Skip to content

Glossary · Human and AI agent risk

Human risk signal

One observable piece of evidence about a person’s or an AI agent’s security risk, such as a real phish delivered or a privileged role held.

What is a human risk signal?

A human risk signal is one observable piece of evidence about the risk a person or an AI agent brings, from one source. A real phishing email delivered to someone, a privileged role they hold, or sensitive data they uploaded to an unapproved app are each a signal.

How it works

Signals come from the tools an organization already runs: email security, identity providers and MFA, web gateways and CASBs, data loss prevention, endpoint protection, HR systems, and training and simulation results.

In the open Human Risk Management Framework, signals are the first level of evidence. Signals that describe the same subject at once form cohorts, ordered runs of signals form sequences, and sequences point toward breach scenarios.

Why it matters

A risk score is only as good as the signals beneath it. The more of the stack a program can read, the fewer blind spots it has, and the more precisely it can act.

How Living Security helps

Living Security reads hundreds of signals from the email, identity, web, data and HR tools you already run, with no agent to deploy.

See which people and AI agentsare driving your risk.

A live walkthrough with our team, on the tools you already run.

  • 68%Less time in a risky state after targeted action (2026 Human Risk Report)
  • LeaderNamed Leader in the Forrester Wave™: Human Risk Management Solutions, Q3 2024
Book a demo