Metrics
What is resilience and vulnerability by tactic?
Measuring how an organization performs against each manipulation tactic — urgency, authority, scarcity, trust, helpfulness and social proof — rather than scoring individual people.
In more detail
It produces an organizational picture you can act on: if a company is resilient to urgency but vulnerable to authority, that is a specific training and policy problem with a specific fix.
Why it matters
It gives leadership something actionable, rather than a ranked list of employees.
Hook Security’s position
This is Hook’s alternative to per-person risk scoring. Scoring humans measures how often someone met a hard simulation, then follows them around as if it were a character trait.
Related terms
The likelihood that everyday human behavior leads to a security incident.
Security training built on psychology rather than fear — people are treated as partners, and clicks become coached learning moments instead of infractions.
The percentage of people who reported a suspicious message rather than ignoring or clicking it.
Vocabulary is the easy part. Behavior is the job.
Thirty minutes, a live account, and a straight answer about where your people actually stand.