Building Champions. Building Behaviours. Building Resilience.

Security is a behaviour. We apply behavioural science to how people behave around security, to the Security Champions who spread good behaviour and the Champions Networks that make them a capability. That is Secure Behaviour Management, delivered through people.

Take the free health check

How healthy is your Security Champions programme?

See strengths, gaps, your stage on the maturity model and where to focus next.
Baseline
Evidence
Insights
Priorities

Where are you on the journey?

Getting Started

I am just starting out on building a Security Champions Network and want to set it up for success.

  • Learn the essentials
  • Plan your programme
  • Build the business case
Start here →

Running Your Network

I am already running a Security Champions Network and want to manage, engage and grow it more effectively.

  • Assess your programme
  • Find your challenge
  • Reignite a stalled network
Run it better →

Beyond Awareness

I want to move beyond awareness to Secure Behaviour Management, with real behaviour change across the enterprise.

  • The frameworks
  • The research
  • Put it into practice
Go beyond →

Not sure where you stand? Take the free Champions Programme Health Check: eighteen questions, about ten minutes, and a PDF report to keep. It places your programme on our Security Champions Maturity Model, shows what the next stage needs, and names the dimension holding the rest back. No email address needed. Read what others made of it.

What people are saying

From the teams running their Champions programmes on Heroes, and the people using our tools and content.

Read all feedback →
Awareness Champions
“We used to just think about the next event. Now we've got six months planned out, and some of what's in there I'd never have thought of a year ago.”
James S., UK transport company
Read the full use case →
Site content
“As a security practitioner, I was worried about how I'd need to start thinking about behaviour change, and how I'd actually go about doing it. The content on the site helps me understand complex concepts and how to apply them in practice. Thank you.”
Sarah B., security practitioner
Read in full →
Champions Health Check
“The Champions Health Check is a great tool. It was really easy to use, and the output was very detailed for a free tool. We now have an action plan to move our Defenders programme forward. Many thanks, and keep up the great work.”
Nat L.
Read in full →

Where behavioural science meets digital security

Vision: A world where security is intuitive, inclusive, and woven into everyday behaviours.

Mission: We turn the people already shaping security behaviour into a measurable, connected network. Through behavioural science and network analysis, we give organisations a real picture of how security spreads – who influences whom, where resilience is building, and where it isn't – so culture change can be managed rather than hoped for.

About CyBehave →

Evidence-based research

Every framework and feature is grounded in peer-reviewed behavioural science - psychology, behavioural economics, and organisational science applied to cybersecurity.

Privacy-first measurement

CyBehave measures and informs - it does not surveil. This distinction is central to how we design every product.

Secure behaviour, human and AI

Secure Behaviour Management for people and for agentic AI systems, addressed within a unified framework.

Founded on the science. Built for practitioners.

CyBehave is founded on behavioural science, and we know that not everyone in cybersecurity is a behavioural scientist or a cyberpsychologist. So we make it our job to bring the science to you in a consumable, practical form: designed for practitioners and scientists alike, and published openly so you can see exactly what our platforms measure, how, and why.

The Science →

The peer-reviewed research behind CyBehave - psychology, behavioural economics and organisational science applied to cybersecurity.

The Behavioural Model →

How COM-B and the Behaviour Change Wheel underpin the way we understand, measure and change security behaviour.

Behavioural Convergence Theory →

Whether human behavioural science frameworks can be extended to understand, predict and govern AI agent behaviour in security.

Skills Framework →

The Behavioural Cyber Risk Skills Framework - 30 competencies across 7 domains for building human cyber capability.

Latest from CyBehave

The newest insights, articles and Signals brief - research, practice and the week's briefing in one place.

Insight 29 Oct 2026 9 min read

Who Is the Choice Architect for Your Agents?

Ask an organisation that deployed AI agents and decided how they behave, and you'll usually find a name by working backwards through a repos...

Read insight →
Insight 4 Oct 2026 7 min read

Nobody Told the Agents How We Do Things Here

A new joiner learns how an organisation behaves long before they read a policy. They watch who gets challenged at the door. They hear what t...

Read insight →
Insight 3 Oct 2026 4 min read

Nudge and boost were built for a world without an opponent. Security has one.

Picture a finance officer on a Thursday afternoon. An email arrives from a supplier she has dealt with for years, asking her to update their...

Read insight →
View all insights →
Article 30 Oct 2026 12 min

Behavioural change for awareness professionals: what actually moves people

You know the training landed. Completion is high, the quiz scores are good, and the behaviour is unchanged. That is not a failure of your programme; it is the predictable result of a model of behaviour that behavioural science abandoned years ago. The map for awareness professionals making the shift: why knowledge rarely becomes behaviour, diagnosing with COM-B before intervening, the levers awareness rarely pulls, and what to count instead.

Read article →
Article 23 Oct 2026

Moving on from the spreadsheet

Almost every champions programme started in a spreadsheet, because until recently there was nothing else. Spreadsheets fail at lifecycle, coverage, measurement and the network, and they quietly drain the central team of the energy the programme runs on. If you already have a programme, this is what a purpose-built platform does differently. If you are about to start one, the advice is simpler: begin on the right tool from day one.

Read article →
Article 16 Oct 2026 13 min

How to scale a champions programme without losing what made it work

A programme that works at twenty champions often stops working at two hundred. The activity is the same, the numbers look better than ever, and the effect on behaviour thins out. What you are scaling is influence, not headcount. Grow in cohorts seeded from the network map, add a lead tier before you need it, guard against drift into countable activity, manage attrition as a flow, and protect the identity that made people feel chosen.

Read article →
View all articles →
Signals 2 Nov 2026 8 min

SIGNAL: Week 45: Looking the Part

This week is all about costume. Criminals are borrowing the trappings of legitimacy: fake IT support arriving on Teams minutes after flooding your inbox, scam emails that sail through the authentication checks, and AI quietly mass-producing fake login pages. Plus the shadow AI on your own payroll, and why scam-spotting tech is not yet protecting older adults. Five stories on what happens when looking real gets cheap.

Read briefing →
Signals 26 Oct 2026 8 min

SIGNAL: Week 44 - The Path of Least Resistance

People are not the weak link this week; the path is. The new Oh, Behave! report finds people willing but untrained for AI; an EU-wide survey measures the gap between confidence and actually checking; frontline workers route around logins that fight their gloves; fake calendar invites explode; and Chrome starts catching the copy-paste con. Five stories on making the secure path the easy one.

Read briefing →
Signals 19 Oct 2026 8 min

SIGNAL: Week 43 - Benefit of the Doubt

Who gets the benefit of the doubt in your organisation? This week: 600 CISOs say AI agents are now insiders in all but name, Singapore office workers would rather risk a breach than keep the boss waiting, psychologists explain why believing is our default setting, and Asia’s regulators redraw who pays when a scam succeeds. Four stories about trust, and where to place the checks.

Read briefing →
View all signals → Champions view of this brief →

Ready to build champions,
behaviours and resilience?

Start your free trial. No credit card required. Up and running in minutes.

Start free trial → Talk to us