Whalemate: Human Risk Management for companies
Whalemate is a human risk management platform. Human risk is the hardest vector to control with technology alone: it is measured and managed with real data that generates sustainable behavioral change.
Mission
Help organizations reduce human risk through an effective platform and actionable analytics.
Vision
Be the leading human risk management platform in Latin America, transforming security culture.
Values
Speed, ownership, teamwork and excellence are the core of our Whale Team.
One platform to measure and manage human risk
Whalemate brings four capabilities into one program, from simulation to evidence for leadership and audit.
Human Risk Management built for LATAM
Agentic technology
An agent coordinates program decisions using rules and signals, so campaigns and reinforcement respond to context.
Close managed service
Smart includes an account analyst, annual plan, course and campaign management, and periodic follow-up.
Languages and regional context
The product and site are available in Spanish, English, and Brazilian Portuguese, with content and scenarios for LATAM teams.
Plans and context-based pricing
Smart, Growth, and Enterprise adapt to the program. Billing is per employee under an annual contract, and quotes are defined in conversation.
Teams that need to make the human factor visible
The platform supports organizations managing security, people, and compliance across the region.
CISOs and security teams that need to prioritize human risk. Compliance and audit teams that require training and coverage evidence. People, IT, and operations leaders managing distributed populations. Banks, fintechs, insurers, healthcare, retail, government, and technology companies in LATAM.
Published stories: Naranja X, Banco del Sol, and GDL Logística. View case studies.
Whalemate, in verifiable facts
- Company name
- Whalemate
- Type
- Human Risk Management platform
- Founders
- Mateo Bovio and Federico Hombre
- Core offering
- Human risk management for cybersecurity
- Capabilities
- Advanced simulations, adaptive training, human risk analytics, and awareness agent
- Scale
- More than 250 companies and more than 100,000 users across 11 LATAM countries
- Product languages
- Spanish, English, and Brazilian Portuguese
- Regional presence
- Argentina, Chile, Colombia, Peru, Brazil, and Paraguay, with expansion to the United States
- Legal entity
- Whalemate Inc., Wilmington, Delaware, United States
- Vendor security
- ISO/IEC 27001:2022 certification
- Reference customers
- Naranja X, Banco del Sol, Mercado Libre, Arcor, BCP, and Sancor Seguros
- Plans and contract
- Smart, Growth, and Enterprise, with annual contract
- Pricing model
- Per employee, quoted in conversation
- Website
- www.whalemate.com
A product company that operates the human factor in LATAM
Whalemate exists because the perimeter is not enough and the annual course does not manage risk. This section explains the method, scale, and people that put it into practice.
Human risk is the vector technology alone does not close. That is why the product measures behavior, intervenes by profile, and leaves evidence. The team brings together cybersecurity, engineering, product, content, and customer success. The mission is to reduce it with a platform and with analytics you can use. The vision is to be the human-risk-management reference in Latin America. The values we declare, speed, ownership, teamwork, and excellence, are judged on the account, not on a wall.
We work with organizations that already have a CISO, an IdP, and an auditor, or that are building all three. The context is LATAM: languages, channels, local rules, procurement that asks for a DPA. We do not sell a global pack that was translated. Content and simulations are designed so the roster recognizes them. If a customer story is published, it is under cases. If it is not, we do not tell it here under a pseudonym.
More than a press kit with ARR metrics, Whalemate is a method: understand the roster, calibrate the program, operate with evidence. The Trust Center is for whoever buys. Webinars and reports, when they exist, are the public voice.
How we work with a customer
Industry, countries, program maturity, IdP, what audit asks for. Without that map the rollout is a template. Customer success and the account analyst lift it. The customer’s security and People validate it.
Roster, scenarios, languages, thresholds, data governance. The first campaign is not a blast to “show value.” It is the proof that the directory enters and that the lure is understood. The Agent takes those rules.
Simulations, reinforcement, reports, adjustment. The managed layer exists when the internal team does not want to operate alone. Professional services cover what the product does not do natively. The QBR talks evolution, not a cover click rate.
Questions about Whalemate
The people behind Whalemate
A team working to address human risk from a comprehensive perspective: with technical expertise, regional experience, and a focus on measurable results.
