About CybSafe

End the guesswork in human security.

CybSafe is the behaviour change platform built on behavioural science and real-world data. We help you see which everyday habits put your organisation at risk, show you what really changes them, and give you the evidence to prove it.

The problem
Human security has run on hunches for too long.

If you ask where your people-related risk lies, most security tools will point at social engineering. But there's a lot more to the behavioural side of cybersecurity risk than that. A whole lot more.

This isn’t your fault …the industry built human security on outdated assumptions:
– Annual tick-box training modules
– “Gotcha!” simulated phishing traps
– Finger-in-the-wind/gut-feel risk scores
– The idea that people are the problem

We see things differently. Criminals cause breaches, people prevent them …every single day, mostly without anyone noticing …and that’s a problem. So we set out to change that, and make those unseen wins visible.

Many call it secure behaviour management: understanding, shaping, and measuring the everyday behaviours that keep organisations safe. It's how human risk management actually gets done.

Know, don't guess

Evidence over hunches: Every nudge, workflow, and line of code is backed by research and real data. If we can’t measure it, we don't claim it.

Behaviour over box-ticking: Awareness is fine, but action is what counts. Secure behaviour management focuses on what people actually do to reduce your risk.

Support over blame: Shame doesn't change habits. Timely, respectful support does. When people feel backed, culture naturally shifts.

CybSafe chat asking a person why they didn't report a simulated phishing email, next to a short learning module on agentic AI
SebDB at the centre of CybSafe's evidence base, linked to the Research Library, the Oh Behave report, the IMPACT conference and a randomised controlled trial

We share what we learn

Medicine improved when it stopped guessing. Human security can do the same. But ending the guesswork is bigger than one platform, no matter how great we are at what we do. So we put our evidence where everyone can use it.
‍
SebDB: The world’s security behaviour database. It maps 100+ everyday security habits to the specific risks they reduce (aligned with NIST CSF and MITRE ATT&CK). It powers CybSafe, and it’s completely free for anyone to explore.
‍
Project NEXUS: We’re evolving SebDB into a cybersecurity behavioural ontology that will give the whole industry a shared language for secure behaviour management

Open Evidence: Through our randomised controlled trials, the Oh Behave! report, our Research Library, and the IMPACT conference, we build evidence for everyone… including our competitors.

Human-first.
AI-smart.

AI agents now read inboxes, move data and make decisions. That raises the stakes, sure. But it doesn’t change who’s accountable.

Someone configures the agent. Someone grants its access and decides how it behaves. That someone is a person. Which is why human security matters more than ever.

How we use AI:

Smart analytics: Machine learning spots risky patterns across your security stack, prioritise the behaviours that matter and reach the right person at the right moment. Explore CybSafe Signal
Respectful, ethical and effective by default: AI helps people make better decisions. It never shames or traps them. How we use AI responsibly
CybSafe nudge library with CybSafe Signal evaluating a phishing-reporting nudge and suggesting a rewrite
Portraits of four members of the CybSafe team

Scientists, builders and storytellers.
One team

Ending the guesswork takes more than one perspective.

Behavioural scientists design interventions and prove they work.
Engineers and AI specialists make them scale seamlessly.
Creatives make messaging clear, from C-suite reports to frontline nudges.
Risk and intelligence specialists keep everything anchored directly to real-world threats.
OUTCOMES

Real results

When you manage how people actually behave, the numbers speak for themselves.

55%
Fewer risky behaviours
TAG International cut risky behaviours like ignoring MFA prompts and mishandling credentials.
62%
Drop in phishing failures
TAG International took its phishing failure rate from around 45% to 17%.
87%
Better passphrases
in 30 days
87% of people at Hastings Group improved their passphrase behaviour within a month.

Where it started

CybSafe began with a simple frustration: watching companies treat human security as a box to tick – lots of noise, very little evidence.

In 2017, we set out to build a better way, built on science instead of assumptions. Today, our mission fits in six words: end the guesswork in human security.

Picture every decision about human security backed by evidence. People trusted and supported as the defence they already are, and the whole industry building on what we learn together.

That’s the future we’re building.
Know, don't guess.

CybSafe logo

Change the behaviours that cause breaches. Prove it.