We believe people want to do the right thing.
We know they’re more likely to follow security controls when they have support, cybersecurity is helpful, and they understand the threat.
We don’t guess. We build using science.
We use behavioral science to reshape the way organizations approach human cyber risk. To make sure our platform can change attitudes and behavior, our work is based on three guiding principles:
Insights and best practice from psychology to change behavior
Scientifically evaluated to know what works in changing behavior and why
People-centric so people are both productive and secure at work
We’re committed to advancing the field of cybersecurity behavioral science. We’re one of the few organizations of our type with a dedicated behavioral science team focused solely on research and analysis.
The CybSafe Research & Behavioral Science Team, which is made up of experts in psychology, cybersecurity and cyber crime, has designed and delivered behavior change for nearly a decade.
91%
of CybSafe users no longer exhibit high-risk phishing behavior after a CybSafe behavior intervention
81%
of CybSafe users are likely to encourage good cybersecurity behaviors with friends and family
World-renowned partners
We want to protect people online by building better technology and by contributing to academic knowledge and government policy. That’s why we work with leading academic research partners to develop and maintain our platform and to drive change outside of our organization. Through collaboration, we can help address the wicked problem of cybersecurity and keep people, businesses and nations safe online.
Projects
The team collaborates with a number of academic institutions (UCL, University of Bath, University of Bristol, Cardiff University, University of Kent and Northumbria University). Here is a snapshot of a few recent research initiatives.
Phishtray
PHISHTRAY is a modifiable open source e-tray software for research and training applications related to social engineering for use in academia and industry. Funded by CPNI and developed by behavioural scientists from the University of Bath and University of Bristol in conjunction with CybSafe.
Cyber Security Quirks
Cyber Security Quirks is funded by the Home Office and part of the Research Institute in Sociotechnical Cyber Security. The project explores the role of personalisation in cyber security behaviour interventions by taking account of individual variability.
SPEC
Simulated Phishing and Employee Cyber security behaviour (SPEC) is led by CybSafe in conjunction with the University of Bath. Funded by the Centre for Research and Evidence on Security Threats the project explores the impact of simulated phishing emails on employee awareness and work-based outcomes such as productivity and trust. Read more about the project here.
GIFS
Gentle Interventions for Security led by Dr. Emily Collins at the University of Bath is developing and evaluating “gentle interventions” using ambient displays, across the home and workplace, to create healthy and habitual cyber security behaviours.
PETRAS
The PETRAS Internet of Things Research Hub is a consortium of nine leading UK universities which explore critical issues in privacy, ethics, trust, reliability, acceptability, and security related to Internet of Things technology. We currently support the Consumer Security Index project, exploring labelling schemes for consumer products and the Cyber Hygiene project, exploring behaviour change interventions for cyber security behaviour.
UNIVERSITY OF KENT
Led by Dr. Jason Nurse and starting in Summer 2020, we will be supporting a PhD programme exploring the cyber security issues faced by technology users in the home environment with a focus on behaviour change interventions for different home users (such as adults, teenagers) with emerging Internet of Things technology,
Dawes Centre for Future Crime
The Dawes Centre for Future Crime part of the Security and Crime Science department at UCL.identifies emerging crime threats that arise from greater internet connectedness and works towards delivering pre-emptive interventions for the benefit of society.
SPRITE+ hub
The SPRITE+ hub brings together people involved in research, practice, and policy relevant with a focus on digital contexts. We are are a project partner helping to identify the future challenges of security, privacy, identity & trust in the digital world.
CREST
CybSafe is an associate partner of the Centre for Research and Evidence on Security Threats a national hub delivering world-class, interdisciplinary portfolio of activity maximising the value of behavioural and social science research to understanding, mitigating and countering threats to national security.
Research Institute in Science of Cyber Security
The Research Institute in Science of Cyber Security is the UK’s first academic Research Institute to focus on understanding the overall security of organisations, including their constituent technology, people and processes. It is now in its second phase.
Safe as Houses: TIPS in Home Office Environments
Our goal is to provide key, novel insights into the new challenges and tensions in relation to workplace Trust, Identity, Privacy and Security (TIPS), and thereby provide the much-need foundation for approaches to address these issues.
Government and regulators
We are supporting the FCA on guidance regarding how firms should measure, address and report on cyber awareness and culture risk within their organizations.
The sociotechnical group of NCSC focuses on how technology interacts with people, process and technology. We are working with NCSC on people-centric security and their awareness and behavior change guidance.
We are working with the Cyber Security and Data Protection Directorate on improving cyber resilience in UK organizations.
How much does attitude impact behavior — and increase cybersecurity risk?
Uncover the profound influence of attitude on behavior and cybersecurity vulnerability in our all-encompassing report.
Resources & Events
Research library
The world’s first globally accessible archive of research into the human aspect of cybersecurity and behavioral science as applied to cybersecurity awareness and online behavioral change.
IMPACT 2023
IMPACT 2023 is about facilitating discussion and collaboration between academia and industry. And it’s about the latest academic research on the human aspect of cybersecurity. World leading-academic experts will discuss the latest research implications for policy and practice.
PeepSec
Our 100% free online summit held during London tech week focused on the people, the culture and social aspects of cybersecurity. All talks are evergreen.
Request a demo
Financial Services
Credit Suisse
CybSafe helps financial services organizations protect their customer data and their reputation. We give security teams a suite of tools to manage human cyber risk better.
Financial Services
Hastings Group
There will be more and a wider range of attacks against financial services this year. So the human aspect has never been a more vital part of your cybersecurity strategy.
EDUCATION
John Whitgift Foundation
CybSafe helps educational institutions to protect their valuable student, staff and research data.
Technology
Condeco
CybSafe helps tech companies make sure that secure end user behavior is natural. Whether at home or in the workplace.