Take the tour

Inside CyBehave Heroes

Nine screens from inside the platform - your programme, your Champions and the science behind both. Click any screen to expand.

heroes.cybehave.com

Interventions grounded in behavioural science

Recognition that keeps people coming back

At a glance

Your whole programme on one screen

Programme capability, network strength and observed behaviour side by side, each from a separate source: your security team, your Champions, and the colleagues who work alongside them. Every score shows when it was taken and how much of the evidence it is based on, and Nudge reads all three together to say in plain language what has moved and what to do next.

The Programme

Six stages. One programme.

A Champions programme is not a project with an end date - it is a continuous behavioural change effort. Heroes is a big platform, so it does not hand you everything on day one. Core tools are available from the start, and as your programme moves through six stages the platform recommends the right features at the right moment - each with its matching training modules - so nobody is overwhelmed. Your Programme Leader can override at any time, enabling or disabling any feature early or late.

Stage 1

Setup

Establishing foundations: secure executive sponsorship, define your org structure, recruit your first cohort, and run a baseline Champion Check-In.

Available from day oneCore toolkit: dashboard, tasks, Champion management, check-ins, priority behaviours, Intervention Designer, and reports.

Sponsor & stakeholder alignment
Org structure and Champion roles defined
First cohort recruited and onboarded
Baseline Champion Check-In captured

Stage 2

Launch 🚀

Going live: a visible programme rhythm takes shape, your first maturity baseline is captured, and Champion training begins in earnest.

Recommended at this stageEngagement calendar, maturity assessment, and the Training Academy.

Engagement calendar populated and shared
Maturity baseline assessed
Champions progressing through the Academy
Programme visible across the organisation

Stage 3

Embed

Bedding the programme in: a regular cadence of check-ins, first interventions running, Champions communicating and being recognised for it.

Recommended at this stageComms builder, recognition (leaderboard and badges), 360 feedback, Champion journeys, and the library.

Regular check-in cadence live
First COM-B interventions deployed
Champion journeys under way
Early engagement signals trending up

Stage 4

Mature

Scaling impact: your network is live and data signals are flowing - the point at which the deeper analytical tools start earning their keep.

Recommended at this stageTeam Pulse, Social Network Analysis, and the risk register.

Social Network Analysis mapping influence
Team Pulse coverage across the org
Risks reported, triaged, and tracked
Reliable change on at least one priority behaviour

Stage 5

Sustain

Holding gains: consistent engagement cadence, measurable behaviour change in the data, Champions designing their own interventions.

Recommended at this stageChampion of the Month - visible recognition to keep momentum going.

Consistent, sustainable engagement rhythm
Measurable behaviour change in the data
Champions self-designing interventions
Programme health score holding steady

Stage 6

Evolve

Continuous improvement: retiring what no longer works, A/B testing comms and interventions, exporting evidence to the board.

Full toolkit in playNothing new to switch on - every feature is now working together, tuned to your programme.

A/B testing of comms and interventions
Retire activities that no longer perform
Board-ready evidence exported on demand
Programme adapts to emerging risks

Nudge AI guidance and AI help with comms are always on, whatever the stage. When a feature is enabled, its matching Training Academy modules unlock with it - so Champions learn each tool exactly when they need it, not months before.

Platform Features

Everything your programme needs.

One platform for the full Champion lifecycle - from onboarding and training through to board-level reporting and programme maturity.

🔄

Champion Lifecycle Management

End-to-end management of every Champion, from the moment they are recommended through onboarding, active contribution, and a graceful offboarding.

🗼

Coverage Map & Heatmap

Visualise Champion coverage across divisions, departments, and geographies. The engagement heatmap shows activity across six dimensions with exportable reports so gaps are visible at a glance.

📊

Behavioural Heartbeat

Three times a year, Champions capture short outside-in feedback from their teams on security behaviours and maturity. Combined with monthly Champion check-ins, Behavioural Heartbeat gives you continuous visibility of your security culture - verifiable data to design, execute, and measure interventions.

📡

Threat Intelligence

Your security function writes intelligence in plain, non-technical language and tags it Technical, Operational, Strategic or Business. Champions subscribe to the categories that matter to their teams, then run briefing actions to make colleagues aware of a live threat. Human-authored, not an automated feed.

🧪

Intervention Designer

A guided five-step workflow to design Behaviour Change Wheel-aligned interventions. Diagnose COM-B deficits, select matched techniques, build weekly action plans, and measure impact.

🎓

Training Academy

A multi-module tiered curriculum covering behavioural science, communication psychology, critical thinking, and programme leadership. Role-specific paths with certificates and downloadable summaries.

🏆

Journeys, Tasks & Gamification

Assign behaviour change tasks from a curated library and link them to Champion development journeys. XP, five-tier progression, badges, a leaderboard, and Champion of the Month reward progress - evidence-based gamification that motivates without creating unhealthy competitive pressure.

💬

Community & Comms Builder

An internal Champion community feed and a behavioural comms builder with psychological safety analysis and specificity checking to help Champions communicate more effectively.

🤖

Nudge AI Guidance Assistant

Always-on behavioural guidance built into every page. Nudge helps Champions design interventions, supports Programme Teams in reading data, and guides every new user through the platform grounded in COM-B throughout.

⏱

20-30 Minutes a Week

Champions are volunteers with day jobs. Heroes is built around a 20-30 minute weekly rhythm - short tasks, bite-sized learning, and quick check-ins that fit around existing commitments. Sustainable engagement is how Champion programmes survive beyond year one.

Who does what.

Four roles, each with the right access for the job. Programme Leaders own strategy and governance, Programme Teams run the day-to-day, Security Teams triage risk and issue Threat Intelligence, and Champions do the behaviour-change work on the ground.

Capability	ProgrammeLeader	ProgrammeTeam	SecurityTeam	Champion
Strategy, billing & settingsPlan, seats, SSO, published measure weights, feature toggles	✓	–	–	–
Champion management & lifecycleInvite, suspend, offboard, transfer, roster	✓	✓	–	–
Intervention Designer & Comms BuilderDesign, assign, retrospective, templates	✓	✓	–	✓
Behavioural Heartbeat & check-insTeam Pulse, Champion Check-In, 360 feedback	✓	✓	–	✓
Coverage Map & Programme analyticsCoverage and engagement gauges, wave history, reports	✓	✓	Read	–
Risk management & triageReport, register, dashboard, triage queue	✓	✓	✓	✓
Threat Intelligence & briefingsAuthor, categorise, subscribe, brief teams	✓	✓	✓	Read
Journeys, tasks & gamificationXP, tiers, badges, leaderboard, Log Activity	✓	✓	–	✓
Training Academy & LibraryModules, certificates, books and research	✓	✓	✓	✓
Nudge AI guidanceChat, guided tours, context help	✓	✓	–	✓
Submit Feature RequestInform our development roadmap	✓	✓	–	–

✓ Full access Read Read-only – Not available

Nudge AI

Your always-on behavioural guide.

Nudge is built into every corner of CyBehave Heroes. Grounded in the COM-B model and CyBehave research, it is a genuine behavioural guide available to Champions, Programme Teams, and Programme Leaders around the clock.

Intervention guidanceNudge helps Champions identify COM-B gaps in their team, suggests relevant techniques from the library, and guides them through building a practical intervention plan.

Programme intelligenceProgramme Teams can ask Nudge to interpret coverage gaps and recommend targeted actions grounded in real programme data. Nudge knows which wave is open and how old each reading is, so it will not narrate behaviour movement between publishes, will not describe a change smaller than measurement error as a change, and will not tell you one measure caused another.

Platform guidance and toursNew users are greeted with a guided tour. Every context help icon across the platform opens Nudge with a plain-language explanation of that feature.

Anonymous programme insightsProgramme Teams see aggregated, anonymised themes from champion guidance conversations, with no individual attribution.

Daily limits and controlsProgramme Leaders can configure daily message limits per role, enabling or disabling AI chat for Champions and Programme Team independently. Guided tours and context help are always available regardless of AI chat settings.

Nudge is AI-powered and may occasionally need adapting to your context. Always apply your own professional judgement. Conversations are used anonymously in aggregate form to improve the Nudge experience.

NUDGE

Included with every CyBehave Heroes subscription

Champion AI chat✓ Included

Guided tours & context help✓ Always on

Programme Team insights✓ Included

The Science

Behaviour change, not just awareness.

Most security culture programmes stop at awareness. Heroes uses the COM-B model and Behaviour Change Wheel to diagnose why people behave the way they do - then designs interventions that last.

These models are put to work through SHIELD, CyBehave's six-stage behavioural change framework built purely for cybersecurity. Every Heartbeat reading, task, and intervention in the platform maps back to a SHIELD stage and a COM-B component, ensuring your programme effort is always directed at the right lever.

Read the science → Explore SHIELD →

Capability

The physical and psychological ability to perform secure behaviours. Skills, knowledge, and the cognitive function to apply them under pressure.

Opportunity

The environment that makes secure behaviour the easy, default choice. Social norms, tools, processes, and the absence of unnecessary friction.

Motivation

The reflective intentions and automatic habits that drive secure behaviour. Incentives, beliefs, identity, and emotional responses to risk.

SHIELD runs Specify, Hypothesise, Intervene, Embed, Learn, and Diffuse as one continuous cycle, with sustainment engineered into every turn. Heroes is that cycle as working software: each stage has a home in the platform.

Specify

Define observable target behaviours during programme setup, prioritised by the risks that matter to your organisation.

Hypothesise

Champion Check-Ins and Team Pulse diagnose which COM-B component is holding a behaviour back.

Intervene

The Intervention Designer matches evidence-based techniques to the diagnosis before anything reaches delivery.

Embed

Champions carry interventions into their teams, backed by tasks, comms, and recognition in the flow of work.

Learn

Dashboards track behaviour and its drivers against baseline, so you know what worked and what to revisit.

Diffuse

Network analysis shows where Champion coverage is strong enough to scale what the evidence validated.

Threat Intelligence

Intelligence your people can actually act on.

Most threat intelligence never reaches the people who need it, because it is written for analysts. Heroes turns it into something a Champion can take to their team on a Tuesday morning.

Your security function writes each item in plain, non-technical language and assigns it a category. Champions choose the categories relevant to their teams, so they see what matters to them and not a firehose of everything. From there, a Champion can run a briefing action to make colleagues aware of the threat and what to do about it.

Security function led, not automated ingestion. Nothing is scraped from a feed and pushed out unread. A person in your security team decides what is worth your colleagues' attention and writes it for them, which is why it lands as guidance rather than noise.

Four categories, Champions choose

TechnicalVulnerabilities, malware and attack methods affecting the tools people use

OperationalLive campaigns and incidents that change how teams should work right now

StrategicLonger-running shifts in the threat landscape worth preparing for

BusinessThreats aimed at your sector, suppliers, customers or brand

1Security function writes and categorises

2Champions see their chosen categories

3Champion runs a briefing action

4Colleagues know what to watch for

Built for everyone

You do not need to be a behavioural scientist.

Heroes is designed so that anyone can run a world-class Champions programme out of the box - in plain, everyday language. But if you are a practitioner who wants the detail, it is all there waiting for you.

Default view

Plain language, by default

Every screen speaks in clear, everyday terms. Run check-ins, design interventions, and read your dashboards without ever needing to know the theory underneath. The platform does the behavioural science for you.

No jargon, no learning curve
Guidance written for busy volunteers
Ready to use from day one

Advanced view

Behavioural depth, on demand

Flip on Advanced view in your user profile and the platform surfaces the behavioural terminology, the models and research behind each feature, and exactly how every key metric is derived and weighted.

COM-B and Behaviour Change Wheel language throughout
The research and models behind each metric
How scores are derived and weighted, made transparent

Same model, two ways of reading it. Advanced view never changes how the platform behaves or what it measures - both views run on exactly the same behavioural model. It only changes how the information is presented to you. Switch back and forth in your profile whenever you like.

Social Network Analysis

Champion Networks that actually work

Effective Security Champions programmes are not about finding one heroic individual who gives presentations on password hygiene. They are about building a network of trusted peers across different roles, teams, and functions - each one positioned to influence the people around them in ways that a central security team never can.

Behavioural science tells us that people adopt behaviours because of social proof, trust, and peer modelling - not because of awareness presentations. Your Champions need to be embedded across your organisation, visible to different audiences, and credible in their own context.

Heroes' Social Network Analysis maps the real influence topology of your Champion network - identifying who is connecting teams, who is isolated, and where the programme is fragile before it becomes a problem.

Key Bridge Nodes

Champions who connect otherwise isolated teams. Losing them fragments the network - Heroes identifies them before engagement drops.

Influence Reach

Who is each Champion actually influencing? Mapped by connections, not assumed by job title.

At-Risk Detection

Champions showing declining engagement surface automatically, so programme leaders can intervene early - not after they have already disengaged.

Cluster Health

Understand whether your Champion coverage is concentrated in one area or genuinely distributed across the organisation.

Click a node to explore connections

Measurement

Three measures. Three separate sets of eyes.

Most platforms hand you three scores built from the same data, which is really one number shown three times. Heroes asks three different groups of people, so each score stands on its own. Programme Capability is assessed by your programme and security team. Network Strength is reported by your Champions. Behaviour Index comes from the colleagues who work alongside your teams, and it is the one outcome measure. Nothing is counted twice, and no score is folded into another.

Programme Capability

0/ 100

What the programme has in place to work with: leadership, resources and delivery.

100% of the evidence this measure uses

as assessed by your programme and security team

Network Strength

0/ 100

How capable, connected and far-reaching your Champion network is.

100% of the evidence this measure uses

70 respondents

as reported by your Champions

Behaviour Index

Outcome

0/ 100

Secure behaviour actually observed in teams. This is the outcome measure.

67% of the evidence this measure uses

Read 2 days ago

as observed by colleagues, not by Champions

Because the three scores come from different people, we never fold one into another, and we never claim one caused another. A stronger programme leading to a stronger network, and a stronger network leading to better behaviour, is something you can watch for in your own data rather than something we have baked into the maths. Every score opens into a longitudinal view with its full signal breakdown, exports to a spreadsheet, and always carries the date it was taken and how much of its evidence was actually there.

And two things we deliberately keep out of the scores.

How much people use the platform tells you whether they turned up. It does not tell you whether anything actually changed. We still show it, clearly labelled, but we never let it near the three scores above.

Shown, but not scored

Engagement

74%

Did people turn up? Logins, tasks finished, training progress, emails opened. Handy for running the programme week to week, but it is not proof that anything changed, so it counts towards none of the three scores.

Shown, but not scored

Coverage

68%

How much of the org replied? When too few people answer, or a team disagrees too much to average fairly, we leave that team out and coverage drops. It is a prompt to read the scores with care, not a hidden failure.

What we will not claim yet. After a few surveys we can tell a real change from normal wobble in your own numbers. Comparing your scores against other organisations needs data we simply do not have, so we do not pretend to. And proving the programme caused a change, rather than it happening anyway, takes a very specific kind of rollout. We are honest about where you are on that path rather than claiming more than the evidence supports.

Training Academy

A modular curriculum built in.

The Training Academy gives your team access to the scientific methods and frameworks that underpin the Heroes platform - without requiring anyone to become a behavioural scientist. Each module is short and focused, bringing the key concepts to life through practical examples relevant to your security programme. Every module ends with a downloadable summary you can print out and refer back to, so learning stays accessible long after the session is complete.

Champions, security teams, and programme leaders each see the modules relevant to their role - building a shared language and evidence-based approach across the programme without overwhelming anyone with theory.

Foundation

Core frameworks

COM-B and Behaviour Change Wheel foundations, dual-process theory (System 1 and 2), communication psychology, and critical thinking. Designed to be accessible to anyone - no prior scientific knowledge required.

Intermediate

Role-specific paths

Champion skills and team engagement, intervention design, programme management, measurement and evaluation, and social network analysis. Modules match each role's practical day-to-day needs.

Advanced

Strategic capability

Organisational culture and resistance to change, strategic reporting and programme maturity, and choice architecture. Each module includes a downloadable PDF summary to keep and refer back to.

Specialist Quests are available for Champions who want to go deeper - self-enrol in optional pathways like Trusted Advisor or Risk Reporter to earn unique badges and develop specialist skills.

CyBehave Book Library — included for all users. Every member of the programme gets free online access to three essential titles: Building a Cybersecurity Culture, Behavioural Change Playbook for Cybersecurity, and The Rise of the Security Champion. The books ground the programme in the same evidence base that underpins every feature of the platform.

User Roles

Built for every stakeholder.

Heroes gives each user exactly what they need - no more, no less. Four distinct roles with tailored access and purpose-built dashboards.

👑

Programme Leader

Full administrative control. Configure the platform, manage billing, set strategy, design interventions, and access all analytics and board reporting.

⚙

Programme Team

Manage Champions day-to-day. Run the Behavioural Heartbeat, assign tasks, build communications, design interventions, and monitor engagement across the network.

🔍

Security Team

Author and categorise Threat Intelligence for Champions. Read-only programme analytics, and contribute behavioural risk data to inform intervention design.

🛡

Champion

A personal portal to complete tasks, earn XP, progress through tiers, connect with peers, access training, and track your impact on your team's security culture.

Champion Lifecycle

Manage Champions end to end.

Champions come and go - some stay for years, others for a season - and that is entirely normal. Roles change, priorities shift, and people move on. Heroes helps you manage the full lifecycle of every Champion, from the moment they are recommended through to a graceful offboarding - so turnover becomes a planned, auditable workflow rather than a coverage emergency.

Stage 1

Recommend

A Programme Team or Security Team member spots the right person and puts them forward. The opportunity is captured before anyone is formally invited.

Stage 2

Invite

One click sends a signed invitation email. The Champion accepts, sets a password and MFA, and completes their baseline check-in and COM-B primer.

Stage 3

Onboard

Department, location and business unit are recorded, the Champion joins the Directory, and their first journeys and tasks are assigned.

Stage 4

Train

Role-specific Training Academy modules build capability - from COM-B foundations to intervention design - with quizzes, badges and certificates to evidence progress.

Stage 5

Contribute

The active life of a Champion - logging activity, progressing through tiers, running interventions, and shaping their team's security culture.

Stage 6

Pause or transfer

Leave of absence, secondment or role change? Suspend, reactivate or transfer in a click - with a coverage check so cover never drops silently.

Stage 7

Offboard

A graceful exit with a handover period. Open tasks move to review for reassignment, and the Champion is retained as alumni for 90 days.

Every move - new Champions, offboarding started, gone inactive, purged - rolls up into a single daily digest email, so Programme Leaders and Teams get one clear summary instead of a stream of point alerts.

New to Champions?

Why Security Champions?

Heroes is the platform - but the idea it serves is bigger. If Security Champions are new to you, start with why peer-led programmes change behaviour where top-down training cannot, and how to build a network from your first recruit.

Security Champions →

What Champions are, the role they play across people, process and technology, and why they are your most important security investment.

Building a Champions network →

A practical, staged journey for standing up a Champions programme - from identifying the right people to a self-sustaining network.

Build a Security Champion network that works.

Inside CyBehave Heroes

Your whole programme on one screen

Six stages. One programme.

Everything your programme needs.

Champion Lifecycle Management

Coverage Map & Heatmap

Behavioural Heartbeat

Threat Intelligence

Intervention Designer

Training Academy

Journeys, Tasks & Gamification

Community & Comms Builder

Nudge AI Guidance Assistant

20-30 Minutes a Week

Who does what.

Your always-on behavioural guide.

Behaviour change, not just awareness.

Intelligence your people can actually act on.

You do not need to be a behavioural scientist.

Plain language, by default

Behavioural depth, on demand

Champion Networks that actually work

Three measures. Three separate sets of eyes.

And two things we deliberately keep out of the scores.

A modular curriculum built in.

Core frameworks

Role-specific paths

Strategic capability

Built for every stakeholder.

Programme Leader

Programme Team

Security Team

Champion

Manage Champions end to end.

Recommend

Invite

Onboard

Train

Contribute

Pause or transfer

Offboard

Why Security Champions?

Security Champions →

Building a Champions network →

Ready to build your Champions programme?