Lookup · 22 frameworks
Compliance Awareness Requirements
Pick a framework (PCI DSS 4.0, HIPAA, NIS2, DORA, CMMC, GLBA, NIST 800-171 and more) and see its security awareness and training obligations in plain English, with audit evidence and SEAT pillar mapping.
Open the lookup →
Gap analysis · EU
NIS2 vs US Frameworks Gap Analysis
Compare NIS2's security awareness and training obligations against US frameworks and surface the gaps your program needs to close for EU operations.
Run the gap analysis →
Calculator
Security Awareness ROI Calculator
Build a defensible business case with the math shown. Enter incident frequency, cost, expected reduction, and program spend to get a cost-versus-risk estimate you can take to a CFO.
Run the numbers →
Calculator
Program Staffing (FTE) Calculator
How many people a program needs, grounded in the SANS 2026 benchmark of at least 4.3 FTE for a program that changes culture. Enter headcount and ambition, see the staffing gap you are carrying.
Check your staffing →
Self-check · 2 min
Maturity Self-Check
Eight quick questions across the four SEAT pillars return a directional maturity level, from Reactive to Embedded, and show your weakest pillar. A fast snapshot before the full assessment.
Check your maturity →
Benchmark · Cited
Phishing Click Rate Benchmark
Published phishing susceptibility by industry and company size (KnowBe4, Verizon DBIR), with a compare-your-rate tool, and the part most benchmark pages skip: why click rate alone is a weak metric.
See the benchmarks →
Assessment · 10-15 min
Free SEAT Maturity Assessment
Measure your program across Strategy, Engage, Assess, and Train. Get a maturity baseline showing where investment reduces the most risk. 26 questions, no account needed.
Start the assessment →
Builder
Third-Party Risk Assessment Builder
Generate a structured third-party risk assessment for vendors and suppliers, aligned to the human-risk questions that frameworks like NIS2 and DORA now require.
Build an assessment →
Reference · Updated quarterly
HRM Market Landscape
An independent, practitioner-maintained map of the human risk management market: vendor positioning, funding, categories, and an honest practitioner take on each.
Explore the landscape →
Playbook
Phishing Triage Playbook
An open, vendor-agnostic reference for building your own phishing triage workflow: severity scoring, reference architecture, and SOC integration patterns.
Read the playbook →
Prompts
Run the Framework With Any AI
Ten copy-paste prompts for running the SEAT assessment through Claude, ChatGPT, Copilot, or your own internal model. Assess your program, map it to NIS2 and NIST CSF, and build the case for resourcing it. Nothing leaves your environment.
Browse the prompts →