We're here to end the guesswork in human security.
CybSafe is the human risk management platform built on behavioural science and real-world data. So you know which behaviours put your organisation at risk, what changes them, and how to prove it.
Ask where most of your people-related risk lies and most tools will point you at social engineering simulation metrics. There's a lot more to the behavioural side of cybersecurity risk than that.
That isn't your fault. The industry built human security on assumptions: annual modules, gotcha simulations, gut-feel scores and the idea that people are the problem.
We see it differently. Criminals cause breaches. People prevent them, every day, mostly unseen. The real problem is that there’s too much guesswork and wishful thinking when it comes to the human side of cybersecurity. We set out to change that.
Know, don't guess
Evidence over hunches. Every nudge, workflow and line of code starts with research and real behavioural data. If we can't measure it, we don't claim it.
Behaviour over box-ticking. Awareness was just the start. What counts is what people actually do, and whether it cuts your risk.
Support over blame. Shame doesn't change behaviour. Relevant, timely, respectful help does. When people feel backed, culture shifts on its own.
We share what we learn
Medicine got better when it stopped guessing. The human side of security can too. But ending the guesswork is bigger than one platform. So we put our evidence where everyone can use it.
SebDB is the world's security behaviour database. It maps 100+ everyday security behaviours to the risks they reduce, aligned to NIST CSF and MITRE ATT&CK. It powers CybSafe, and it's free for anyone to explore.
It's evolving (under Project NEXUS) into a cybersecurity behavioural ontology that will give the whole industry a shared language for human risk.
Alongside SebDB sit our randomised controlled trials, the Oh Behave research report, the Research Library and the IMPACT conference. Each one adds to a shared body of evidence for the whole industry.
Our aim? Every security team, vendor and researcher building on the same evidence. Yes, even our competitors.
Human-first.
AI-smart.
AI agents now read inboxes, move data and make decisions. That raises the stakes. It doesn't change who's accountable.
Someone configures the agent. Someone grants its access and decides how it behaves. That someone is a person. So human security matters more than ever, and there's more guesswork to end.
We use AI the same way. Machine learning and behavioural analytics spot risky patterns across your security stack, prioritise the behaviours that matter and reach the right person at the right moment. Explore CybSafe Signal
It's respectful, ethical and effective by default. AI helps people make better decisions. It never shames or traps them. How we use AI responsibly
Scientists, builders, and storytellers.
One team.
Ending the guesswork takes more than one discipline.
Where it started
CybSafe was born out of a frustration: seeing organisations treat the human side of security as a box to tick. Lots of activity. Very little evidence.
There had to be a better way, built on science instead of assumptions. CybSafe launched in 2017 to prove it.
The mission has sharpened since. Today it fits in six words: end the guesswork in human security.
Picture every decision about human security backed by evidence. People trusted and supported as the defence they already are. The whole industry building on what we learn together.
That is the future we're building.
Know, don't guess.
.png)
.avif)
