Dune Security User Adaptive Risk Management
Dune Security User Adaptive Risk Management is a web and API platform for enterprise security teams focused on risks tied to user behavior.
What Dune Security User Adaptive Risk Management is
Dune Security User Adaptive Risk Management is a web and API platform for enterprise security teams focused on risks tied to user behavior. It combines business impact, attack simulations, training activity, and signals from connected tools to score user risk continuously. Simulations cover spear phishing, SMS smishing, voice vishing, and encrypted channels. Dune says training can be tailored to behavior and risk, including just-in-time and role-based instruction. Risk scores can also connect to identity and security workflows, including IAM responses and SecOps triggers. Listed integrations include Entra ID, Okta, Google, Microsoft Outlook, Gmail, Proofpoint, CrowdStrike, Microsoft Defender, Microsoft Purview, and Workday; the platform groups integrations under IAM, SEG, EDR, DLP, and HRIS. Dune lists user risk scoring, insider-risk workflows, data exfiltration detection, and credential misuse detection. Its platform overview lists SOC 2 Type II and ISO 27001 certifications, GDPR and CCPA compliance verification, and third-party attestation for HIPAA. Real-time reporting supports GDPR, CCPA, HIPAA, and other frameworks. Pricing is on request; the listed Enterprise Plan is $30,000 a year for 1,000 users, billed on a 12-month contract.
Good
- Scores risk using behavior and connected security signals.
- Simulates phishing, smishing, vishing, and encrypted-channel threats.
- Offers just-in-time and role-based training.
- Connects risk scores to IAM and SecOps workflows.
- Lists real-time reporting for several compliance frameworks.
Watch out
- Pricing is available on request.
- The listed Enterprise Plan is $30,000 a year.
- That plan's pricing is for 1,000 users.
- The listed contract term is 12 months.
Who it suits
Dune is aimed at enterprise security teams seeking to assess user-related risk and connect risk scores to identity or security workflows. It may suit organisations that need user-focused simulations, adaptive training, and compliance reporting.
Verdict
Dune brings user risk scoring, simulations, adaptive training, and security-workflow connections into one platform. Its published Enterprise Plan price is specific to a 1,000-user, 12-month contract; other pricing is on request.
Plans and prices
From Dune Security User Adaptive Risk Management's own pricing page, checked 4 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Dune Security Enterprise Plan | $30,000 a year | 1,000 users per pricing unit · 12-month contract; pricing for 1,000 users |
The facts
Each one read from Dune Security User Adaptive Risk Management's own pages, with the date it was checked.
What it does
- Adaptive controls
- It can connect user risk scores to identity or security workflows, including IAM responses and SecOps triggers.checked 4 Oct 2026
- Adaptive training
- Dune says it delivers targeted training based on user behavior and risk, including just-in-time and role-based training.checked 4 Oct 2026
- Additional assurance
- Dune lists HIPAA as third-party attested on its platform overview.checked 4 Oct 2026
- Attack simulations
- The platform simulates social engineering across spear phishing, SMS smishing, voice vishing, and encrypted channels.checked 4 Oct 2026
- Integration categories
- The platform overview lists IAM, SEG, EDR, DLP, and HRIS as integration categories and says it ingests security-stack signals.checked 4 Oct 2026
- Integrations
- Dune lists integrations including Entra ID, Okta, Google, Microsoft Outlook, Gmail, Proofpoint, CrowdStrike, Microsoft Defender, Microsoft Purview, and Workday.checked 4 Oct 2026
- Intended users
- Dune describes its platform as built for enterprise security teams and says it was built by enterprise CISOs for enterprise CISOs.checked 4 Oct 2026
- Pricing terms
- The AWS Marketplace listing says 24-month contracts can save up to 13% and 36-month contracts up to 20%.checked 4 Oct 2026
- Purpose
- Dune says its User Adaptive Risk Management platform scores user behavior, simulates threats, and adapts controls to reduce human-layer risk.checked 4 Oct 2026
- Reporting
- Dune says it provides real-time reporting to support GDPR, CCPA, HIPAA, and other frameworks.checked 4 Oct 2026
- Risk scoring
- It combines business impact, attack simulations, training activity, and integrated risk signals to continuously score user risk.checked 4 Oct 2026
- Security certifications
- Dune lists SOC 2 Type II certification, ISO 27001 certification, and GDPR and CCPA compliance verification on its platform overview.checked 4 Oct 2026
- Support and onboarding
- Dune says its team offers tailored pricing, expert onboarding, and live support through its demo page.checked 4 Oct 2026
Alternatives to Dune Security User Adaptive Risk Management
- 1
Safetica Insider Risk Management
WebmacOSSelf-hostedWindows6.7From $72 a year - 2
Teramind Insider Risk Management
WebAPILinuxmacOS6.4 - 3
Living Security
WebAPI6.2 - 4
Cyberhaven Insider Risk Management
WebAPIExtensionLinux6.1 - 5
Veriato Insider Risk Management
AndroidAPImacOSSelf-hosted6.1 - 6
Anzenna
WebAPIExtension6.0