Two milestones worth pausing for

Dear renegades, mavericks, and deviants,

I won’t do this often, I promise. But I hope you’ll allow me a small moment of pride.

This year has been full of hard work, change, and challenge. It’s easy to forget the distance covered while our noses are to the grindstone.

But two milestones stand out. They matter not because they’re shiny announcements, but because they mark real progress in how we help people manage human cyber risk.

CybSafe Signal: your newest AI intern

Imagine planning tomorrow’s phishing campaign with an assistant that actually knows what works. Should you use a CEO fraud scenario or a credential harvest? Which intervention will drive learning rather than fatigue? How do you measure what creates lasting behavior change?

CybSafe Signal helps you answer these questions.

We’re busy training your next behavioral security intern. It’s built on a decade of CybSafe data, more than thirty years of behavioral science research, and SebDB.com. It’s the only AI adviser grounded in a behavioral ontology purpose-built for cybersecurity. Rather than taking random guesses, Signal learns from evidence. This is epic.

Ask it how to improve phishing outcomes and it’ll help you choose the right simulations, timing, nudges, and metrics. It supports randomized group assignments so you can test ideas and prove what works.

And this is only the beginning. Soon it’ll help with language translation, stronger nudges, and clearer explanations of results.

CybSafe Signal speeds you up without replacing human judgment. It keeps your data under your control with opt-in, human-in-the=loop guidance.

And, crucially, it accelerates our core strategy: building tools that think with you, automate the boring parts, and make it easier to prove impact.

Quick add-ons aren’t our style. And security teams deserve better than that. I know you’re under pressure to do more with fewer people. I know you need tools with built-in intelligence.

Human risk management needs language understanding, pattern spotting, personalization, and automation. AI helps with all of that.

CybSafe Signal isn’t perfect yet. But it marks the start of a new chapter for CybSafe. It will soon become the most visible layer of the AI-driven HRM platform we’ve been working toward for years. It only exists because of the collective effort of the tribe.

We won’t rush it. We’ll release it carefully to selected customers, partners, and then eventually anyone who wants it. There’s still more to learn (always), but this week is a meaningful step forward.

We’re chuffed*.

SebDB v4.0

Many of you know SebDB is one of the most important things we’ve helped to create. It’s the first open-source security behaviors database and the backbone of a growing map for human cyber risk.

The new SebDB v4.0 maps user behaviors to risk outcomes, threat actor tactics, intervention strategies, and frameworks such as MITRE ATT&CK and NIST CSF. It gives structure and meaning to human cyber risk, an area that has been overlooked or misunderstood for too long.

If this is your first encounter with SebDB you might be imagining a fancy list. Fair. But it isn’t. It’s semantic infrastructure you can measure against. A machine-usable, evidence-based system designed to support reasoning, measurement, automation, and behavioural insight at scale.

That’s what it is. But what it does is the whole point: It helps security teams finally treat human risk with the same rigor as technical risk.

If you want to see what’s changed and why it matters, as well as how others are using SebDB in their own programs, join me on 10 December for a walkthrough of the latest update – click here to register.

— Oz A

*That’s Brit-speak for quietly thrilled (possibly while sipping a cup of tea).