Measure human risk and manage its reduction
A score out of 10 for each employee, team and entity, tracked over time to focus useful action.
- shared across the program
- 1 score
- combined in context
- 4 signals
- simple risk reading
- /10
shared across the program
combined in context
simple risk reading

A score that follows trajectory, not a snapshot
Risk Index considers recent campaigns, interaction depth and improvement. As an employee progresses, the score changes: the goal is to guide action, not attach a permanent label.
Securing information systems continuously concerns the CISO as much as the training lead. Both follow the same indicators for different reasons: one measures vulnerability, the other engagement. That follow-up is what makes it possible to say whether the awareness budget is having an effect, rather than assume it.
The score analyses data in real time to rank risks instead of stacking them. Trade-offs then become possible: you know which population to support first, on which channel, and what to stop doing because it changes nothing.
Four signal families, one score
Phishing 360 simulations
Observed journey depth distinguishes a simple click from data entry or submission.
Learning Academy
Journey completion and learner progress contribute to the risk reading.
MailWatch reports
Reporting a suspicious message is a positive signal that strengthens collective detection.
DataWatch exposure
Exposed business identities are tracked separately from behavior.
Complete dashboard
Click rates, compromise percentage and reports, available live from a single interface.
Simplified audit
Downloadable reports that make compliance easier to demonstrate and keep executives informed.
Engage teams by making them accountable
The user dashboard gives everyone a quick read on their own performance and their team's: completion time, participation rate, overall level. Learners move up levels with a star rating and earn badges with each success. Measurement stops being a control tool and becomes a marker of progress, which changes entirely how it is received.
- Completion time and participation rate
- Levels and star ratings
- Badges and completion certificates

Questions fréquentes
- What is BlueSecure Risk Index?
- BlueSecure's human risk score. It consolidates simulations, learning, reports and exposure into a score out of 10 tracked over time.
- Does a data breach penalize an employee?
- No. Involuntary exposure is separated from behavioral risk and calls for technical remediation, not a learning penalty.
- How is the score used day to day?
- It helps adapt campaigns and learning journeys, then identify teams, entities, countries or roles that need focused action.
- Does the score change over time?
- Yes. It is recalculated as campaigns and training progress so it reflects current risk and rewards improvement.
- Can the data be exported?
- Yes. Reports are downloadable, which makes compliance easier to demonstrate during an audit, and the data stays available through the API to feed your own dashboards.
- How often is the data refreshed?
- In real time. A campaign's statistics come back while it is still running, so you can adjust a follow-up or stop an ineffective scenario rather than waiting for the final report.
- Is the score individual or collective?
- Both readings exist: organisation, team and individual. We recommend steering at the collective level and using the individual view only to trigger support, never to sanction.