CybSafe Human Risk Management Platform

CybSafe Ltd is a London-registered company that set out in 2017 to build a better way to manage human cyber risk. Instead of measuring course completion, it focuses on the specific security behaviors that cause breaches, using behavioral science and a security behavior database (SebDB) that maps more than 100 behaviors to NIST CSF and MITRE ATT&CK.

The platform has four products. GUIDE delivers bite-sized training and personalized guidance through Teams, Slack, email, WhatsApp and SMS. PHISH runs phishing and social engineering simulations with susceptibility insights and risk-specific nudges. RESPOND uses no-code workflows and third-party data from tools such as Microsoft Defender, CrowdStrike, Okta and Proofpoint to trigger interventions when risky actions occur. SIGNAL, generally available since August 2026, is an AI layer that measures risk, explains results and builds phishing templates, modules or nudges. Customers include Hastings Group and TAG International.

• GUIDE: Delivers bite-sized training and on-demand guidance across Teams, Slack, email and mobile.
• PHISH: Runs phishing simulations, including email-chain templates, with risk-specific nudges.
• RESPOND: Triggers no-code interventions from risky actions detected by third-party tools.
• SIGNAL AI: Answers plain-English requests to measure risk and build content.
• Behaviour Risk Indicator: Drills risk statistics down to individual users and frameworks.
• SebDB: Maps 100+ security behaviors to NIST CSF and MITRE ATT&CK.

A Vietnamese insurer can send nudges in Teams when staff share customer data insecurely, based on DLP alerts. A bank can report behavior-change metrics to its board instead of course completion rates. A multinational can run email-chain phishing simulations for finance teams across Asian subsidiaries.

In randomized controlled trials across 22,000 people cited on the site, CybSafe reports a 69% drop in risky data sharing, a 78% drop in never-report rate and an 83% increase in positive behavior events. At Hastings Group, 87% of staff improved passphrase behavior within 30 days. Nudges delivered in Teams, Slack and email reach employees where they work instead of in a separate portal. Integrations with existing security tools turn real incidents into targeted interventions.

Boards and regulators increasingly ask security teams to prove that awareness spending reduces risk, pushing the market from training completion metrics to behavior data. Integrating signals from identity, endpoint and email tools allows interventions at the moment of risk. Vietnamese banks and enterprises under new data protection rules need evidence that staff handle data and phishing safely.

CybSafe Limited is registered in England and Wales (company number 09642350) with its registered office at 5 New St Square, London, and a trading address at One Canada Square, Canary Wharf. It holds ISO 27001, Cyber Essentials and Cyber Essentials Plus, and publishes the annual Oh, Behave! cybersecurity attitudes and behaviors report.