FREE TOOLNo signup · Instant score 

What's your Human Risk Score?

Twelve questions, three minutes, one number: how exposed is the human layer - phishing, credentials, culture - right now? Free, ungated, methodology included. Go deeper with 15 more questions whenever you like.

METHODOLOGY

How the score is put together.

Six domains - training culture, phishing resilience, credential hygiene, breach monitoring, reporting culture, and leadership - each scored 0-100 from your answers, then blended with phishing and training weighted heaviest. The 12-question Quick Scan gives a provisional score at ±12; completing all 27 questions tightens it to ±4. No hidden factors, no invented benchmarks.

This tool estimates human risk from your practices. The Cyber Aware platform measures it from actual behavior - real phishing responses, real training completion, real breach exposure.

QUESTIONS

Frequently asked

What is a Human Risk Score?

A single 0-100 number summarizing how exposed an organization is to human-layer attacks - phishing, credential theft, and social engineering. This free calculator estimates it from your security practices across six domains.

How is the score calculated?

Each answer maps to a 0-4 maturity level. Domain scores are the average of their answers, and the overall score is a weighted blend of six domains - phishing resilience and training culture weigh heaviest. The methodology is on this page; there are no hidden factors.

Why does my score show a plus-or-minus range?

The 12-question Quick Scan gives a provisional score with a wide confidence band. Answering the 15 Refine questions narrows it, because more evidence means a tighter estimate. Fewer data points always mean more uncertainty - we show that honestly.

Is this the same as Cyber Aware's product Human Risk Score?

Same idea, different evidence. This tool estimates risk from your practices. The Cyber Aware platform measures it from actual behavior - real phishing responses, real training completions, and real breach exposure, per person, continuously.

Can MSPs use this with clients?

Yes - choose the 'assessing a client' mode. MSPs use the score in prospect conversations and QBRs as a fast, neutral way to show where the human layer stands and what to fix first.

Do I need to sign up to see my score?

No. The score, the domain breakdown, and the recommended actions are free with no signup. An email is only needed if you want the branded PDF report.