Success stories

Real case studies,
in cybersecurity awareness

These stories document what changes when an awareness program stops being measured by attendance and starts being managed as risk: realistic simulations, training that adapts to behavior, and dashboards a CISO can take to the board and to audit. They are banks, fintechs and logistics teams in LATAM that needed regional closeness, localized content and a way to prioritize interventions — not a global course catalog. Each story covers the challenge, the approach and the measurable result.

NaranjaX

From training to managing risk

With more than 3,000 employees, NaranjaX replaced generic campaigns with a program that measures each area's exposure, runs realistic simulations and sets a clear rule for when to step in. Its security team now reports real risk, not completed courses.

NaranjaX — caso de éxito Whalemate
Banco del Sol

How Banco del Sol adopted human risk management with a local identity

A financial institution with more than 500 employees needed to leave behind global content that did not connect with its people. In Whalemate they found regional closeness, simulations and training in the language and channels the organization actually uses, and a way to bring cybersecurity into day-to-day work — not an annual course forgotten a week later.

Banco del Sol
GDL Logística

How GDL Logística turned human risk into a measurable indicator

A logistics company with more than 1,000 employees needed visibility into real user behavior — not just who finished a course. With Whalemate they measured human risk, trained against that exposure, and started backing security investment decisions with data, from operations to the board.

GDL Logística
Case studies

Narratives validated by each customer, with their own indicators

We publish a case when the customer approves the narrative. Each one tells what was measured, what changed and what comes next, with the indicators the organization agreed to share.

A Whalemate case is the story of how an organization moved from a program that did not serve them to one they can operate: roster, simulations or content, and a different conversation with leadership. NaranjaX, Banco del Sol, and GDL Logística tell that journey with their context, their decisions and their own words.

We measure behavior, not attendance: content adoption, simulation habit, the ability to justify investment to leadership. In each case you will find the starting problem, why they chose Whalemate, how they use it and what comes next. When there is a number, it is one the customer validated.

Pick the story closest to your situation and read it to understand the approach, not to copy a KPI: your roster, IdP and culture are different. If you want to see how it would look in your organization, the demo walks your case in thirty minutes.

Questions about the cases

How do you choose which metrics to show?
The ones the customer validates and the narrative can stand behind. If a case has no percentage, it is because the organization chose to tell the change without a figure. We prefer a case without a percentage to a percentage without a source.
Can I use a case in a committee or an RFP?
Yes, citing the published case as it is, without added figures. If you need a direct reference with the customer, we coordinate it through the commercial channel when the organization agrees.
Are there cases in my industry?
Today there are banking, fintech and logistics cases. For other industries, solutions covers the risks and regulations of your sector. When a customer in your industry publishes their case, we will add it to the list.
Does the case guarantee the same result?
No. It shows a way of working and, when it exists, an indicator from that account. Your roster, IdP, and data governance are different. Replicating the approach is the point. Replicating a number is the error. In the demo we look at what scope it has in your organization.

Want a program like this for your organization?

We'll show you how Whalemate adapts to your industry, user population and awareness maturity: simulations, adaptive training and human-risk analytics, with a concrete plan for your organization in LATAM.