HEROES by CyBehave runs a Security Champions programme end to end: recruit and coordinate your Champions, develop them, design the interventions they carry into their teams, and measure whether the behaviour around them is changing. It is built on behavioural science, without you or your Champions needing to be behavioural scientists. Start with the core platform and add capability as the programme matures.
Rename the role to match your culture. Heroes adapts every label across the platform, so it speaks your organisation's language.
Most people recognise themselves in one of these six. Each card shows what the core platform gives you from day one, and where an add-on module takes you when the programme is ready for it.
You have been asked to build a Champions programme, have never run one, and are doing it alongside everything else. You need something credible in place within a quarter.
You have a working network, or have inherited one. You need to know who is active, who is drifting, where the gaps are, and to stop losing track.
Completion is high, click rates have plateaued, and the board wants to know what the programme has changed rather than what it has delivered.
Your programme exists because of an incident, and you need to record the next one, see the pattern, and know which behaviour to work on because of it.
You run a network that spans divisions or countries. Coverage rests on a few people, and you cannot see where the next recruit would make the most difference.
Your network is already behaviour-led. What you lack is instrumentation, and every tool you are offered was built for a compliance team.
Every subscription starts with the core platform, which has everything a programme needs to recruit and coordinate Champions, change behaviour and prove it. As the programme matures you may want to go deeper on evidence, risk, network analysis or behavioural method. That is what the add-on modules are for, and you never pay for capability you cannot yet use.
The whole platform for running a network: recruit and coordinate Champions, develop them, design and run interventions, and measure whether behaviour is changing. A programme that buys nothing else can still change behaviour and show it, through the Behaviour Index. Network Strength and Programme Capability arrive with the modules that build on it.
Sign-in and access. Single sign-on with Microsoft Entra ID, so your people reach Heroes through the identity they already use, with your own multi-factor authentication policy applied at sign-in. Role-based access and mandatory MFA for privileged roles come as standard.
SSO available nowEach module is designed for a point a programme reaches, not a point it starts at. Measure & Evidence and Risk & Incidents are available now; Network Optimisation and Behavioural Science are in development.
Adds Programme Capability, the measure of how well the programme is run, and keeps the whole record: every reading tested for whether it really moved, read against the frameworks your auditors use, and turned into reports for people who never log in.
Bring risk and incident management into the programme, so what happens on the ground shapes which behaviours you work on next, and when a major event hits, manage what it does to behaviour and culture.
Adds Network Strength, the composite measure of the network, and builds on the influence map the core platform captures: see the shape of your network in detail and target the recruits that will strengthen it most.
The complete behavioural method and the workings behind every score, for the practitioner who wants the full toolkit.
| Feature | Core platformIncluded with every seat | Measure & EvidenceAvailable now | Network OptimisationIn development | Behavioural ScienceIn development | Risk & IncidentsAvailable now |
|---|---|---|---|---|---|
| Run the network | |||||
| Champion lifecycle, coverage map and status view | ✓Recommend, onboard, track and offboard every Champion; coverage across divisions, departments and sites | Cohort outcomes: retention and engagement by week since each cohort started | Succession planning, single-link coverage risk, and recruitment targeting drawn from the gaps | – | – |
| Tasks, events and engagement calendar | ✓Curated task library, engagement calendar, events and briefings | – | – | – | Briefing actions on live threats, logged against the Champion |
| Journeys, recognition and gamification | ✓Development journeys, XP and five tiers, badges, leaderboard, Champion of the Month | – | – | – | – |
| Comms Builder | ✓Behavioural comms builder with AI review, psychological safety and specificity checks | – | – | – | – |
| Training Academy | ✓Tiered curriculum by role, with certificates | – | – | – | – |
| Nudge, the AI guide | ✓On every page, for every role | – | – | – | – |
| Change behaviour | |||||
| Priority behaviours | ✓Three to eight behaviours chosen from the catalogue, driving dashboards, suggestions and tasks | – | – | – | Incidents tied to behaviours, with a recommended response: priority, campaign or intervention |
| Intervention Designer | ✓Guided eight-step designer in plain language, with a prediction committed before launch and a retrospective comparing before and after | – | – | The complete SHIELD designer with wave rollout and gates, COM-B diagnostic and scoring, change-wheel matching with the full technique library, and the framework vocabulary on every screen | – |
| Prove it | |||||
| Behaviour Index | ✓Security behaviour as observed by colleagues, measured every wave, by division, business unit and team, with the last 90 days on view | The full history with all-time views and CSV export; a reliable-change test on every movement; the signals behind it with weights and contributions | – | Full construction shown: signals, declared weights, what was withheld and why | – |
| Programme Capability | – | How well the programme is run, measured from six signals, with its full history | – | Full construction shown | Risk handling added to the measure |
| Network Strength | – | – | The composite measure of the network, reported by the Champions themselves | Full construction shown | – |
| Instruments | ✓Quarterly Team Pulse, monthly Champion check-ins and the Champion influence map | – | Interactive network analysis: bridges, isolates, reach and density; Champion 360 feedback | Instrument health and raw export under consent | – |
| Maturity and programme assessment | ✓Maturity survey and an annual security team assessment | The full 40-statement maturity assessment, with the staged model and a breakdown by dimension | – | – | – |
| Compliance Lens | – | Human risk mapped to MITRE ATT&CK®, CIS Controls v8, NIST CSF 2.0, the NCSC CAF and ISO/IEC 27001:2022, with a board report and an ATT&CK Navigator layer export | – | – | – |
| Reporting | ✓Reports in plain language, six languages | Board, quarterly and annual packs as PDF; a Report Builder with saved layouts, scheduled email, and PDF or CSV export | – | – | – |
| Manage risk | |||||
| Risk register | – | – | – | – | Register, dashboard and heatmap, with reporting open to Champions and the whole workforce |
| Incident register | – | – | – | – | Incidents tied to behaviours, with a review queue and a recommended response for each |
| Threat intelligence | – | – | – | – | Written by your team in plain language, tagged by category, with a Champion feed and logged briefings |
| Impact Navigator | – | – | – | – | Assess the behaviour and culture risks of a breach, merger, disposal or change of direction, score them on a 5 x 5 matrix, and track each action plan from draft to close |
Network Optimisation works on the data Measure & Evidence collects, so it is added alongside that module. MITRE ATT&CK® and ATT&CK® are registered trademarks of The MITRE Corporation. © The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.
Short, unscripted recordings from inside the live platform. Start with the overview, or pick the feature you are weighing up from the list.
Videos load only when you press play. Hosted players may set their own cookies once playing. See our Trust Centre.
Most platforms hand you three scores built from the same data, which is one number shown three times. Heroes asks three different groups of people, so each score stands on its own. The Behaviour Index comes from the colleagues who work alongside your teams and is the one outcome measure. Network Strength is reported by your Champions. Programme Capability is assessed by your programme and security team. Nothing is counted twice, and no score is folded into another.
What the programme has in place to work with: leadership, resources and delivery.
100% of the evidence this measure uses
How capable, connected and far-reaching your Champion network is.
100% of the evidence this measure uses
70 respondents
Secure behaviour actually observed in teams. This is the outcome measure.
67% of the evidence this measure uses
Read 2 days ago
Behaviour change in Heroes follows SHIELD, our six-stage framework built for security, with the COM-B model doing the diagnosis. Each stage has a home in the platform. The full method, with its vocabulary, arrives with the Behavioural Science module; the core platform carries a guided version of it so your programme follows a scientific method from day one. Read the science →
Define observable target behaviours during setup, prioritised by the risks that matter to you.
Champion check-ins and Team Pulse diagnose which COM-B component is holding a behaviour back.
The Intervention Designer matches evidence-based techniques to the diagnosis before anything reaches delivery.
Champions carry interventions into their teams, backed by tasks, comms and recognition in the flow of work.
Dashboards track behaviour and its drivers against baseline, so you know what worked and what to revisit.
Network analysis shows where Champion coverage is strong enough to scale what the evidence validated.
Nudge is built into every corner of Heroes. Grounded in the COM-B model and CyBehave research, it is a behavioural guide available to Champions, programme teams and programme leaders around the clock, and it is included with every subscription.
Nudge is AI-powered and may occasionally need adapting to your context. Always apply your own professional judgement. Conversations are used anonymously, in aggregate, to improve the Nudge experience.
The Training Academy gives your team the scientific methods and frameworks that underpin Heroes without asking anyone to become a behavioural scientist. Each module is short and practical, and ends with a downloadable summary. Champions, security teams and programme leaders each see the modules relevant to their role, and each add-on module brings its own training with it.
COM-B and Behaviour Change Wheel foundations, dual-process theory (System 1 and 2), communication psychology, and critical thinking. Accessible to anyone, with no prior scientific knowledge required.
Champion skills and team engagement, intervention design, programme management, measurement and evaluation, and social network analysis. Modules match each role's day-to-day needs.
Organisational culture and resistance to change, strategic reporting and programme maturity, and choice architecture. Each module includes a PDF summary to keep.
Use cases and comments from the teams running their Champions programmes on Heroes, and from the people using our free tools and content. Only words the customer has said or approved.
“As a security practitioner, I was worried about how I'd need to start thinking about behaviour change, and how I'd actually go about doing it. The content on the site helps me understand complex concepts and how to apply them in practice. Thank you.”
“Getting the Heroes trial up and running was really easy. We'll come back with proper feedback once the trial's finished.”
“The Champions Health Check is a great tool. It was really easy to use, and the output was very detailed for a free tool. We now have an action plan to move our Defenders programme forward. Many thanks, and keep up the great work.”
“Thank you for providing the free health check. We ran it this week on our Champions and it helped identify where some gaps were in our thinking. We are now using this to make improvements. Thank you.”
172 awareness Champions, run from a spreadsheet until this year. Admin is down about 30% and the next six months of events are booked.
We've got 172 awareness Champions across the business, and for a long time the whole thing ran on a spreadsheet. Who's a Champion, which team they're in, when we last heard from them, it was all in there. Then there were the distribution lists, a new form every time we ran something, and someone (usually me) copying the answers back into the spreadsheet afterwards.
None of it was difficult. There was just a lot of it, and every hour I spent on that was an hour I wasn't spending on the actual awareness work.
It's early days and I reckon we've taken about 30% off the admin already. Everything's in one place now: the Champions, their teams, what they've been up to, the events and who's signed up. If someone asks me a simple question, I can answer it without opening three different things first.
Honestly, this is the bit the Champions bring up. They can pop a quick update in from their phone between meetings and that's it, done. Before, they'd save it up for an email that never got written. So now we actually hear about what's going on.
I thought the calendar would just be somewhere to put dates. It's turned out to be more than that. Seeing the whole year in front of us made the quiet months really obvious, and we started asking what else we could do. Lunch and learns, guest speakers, things we'd just never thought about. The next six months are in there now.
We always sent a follow-up email after a session and got a few replies if we were lucky. After our first event in Heroes we got more feedback, and better feedback, and we used it to shape the next one. That's never really happened before.
With 172 people you can't keep it all in your head. Now I can see where the gaps are and which Champions are really carrying things. If I'm honest, I can also see the ones who aren't doing much. We won't rush it, but at some point we'll probably have a chat about swapping some of them for people who actually want the role.
Next year I'd like to look at how the network's put together: where the Champions sit, who they're connected to, and whether we've got them in the right places. For now, just being able to see the gaps is a big step for us.
James S., UK transport company
Have feedback of your own? Tell us; we publish only what you approve, with the attribution you choose.
Everything a programme needs to run a network, change behaviour and measure the Behaviour Index. One annual fee for your Champion band, and growth inside a band costs nothing. 28-day free trial, no credit card.
Start free trialMeasure & Evidence and Risk & Incidents are available now, each with one self-serve trial from inside the product. Network Optimisation and Behavioural Science follow when they ship.
See module pricing →HEROES by CyBehave is a Security Champions programme platform. It gives the people who run a Champions network one place to recruit, onboard and coordinate Champions, design and run behaviour change interventions, and measure whether security behaviour in the teams they support is changing. It is built on behavioural science, without anyone needing to be a behavioural scientist to use it.
The core platform is one annual fee for the size of your Champions network, from £2,400 a year for up to 25 Champions, and includes everything a programme needs to run a network and measure the Behaviour Index. Add-on modules are a percentage uplift on the band fee and are only added when your programme is ready for them. The pricing page has a calculator.
Yes. The 28-day free trial gives you the core platform in full, with no credit card and no commitment. Add-on modules can each be trialled once from inside the product.
Yes. Single sign-on with Microsoft Entra ID is available now, with your own multi-factor authentication policy applied at sign-in. Role-based access and mandatory MFA for privileged roles come as standard.
No. Heroes measures and informs; it does not surveil. The Behaviour Index is built from colleagues' observations of their team, aggregated and reported at team level and above. Nudge, the AI guide, shows programme teams only anonymised, aggregated themes from Champion conversations.
The core platform runs the programme end to end: Champions, tasks, events, communications, the Training Academy, the guided intervention designer and the Behaviour Index. Measure & Evidence adds Programme Capability, full measurement history, Compliance Lens and board packs. Risk & Incidents adds a risk register, incident register, threat intelligence and Impact Navigator. Network Optimisation (network analysis and Network Strength) and Behavioural Science (the full SHIELD method) are in development.
28-day free trial. No credit card required. The core platform in full from day one, and you add a module when you are ready.