In an industry obsessed with firewalls, encryption algorithms, and artificial intelligence, POPP3R Cybersecurity has built its reputation on a simple but contrarian belief: the greatest opportunity to strengthen any organization’s security lies not in adding more technology, but in empowering the people who use it. Founded and led by Hernan Popper, who brings over 30 years of international business experience to the table, this Canadian boutique consultancy focuses primarily on security awareness training (SAT) and cybersecurity strategy, with a particular emphasis on human risk management.
The firm specializes in turning employees from security liabilities into an organization’s first line of defense. Through gamified training programs, phishing simulations, and security awareness initiatives, POPP3R addresses what Popper calls “the human attack surface”: that persistent gap between perfect security protocols and imperfect human behavior.
“Technology can only protect you so far,” Popper explains. “The most sophisticated firewall in the world is useless if someone clicks on a malicious link or shares their password. We help organizations recognize that their people aren’t a problem to be solved. They’re an asset to be developed.”
This approach has resonated with over 100 clients across Canada, from single-person startups to corporations with more than 10,000 employees. The roster includes the country’s largest national broadcaster, a major transit authority, a leading college, and a provincial insurance corporation. But POPP3R doesn’t just work with big names. The firm has a strong commitment to giving back, offering dedicated support to nonprofit organizations and helping mission-driven groups strengthen their cybersecurity regardless of budget.
POPP3R’s success comes from a business model that blends consulting with strategic partnerships. As an authorized partner for leading cybersecurity vendors, the firm pairs its own advisory services with top-tier security awareness tools. The result: practical training programs that identify vulnerabilities and actually change how people behave. POPP3R is currently part of NorthForge’s North Star incubation program, which supports founders scaling innovative tech solutions across Canada.
What sets POPP3R apart is the depth of expertise Popper brings to each engagement. His credentials span the technical and strategic: Certified Ethical Hacker (CEH), GIAC Strategic Planning, Policy, and Leadership (GSTRT), a certificate in Innovation from MIT, and executive education from Harvard Business School in cybersecurity strategy. The GSTRT certification is particularly telling. It represents mastery in strategic security leadership, from driving organizational culture change to aligning executives around security priorities. Combined with his international background spanning telecommunications, cybersecurity, and innovation across Argentina and Canada, Popper brings a rare ability to navigate diverse organizational cultures and regulatory landscapes.
That global perspective shapes how POPP3R innovates. The firm actively scouts the world for emerging ideas and solutions, bringing cutting-edge cybersecurity approaches to North America before they become mainstream. It leverages business intelligence tools and AI for content creation and process optimization. But here’s what matters most: technology is always in service of people, not the other way around.
Consider a recent engagement with a large enterprise client. Rather than just identifying technical vulnerabilities, POPP3R dug into how employees actually interact with systems, where security policies break down in real life, and whether organizational culture supports or undermines security goals. The firm excels at translating complex cybersecurity concepts into simple, actionable steps that anyone can understand and implement.
The threat landscape keeps evolving, and fast. Ransomware, social engineering, insider threats, AI-powered attacks, and deepfakes now dominate the cybersecurity battlefield. POPP3R’s focus on human behavior positions the firm at the intersection of technology and psychology. The gamified training programs don’t just teach employees about phishing emails or password hygiene. They fundamentally reshape how people think about their role in keeping their organization safe.
In an industry often criticized for being impersonal and technology-obsessed, POPP3R proves that innovation doesn’t always mean the newest algorithm or the fastest processor. Sometimes the most powerful security solution is remarkably simple: help people understand why security matters, and give them practical tools to get it right.
