Human Risk Management for mid-market enterprises
Train the people.
Measure the risk.
Prove it to the board.
Security awareness training with AI-generated phishing simulations that reflect this month's threats, a per-employee risk score your CISO can read, and framework-mapped evidence auditors trust.
Training programmes
Monthly, quarterly, or yearly — your framework decides
Modules + quizzes mapped to SOC 2 CC1.4, ISO 27001 A.6.3, HIPAA 164.308(a)(5). Auto-assigned on hire. Risk-weighted questions.
AI phishing drills
Fresh templates every month, personalised per employee
Claude generates each simulation from current industry trends. Fail once → auto weekly refresher until two clean passes. Click records to the teachable landing moment.
Human Risk Index
Not just click-rate — a risk score the board can read
Scores roll up by team, department, and employment type. Resilience ratio (reports ÷ clicks) is the industry-standard CISO metric.
How it works
Connect your team
SAML SSO, SCIM, or a CSV import. Every signup gets a fresh Supabase-backed tenant.
Pick a cadence
Monthly, quarterly, or yearly training. Monthly phishing drills on top.
Measure what sticks
Per-employee risk, team roll-ups, trajectory over time, framework attestations.
Prove it
Monthly, quarterly, annual leadership reports. Audit-ready evidence trail.
Ready to see your team's risk?
Spin up a free account in 60 seconds. Import a CSV, hit "Seed demo content", and walk the whole flow.