaign and training data is designed to support audits under frameworks including SOC 2, ISO 27001, NIS2, DORA, HIPAA, and GDPR. The data is also intended to help organizations meet cyber insurance requirements.
Leadership Views Workforce Security as a Priority
Willem Delbare, CEO of Aikido Security, said companies must protect the people building and using software, not just the software itself. Alex Horlach, co-founder of Cyberly, noted that attackers do not always need to break into software when they can trick the people using it. Simon Bauwens, co-founder of Outkept, added that AI has fundamentally changed how employees need to be trained and protected.
With Noon, Aikido is applying its simplified security approach to workforce protection while leveraging the international customer relationships of Cyberly and Outkept. The founding teams from both acquired companies will continue building the platform and leading key areas such as global MSP partnerships and email security development. The launch positions Noon to address a growing need for integrated defense against AI-enabled social engineering.