What is KeenSec AI Human Risk Intelligence?
The AI behind Human Risk Analytics. It looks past clicks to report speed, exposure and lasting habits.
KeenSec AI // Human Risk Intelligence
Understand how people behave,
not just what they click.
A click rate alone doesn't show risk. The AI behind Human Risk Analytics shows how fast people report, how targeted each role is and whether safe habits last.
Real behaviour.
No punitive scores.
Fair, team-level insight your leaders can act on.
● Report speed
● Role exposure
● Habit retention
MEDIAN REPORT TIME
14 Minutes
Down from 4.2 hours
REPORTING SCORE
84 / 100
Speed and accuracy combined
REPORTING TIMELINE
SAMPLE
[09:14:02] SIM_SENT :: Finance team (342 people)
[09:14:44] FIRST_REPORT :: 42s after delivery, via the report button
[09:28:15] TEAM_MEDIAN :: 78% of the team reported within 14m
RESULT: Fast reporting shortens the window for real attacks.
TARGETING FACTOR
4.8x average
Finance & executives targeted most
SAFEGUARDS
Two-person approval
Payments verified another way
EXPOSURE-ADJUSTED VIEW
SAMPLE
ROLE: Accounts payable & procurement
- Real attacks: 142 payment-fraud attempts per quarter
- Click rate: 4.1%
- ADJUSTED RISK: LOW (92% reported quickly)
INSIGHT: Heavily targeted is not high risk when people verify.
HABIT RETENTION
91.4% at 90 days
After one short lesson
NEXT RETEST
Day 180
Same difficulty, fresh scenario
HABIT RETESTS
SAMPLE
LESSON: Verify bank-detail changes another way (12 June)
RETEST 1 (Day 14): 94% safe responses
RETEST 3 (Day 90): 91% safe responses, fresh scenario
RESULT: The habit held.Try it
Compare teams.
Ask questions in plain language.
Switch between sample teams, then ask KeenSec a question and see the evidence behind the answer.
Interactive demo with sample data.
PICK A TEAM
Team: 342 people
Report speed
14m (score 88/100)
Down from 4.2h; among the fastest teams
Role exposure
4.8x average
Heavily targeted by payment fraud
Habit retention
91.4% retained
Checked across 3 retests
Scanner clicks filtered
Filtered out
1,842 automated scanner clicks removed
TEAM SUMMARY
Finance is targeted most, but strong verification habits and fast reporting keep its risk low.
ASK IN PLAIN LANGUAGE
ASK KEENSEC
Try asking:
ANSWER WITH EVIDENCE
Confidence: 96.8%
Cloud Engineering is often targeted with app-consent lures, but is slow to report.
Finance reports in 14 minutes; Engineering takes 1.8 hours, often inspecting links before reporting.
Team: 580 engineers
Signal: 62% app-consent lures
Next step: just-in-time lesson
How it works
Four steps to a fair picture of risk
Clear, fair insight without blame.
Stage 01
Separate people from scanners
Tells real clicks apart from automated security scanners and link checkers.
- Link-preview clicks filtered
- Clean results for your SOC
Stage 02
Adjust for exposure
Weighs results by how often each role is really targeted.
- Adjusted for role targeting
- Compared with similar teams
Stage 03
Check that habits last
Retests with comparable scenarios at 14, 45 and 90 days.
- Difficulty adjusts over time
- Shows whether lessons worked
Stage 04
Answer in plain language
Ask KeenSec answers in plain language, with evidence and a confidence score.
- Evidence you can inspect
- Summaries ready for the CISO
What we measure
Six behaviour signals
A fuller picture of security behaviour than click rates alone.
01
Actions
Simulation actions
Opens, clicks, QR scans, credentials entered and call-backs.
What we track:
Time, device and where people stopped.
02
Speed
Report speed
How fast and how accurately people report. Fast reporting stops attacks sooner.
What we track:
Median time to report, report accuracy and reporter notes.
03
Channels
Behaviour on every channel
Email, QR codes, SMS, voice calls, Slack and Teams.
What we track:
Who falls for a switch of channel, and who verifies another way.
04
Filtering
Scanner filtering
Removes clicks by security gateways and link scanners.
What we track:
Automated-visitor checks, network source and real mouse movement.
05
Context
Role exposure
A 5% click rate means more in a heavily targeted payables team than in a quiet one.
What we track:
How often each role is targeted, and its level of access.
06
Retention
Habit retention
Spaced retests show whether safe habits last.
What we track:
Retention over 90 days.
Key facts
Key facts about Human Risk Intelligence
What problem does it solve?
Click rates alone mislead. They count scanner clicks as people and ignore whether employees report threats.
How does KeenSec filter automated scanners?
Timing, browser signals and page interaction show which actions were human.
What is Ask KeenSec?
Ask about your people's risk in plain language and get an answer from your own data, with evidence and a confidence score.
How is employee privacy protected?
Reports focus on teams, not individuals. Role-based access keeps the focus on coaching, not punishment.
How does it connect across KeenSec?
Risk trends shape new scenarios in Scenario Studio and trigger just-in-time lessons in Awareness Generation.
Let’s connect the dots
See the human risk.
Change what happens next.
Bring your awareness program, your reporting workflow, or the question your current metrics cannot answer.
Book a demo