CyberPosture
CyberPosture HVI · Human Vulnerability Index

Measure the human side of cyber risk.

The Human Vulnerability Index (HVI) translates human cybersecurity behaviors into a clear, measurable score. Instead of focusing only on systems and technology, HVI helps identify the human factors that contribute to cyber risk.

Human Vulnerability Index

What HVI Does

CyberPosture HVI is a privacy-first human-risk intelligence platform that measures the human side of cyber risk and expresses it as a single, intuitive score. HVI gives individuals, security teams, and organizations a clear, measurable read on cyber vulnerability — where exposure exists, how it's trending, and what to do about it. The result is a shared language for human risk that turns awareness into measurable, continuous improvement, without compromising individual privacy.

Measure Human Risk

Translate human cyber vulnerability into a clear, easy-to-understand score.

Reveal Exposure

Identify behaviors, habits, and risk factors that contribute most to cyber exposure.

Drive Improvement

Track progress over time and measure the impact of awareness and security initiatives.

Platform architecture

How the HVI platform works.

A continuous loop—from assessment to score to action—running on a shared, privacy-first and security-first platform foundation.

01
Live Assessment
Behavior, knowledge, scenario, and context inputs.
02
HVI Score
A 300–850 score with a clear risk tier.
03
Recommendations
Personalized, prioritized actions.
04
Continuous Improvement
Track progress and reduce risk over time.
Shared CyberPosture platform foundation
Signal & Evidence Ingestion
Identity & Context
Risk Intelligence Engine
AI Reasoning Layer
Governance & Review
Reporting & Evidence
Security, Privacy & Governance — built into every layer
Role-based access · Encryption · Data minimization · Consent · Retention · Audit logs · Privacy by design

Understand both exposure and improvement.

HVI distinguishes between inherent human risk — exposure before controls, training, and behavior improvements — and residual human risk, the exposure that remains after protective controls, awareness, and improved habits are taken into account.

For organizations, this distinction shows whether interventions are actually reducing human cyber risk over time.

Inherent human riskHigh
Residual human riskReduced
HVI for organizations

More than training completion.

Measure workforce human-risk patterns, understand where exposure is concentrated, prioritize interventions, and track improvement over time — with reporting for security, risk, HR, and leadership.

Request HVI Demo
Workforce HVI DashboardQ2 · 1,240 people
694
Avg HVI
+11
QoQ change
18%
High risk
Engineering
761
+12
Support
705
+8
Finance
688
+5
Sales
642
-3
HR
724
+9
Executive
598
+21

A score built on structured signals.

HVI combines assessment responses with behavioral, exposure, and control-adoption signals — designed to update as new signals become available, and to explain the reasons behind the score in plain language.

300–850 scoreMulti-signal risk modelInherent & residual riskBehavioral signalsControl-adoption signalsTime-based trackingRecommendation enginePrivacy-first design

Built for trust from the beginning.

HVI is designed around privacy, consent, data minimization, and clear boundaries on how human-risk information is used. It should help people improve resilience — not unfairly penalize individuals or drive fully automated decisions without human review.

Consent-awareData minimizationPseudonymized dataRole-based accessHuman reviewResponsible useEvidence & auditability

Learn more about the HVI Index

Walk through it with our team.

Schedule a Demo