People and awareness

People and awareness

Human Risk Protection & Awareness Training Solutions

Train your employees to stop phishing, credential theft, and social engineering, before they become incidents. Our platform combines Awareness Training, Breach Monitoring, and Human Risk Insights to reduce human-caused cyber risk.

Modern office desk with an open laptop and no people
overview

overview

The attack that gets through is aimed at a person

Sixty-two percent of breaches involve a person. Not a firewall that failed: someone clicked, someone was talked into it, or someone reused a password that was already for sale. That number has gone up, not down, while security products got better.

And the message is no longer only email. Phishing sent by text message or by phone call gets forty percent more clicks than the same attempt by email, which means the annual training video about suspicious attachments is preparing your team for the wrong attack.

A fishing hook resting on a computer keyboard
62%
Of breaches involved a person: someone clicked, someone was tricked, or someone reused a password. Up from 60% the year before.
40%
More clicks on phishing sent by text or voice call than by email. The training that only covers email is training for last year.
28% to 8%
What one organisation's click rate did in six months, after moving to continuous training and monthly simulations.
Social engineering is the third most common way in
16% of all breaches start by convincing a person, not by defeating a machine 84% other patterns

Source: Verizon 2026 Data Breach Investigations Report. We quote it as published: the widely repeated claim that "90% of breaches are human error" is not in it.

How we fix it

Short and continuous, not one long session a year. A few minutes at a time, repeated, on the attacks that are actually landing right now. Nobody remembers in November what they watched in January.

Simulations that include the phone. Real phishing attempts sent to your own team, by email and by text, so you find out who clicks before somebody else does. Nobody is named or shamed: the number that matters is the group’s, and whether it goes down.

And the credentials already out there. Training does nothing about a password leaked three years ago in somebody else’s breach. We monitor for your team’s credentials showing up in known breaches and tell you which accounts to change.

What changes

You get a number instead of a feeling. In the example the report follows, an organisation moved from a 28% click rate to 8% in six months by doing exactly this. And when your insurer or your client asks whether your staff are trained, you have a date, a rate and a trend rather than a certificate from three years ago.

Find out where your team actually stands

Before any training, check whether your people’s credentials are already circulating in known breaches. It is free, it takes a minute, and it tells you whether the attacker already has a password rather than needing to trick anyone for it.

Check for leaked credentials

Let’s talk about your needs, no commitment, just expert advice.

FAQs

FAQs

Human Risk Protection – What You Need to Know

From the blog

From the blog

Related articles