.png)
How RansomLeak closed the biggest deals in company history with Merge's HRIS integrations
.png)
How RansomLeak closed the biggest deals in company history with Merge's HRIS integrations

RansomLeak fact sheet
Employee Management
Offering the most connected LMS security platform through Merge has helped us build trust with prospects and close the biggest enterprise deals in company history.
Meeting enterprise demand without constraining limited resources
RansomLeak is an interactive security awareness training platform. It puts employees inside immersive 3D simulations of real cyberattacks, building the muscle memory to recognize threats like phishing and ransomware, all with the goal of getting more employees to complete their trainings on time.
To assign employees the right learning paths (collections of courses), RansomLeak needed customers to bring in not just their people but also the details that drive assignments: job titles, departments, and office locations.
RansomLeak sells to enterprises with hundreds to thousands of employees, so asking customers to add, update, and remove users and their metadata manually wasn’t an option.
They needed to integrate with HRISs to automate this work, but doing this in-house was also unrealistic.
"Our customers and prospects use dozens of HRISs. Adding all of them, or even a small fraction, was basically impossible," says Dmytro Koziatynskyi, co-founder and CEO of RansomLeak.
After extensively researching the best 3rd-party integration platforms for HRIS on Claude, Merge came up as the clear choice. After exploring Merge’s Docs alongside competitors’, the team agreed.
Adding 80+ HRIS integrations in a few hours
RansomLeak only took a few hours to build to Merge’s HRIS Unified API. From there, 80+ HRIS integrations became available to their users.

Here’s how the integrations work:
1. A user would log in, navigate to Integrations, and select HRIS. From there, they can select the HRIS they’d like to connect to.

2. Merge Link, a UI component, appears. The user can follow the steps to successfully authenticate.

3. Once connected, Merge runs an initial sync and resyncs the employee data once per day.
During each resync, RansomLeak provisions any new users, applies updates to existing ones, and deactivates employees who’ve left. Key employee fields, like role, team, and manager are also auto-populated and updated.

This synced data powers the following use cases:
- Enterprise-scale onboarding and offboarding: New hires are added to RansomLeak automatically. And when an employee is marked inactive in the HRIS, they're auto-deprovisioned in RansomLeak

- Auto-assigning learning paths: New users are auto-assigned to the right learning paths. For example, a team of developers can be routed to application security training, alongside standard trainings required for all employees (which can live under a learning path like “Security Awareness Refresher”)

- Keeping learning current: As employees change teams, get promoted, or move offices, their assigned trainings get updated accordingly
Offering the leading security LMS for enterprise companies
The first thing that stood out to RansomLeak was how quick and easy it was to get started.
"The simplicity of building to Merge’s Unified API was a wow factor. I’ve never had an easier time building an integration," says Dmytro.
For Maksym Khamrovskyi, RansomLeak’s other co-founder and CMO, it barely registered as a project at all: "We're a small team, and this integration came as a complete surprise for me. I was completely blind to it coming, and then it's done."
Adding 80+ HRIS integrations has become a competitive advantage for RansomLeak.
"Offering the most connected LMS security platform through Merge has helped us build trust with prospects and close the biggest enterprise deals in company history,” says Dmytro.
By not building each HRIS integration themselves, their team is also freed up to invest where it matters most: improving their immersive 3D content and building a new managed service provider (MSP) offering, complete with a partner API and self-serve dashboard.
Maksym elaborates on both:
“Our 3D training is what customers come to us for, so the more we improve it, the more they get out of it. And our managed service provider program could multiply our reach 10x, since partners would resell our training straight to their own clients."
RansomLeak plans to keep rolling out HRIS integrations through Merge as customers and future MSP partners request them, and is exploring what else on the platform can support its next stage of growth.
We can’t wait to see where our partnership takes us!
Customer stories
Make integrations your competitive advantage
Stay in touch to learn how Merge can unlock hundreds of integrations in days, not years
.png)
.webp)