HUMAN-CENTRED SECURITY
Attackers gave up on your firewalls. They're going after your people.
You can't patch a person. Switched On Security builds the motivation and the ability your people need to make secure decisions — through AI-native, role-tailored simulations grounded in teaching pedagogy and behavioural science.
No signup. Play the simulation in your browser.
Northbeam
Social engineering sim
Aster & Finch
Human risk overview
280 people, segmented by cohort
The problem
Attackers didn't get past your defences. They went around them.
Security tooling matured
MFA, EDR, better detection — the systems got harder to walk through the front door.
So attackers turned to people
Social engineering is the easier way in now — a person, not a firewall, is the softest target.
But people aren't a patchable vulnerability
Changing what someone does takes teaching pedagogy, behaviour-change psychology and behavioural economics — not another control.
What most People Security does
Most People Security just disseminates policies or runs rigid phishing simulations built to trick employees. No learning principles, no real aim at behaviour or mindset change.
What behaviour change actually requires
Ability to act securely motivation to do so — together. Miss either one and the behaviour doesn't change.
Our take
A human-centred approach: motivation and ability, both.
Secure behaviour needs someone who is able to act securely and motivated to. We built two simulations that move both — and measure the change.
For individual contributors
Tabletop Simulations
Facilitated simulations that put the person in the driver's seat of a real incident — they make the decisions, navigate the challenges, and feel the impact play out in real time. Learn by doing, not by being told.
The ethical evolution of the phishing sim
Social Engineering Simulation
Most phishing sims exist to trick employees into a gotcha moment — never to teach — and they only cover the inbox, when the worst attacks today start innocent on LinkedIn, SMS or WhatsApp and turn malicious. Ours is multi-channel, role-tailored, and treats investigating and reporting as first-class moves, not just click-or-don't.
Play both concept demos in your browser — entirely synthetic, no signup.
What makes this different
Nobody else leads with pedagogy.
Two sets of principles run underneath everything we build: how we teach, and how we measure what actually changes.
Our teaching philosophy
Struggle-based learning
Productive difficulty makes lessons stick. We let people work through a real decision under pressure, not watch someone else make it.
Peer-based learning
People learn security from the people around them, not from a policy PDF. We build for the way teams actually pick up habits.
Experiential learning
Do it, feel the consequence, keep the lesson. Every simulation plays out its impact so the learning is earned, not told.
Our psychology principles
Motivation × Ability
The two primary drivers of behaviour change. Secure behaviour happens only when someone is both able to act securely and motivated to. We move both.
DOSPERT risk-taking
A validated, repeatable instrument for measuring how much risk a person will actually take — so the picture is comparable over time, not a one-off guess.
Experimental risk perception
We measure how well people perceive risk scientifically — through what they do in a controlled simulation, then how they rate it — not by asking them to self-report.
How it works together
Practise. Pressure-test. Understand.
The two live simulations feed the signal that the dashboard will turn into a picture of your whole organisation.
- 01 · PractiseLive
Tabletop Simulations
Individual contributors drive a live incident and feel the consequences of each call.
Learn more - 02 · Pressure-testLive
Social Engineering Simulation
The ethical evolution of the phishing sim — AI-native, multi-channel, role-tailored.
Learn more - 03 · UnderstandComing soon
Human Risk Dashboard
The signals from both simulations map your org by motivation and ability.
Read more
- Two interactive concept demos, on synthetic data — Tabletop Simulations and the Social Engineering Simulation.
- A short conversation with the founder.
- The Human Risk Dashboard.
- Automated, personalised nudges.
- Integrations with the tools you already run.
Problems → solutions
What you're trying to fix, and where we answer it.
The problem
AI is making phishing and social engineering far more convincing.
Our answer
A realistic, multi-channel simulation where people practise spotting the good fakes — and build the reflex before the real one lands.
The problem
People are pasting sensitive data into AI tools and unsanctioned SaaS.
Our answer
A tabletop where they drive the decision and watch the consequence play out — then learn the secure alternative by living the insecure one.
The problem
Attacks moved to WhatsApp, SMS, voice and LinkedIn — your phishing sim didn't.
Our answer
Multi-channel simulations that start innocent and turn malicious, the way real social engineering actually does.
The problem
Your awareness programme reports completion rates, not behaviour change.
Our answer
We measure motivation, ability and risk-taking with validated instruments — so you can see behaviour move, not just attendance.
The problem
You don't know which teams are your champions and which need support.
Our answer
The Human Risk Dashboard maps every team by motivation and ability, so you know exactly who to celebrate and who to help first.
The problem
Phishing tests have made your people distrust the security team.
Our answer
Simulations built to teach, not trick — every one ends in a coaching moment, never a gotcha.
Concept demos
Don't take the deck's word for it.
Get social-engineered (safely)
Reply, investigate, or report a multi-channel attack — and see what the attacker saw.
Explore a human risk dashboard
Detection skill, motivation, ability and risk appetite, mapped across a fictional company.
Fully interactive concept demos. Entirely synthetic data, nothing wired to a real customer. Nothing tracked.
Meet your friendly adversary.
Switched On Security is in active development with a small group of design partners — early access is free, and it shapes the roadmap.