Human Risk

Human Cyber RiskNew

A dedicated dashboard suite that measures, visualises, and manages the human element of your security posture — covering user risk scores, insider threat signals, identity exposure, email threats, privileged access, and device compliance across your entire user population.

Human Cyber Risk

The human attack surface, quantified and managed

What it does

Key capabilities

User Risk Scores

Every user scored by anomaly frequency, severity, MS365 risk state, and behaviour pattern — surface your highest-risk accounts at a glance.

Insider Threat Detection

UBA anomaly signals, suspicious mailbox rules, and off-hours access patterns combined into a structured insider threat dashboard.

Identity Exposure

HaveIBeenPwned breach data correlated against your user population to surface accounts with credential exposure risk.

Email Threat Tracking

Phishing detections, BEC indicators, and DMARC/DKIM/SPF failures surfaced per user and trend over time.

Privileged Access Monitoring

Global admin accounts, PIM-eligible roles, conditional access gaps, and over-privileged app permissions tracked in real time.

Device Compliance

Endpoint compliance posture per user — patch level, encryption, MDM enrolment, and policy violations across your fleet.

Highlights

Why Human Cyber Risk?

  • Unified human risk dashboard across identity, email, endpoint, and behaviour
  • Per-user risk score calculated from 6+ data sources
  • HaveIBeenPwned identity exposure with credential breach data
  • Insider threat signals including UBA, mailbox rules, and off-hours access
  • Privileged access and PIM monitoring built in
Included in OneView

Human Cyber Risk is part of the Hakware OneView platform. All findings, events, and data from this module flow into your central dashboard alongside every other security signal in your environment.

24/7 Support Available
Phone: +27 060 984 1210
FAQs

Frequently asked questions

Each user's risk score draws from six sources: UBA anomaly signals (impossible travel, off-hours access, bulk downloads), Microsoft 365 Identity Protection risk detections, Microsoft Defender detections attributed to the user, HaveIBeenPwned breach credential data correlated to their email address, DLP policy violation history, and device compliance status from Endpoint Manager.

Human Cyber Risk correlates the HaveIBeenPwned breach database against your user population by email address domain. Users whose corporate email address appears in known breach datasets — indicating that their credentials were exposed in a third-party data breach — are flagged with the breached service and breach date, allowing targeted password reset and MFA enforcement.

The module tracks global administrator accounts and their MFA status, Azure AD Privileged Identity Management (PIM) eligible role assignments, conditional access policy gaps affecting admin accounts, service principals and app registrations with broad permissions, and over-privileged access in SharePoint and OneDrive via the Permission Manager integration.

The user risk dashboard surfaces the highest-risk users in your organisation — those with elevated scores across identity, email threat, device, and behaviour signals. Feeding this list into the Training Manager enables targeted security awareness campaigns directed at the users most likely to be successfully exploited, rather than blanket training for all staff.

See Human Cyber Risk in action

Request a personalised demo and we'll show you exactly how Human Cyber Risk works within your environment.