What is a Human Risk Index (HRI)?
A Human Risk Index (HRI) is a score that estimates how likely a person, or an AI agent, is to cause a security incident and how much damage it could do. It combines three dimensions: the threats aimed at them, the access they hold and the behavior they show.
How it works
Threat covers who attackers target, such as the people receiving the most real phishing. Access covers what they could expose: privileged roles, sensitive data and critical systems. Behavior covers what they do: reporting suspicious messages, reusing passwords, uploading sensitive data or ignoring MFA prompts.
Because each dimension comes from live signals, the index moves as people change roles, as attackers shift targets and as behavior improves. A useful index shows its evidence, so a security team can see why a score is what it is.
Why it matters
A single score lets a security team rank where to act first, compare business units and show leadership a trend. Without one, programs fall back to completion rates and click rates, which describe activity, not risk.
How Living Security helps
The Living Security Human Risk Index scores every person and AI agent from 0 to 1,000, higher is better, using hundreds of signals from the tools you already run. Admin and board views show levels in words with the evidence beside them, and you can benchmark against organizations like yours.
