Metrics
What is resilience and vulnerability by tactic?
Measuring how an organization performs against each manipulation tactic — urgency, authority, scarcity, trust, helpfulness and social proof — rather than scoring individual people.
In more detail
It produces an organizational picture you can act on: if a company is resilient to urgency but vulnerable to authority, that is a specific training and policy problem with a specific fix.
Why it matters
It gives leadership something actionable, rather than a ranked list of employees.
Hook Security’s position
This is Hook’s alternative to per-person risk scoring. Scoring humans measures how often someone met a hard simulation, then follows them around as if it were a character trait.
Related terms
The likelihood that everyday human behavior leads to a security incident.
Security training built on psychology rather than fear — people are treated as partners, and clicks become coached learning moments instead of infractions.
The percentage of people who report suspicious messages instead of ignoring or clicking them.
Vocabulary is the easy part. Behavior is the job.
Thirty minutes, a live account, and a straight answer about where your people actually stand.