About CyBehave

Where behavioural science meets digital security

We exist to close the gap between how organisations think about security and how their people actually behave. That gap is where most risk lives.

Behaviour

Understanding what people actually do - and why - is the foundation of everything we build.

Culture

Sustainable security comes from culture, not compliance. We help organisations build one that lasts.

Resilience

People who understand risk and are equipped to respond are an organisation's greatest security asset.

Our Vision

A world where security is intuitive, inclusive, and woven into everyday behaviours

Security should not feel like a burden placed on people who are already busy. It should feel like a natural part of how a well-run organisation operates.

When behaviour is understood and culture is designed intentionally, security stops being something done to people and becomes something done with them.

Read the science →

Evidence-based research

Every framework and feature is grounded in peer-reviewed behavioural science - psychology, behavioural economics, and organisational science applied to the specific context of cybersecurity.

Privacy-first measurement

CyBehave measures and informs - it does not surveil. Understanding behaviour does not require monitoring individuals. This distinction is central to how we design every product.

Human and AI behavioural risk

We address both human behavioural risks and the emerging risks from agentic AI systems. The mechanisms differ but both are in scope for a truly resilient organisation.

Our Mission

Transforming security culture through applied behavioural science

Using evidence-based research methodologies, we help organisations understand the psychological, social, and systemic factors that drive behaviour in digital environments - and design interventions that turn good security practices into sustainable habits.

Understand

We start by measuring what is actually happening - not what policy says should happen. Behavioural baselines reveal the real landscape of risk before any intervention begins.

Design

Using the COM-B model, Behaviour Change Wheel, and BCT taxonomy, we design interventions that work with human psychology rather than against it.

Sustain

Culture change is not a one-time project. We build the infrastructure - Champions, measurement, feedback loops - that makes improvement self-sustaining over time.

Our Story

Born out of a need for stronger scientific foundations

CyBehave was founded to address a gap that had persisted for too long in the human risk management space: a field still dominated by awareness training and phishing simulations, with little grounding in the science of how people actually change behaviour.

By bringing together behavioural science, psychology, and cultural anthropology alongside cybersecurity, CyBehave gives industry leaders the thinking, research, and capabilities to design and deliver effective strategic change. Not just in people, but in how they integrate with processes and technology - a modern, holistic approach to cybersecurity in the digital age.

The result is a platform and research programme grounded in evidence: where interventions are designed with the Behaviour Change Wheel, culture is measured not assumed, and Security Champions are developed as genuine agents of lasting change.

Founder

Andy Wood MBA  MSc  CSci  CITP

Founder & Behavioural Cybersecurity Expert

Andy is a technology and security professional specialising in cybersecurity and behavioural science. He has written a number of books on the topic and is undertaking doctoral research in Security Champion optimisation.

His work sits at the intersection of human behaviour, organisational culture, and digital security - combining deep practitioner experience with rigorous academic foundations to build tools and frameworks that actually work in the real world.

Cybersecurity practitioner & technology professional
Behavioural cybersecurity author
Doctoral researcher - Security Champion optimisation
What we build

Two products. One approach.

A platform and a skills framework, working together.

CyBehave Heroes

The Security Champions programme platform. Recruit, train, and measure Champions using the COM-B model and Behaviour Change Wheel - with evidence-based precision at every stage.

Explore Heroes →
Skills Framework

The Behavioural Cyber Risk Management Skills Framework - 7 domains, 30 competencies, 9 professional roles for building organisational capability in behavioural cybersecurity.

View Framework →

Ready to build a stronger security culture?

Start with CyBehave Heroes - free trial, no credit card required.