Every October, or maybe February—whenever corporate IT gets around to it—the email arrives: "Complete Your Annual Security Training." Employees groan, click through a handful of canned videos about phishing and password hygiene, ace a multiple-choice quiz, and promptly forget all of it. Rinse, repeat next year.
San Francisco-based Herd Security is betting that entire ritual is on borrowed time. The startup announced a $3 million seed round in May 2026 to build what it describes as an "agentic AI" platform that bypasses the learning management system altogether, delivering security training in short bursts right inside Slack and Microsoft Teams. No separate login. No course catalog. Just micro-lessons surfacing where employees already live most of their workday.
Aspiron Ventures led the financing, with participation from Team Ignite, ForwardSlash VC, Forum Ventures, Rightside Capital, and YPO. The round comes as Herd tries to carve out a niche in a crowded cybersecurity awareness market—one still dominated by legacy vendors who treat training as an annual compliance box to tick rather than an ongoing behavior-change effort.
"We're moving beyond one-size-fits-all annual training," said Brandon Min, Herd's co-founder and CEO. That line sounds like boilerplate, perhaps, but the underlying thesis is harder to dismiss: if employees never open your LMS, why pretend it's working?
Training That Learns Your Threat Model
Herd's product ingests company-specific inputs—existing policies, compliance frameworks, security telemetry, org charts—and then auto-generates training content tailored to that context. If a new threat emerges or a policy changes, the system adapts what it's teaching in near-real time. The output includes micro-lessons, conversational AI exchanges, and AI-generated video, all delivered natively in Slack or Teams channels.
For organizations that still need SCORM exports (say, to satisfy an auditor's checklist), higher-priced tiers offer that escape hatch. But the product's true center of gravity is the chat layer.
Pricing starts at $250 per month for startups with fewer than 25 employees, though that plan requires an application. The base tier costs $600 monthly and supports unlimited headcount, three "creator" seats (think: your security or compliance team), delivery to one platform (Slack, Teams, or web), limited video credits, and phishing simulations.
Move up to the $1,200-per-month Growth tier and you unlock five creator seats, unlimited platform destinations, LMS export, and unlimited compliance frameworks. Enterprise pricing is custom and adds conversational AI training, behavioral analytics, workflow automation pegged to security events, custom Slack and Teams apps, human risk scoring, integrations with broader security stacks, and multi-channel phishing sims—email, SMS, even deepfake video.
Herd says it has SOC 2 Type II certification and lists integrations with Okta, Google Workspace, Slack, and Microsoft Teams for user provisioning and telemetry. The company offers a 30-day trial and encourages prospects to "talk to founders"—a signal it remains in that high-touch, early-customer phase.
A Crowded Field Chasing Employees Into Collaboration Tools
Herd isn't pioneering this category from scratch. Hoxhunt delivers phishing exercises across email and messaging platforms. KnowBe4, one of the incumbents, has published Microsoft Teams integration playbooks. OutThink, CyberCoach, and Haekka all claim some version of microlearning embedded in workflow tools.
The momentum is unmistakable: security awareness vendors are migrating toward collaboration platforms rather than waiting for employees to visit yet another standalone portal. Whether embedding lessons in Slack actually shifts behavior—or just shifts where people ignore training—remains an open question. Herd's announcement cites vendor-supplied metrics showing faster completion rates and positive user feedback, but rigorous, independent data is thin on the ground.
The company's website lists six customers by name: ClearlyAI, OneBrief, Outfox Health, Resonata, RiseUp, and Epsilon Systems. One testimonial made it into the press materials—a Director of Corporate IT & Security at OneBrief said the platform helped the team "move faster," though case studies for OneBrief and Outfox are marked "coming soon" on Herd's website. None of these claims have been independently verified, which is standard for an early-stage startup but worth noting.
Where the Capital Goes
Herd plans to deploy the fresh capital on three fronts: expanding beyond cybersecurity into HR compliance and AI-specific training modules, refining its AI-generated video engine, and deepening partnerships in the identity and access management ecosystem. The company was a finalist in Okta's Startup Challenge last fall, a nod to some early traction among IAM-adjacent buyers.
Co-founder and CTO Grant Joy appears on the company's about page alongside a roster of advisors that includes Chris Kirsch, former CEO of RunZero; Erik Goldman, co-founder of Vanta; and Ken Westin, field CISO at LimaCharlie. ForwardSlash VC partner Luofei Deng and Forum Ventures managing director Kevin Corliss also sit on the advisory board—unsurprising given their firms' participation in the round.
Founded in 2025, Herd hasn't yet published public app listings in the Slack or Microsoft AppSource directories. That suggests delivery may rely on custom apps deployed within customer tenants, particularly on the Enterprise tier. It's the kind of setup that works fine at small scale but will need to evolve if the company wants to serve hundreds of customers without human hand-holding.
Can AI Microlessons Actually Change Behavior?
The real test, of course, isn't whether Herd can surface training content in Slack. It's whether surfacing it there makes employees more secure.
Security awareness has long been the soft underbelly of enterprise cybersecurity—easier to mandate than to measure, easier to budget for than to prove ROI on. Annual click-through training persists not because it works particularly well, but because it's familiar and auditors accept it. Herd and its cohort of in-app training vendors are making a calculated bet that familiarity is the problem, not the solution.
Aspiron Ventures and its co-investors seem convinced that the learning management system is a relic, and that the future of awareness looks a lot more like a Slack DM than a Captivate module. Whether employees will engage more meaningfully with security content just because it arrives in a different wrapper—well, that's the multimillion-dollar question Herd now has three million reasons to answer.
