Most security teams are not short of data; reports, dashboards and exports pile up week after week. The harder question is what to do with it all: Which teams need attention, where is risk actually building and how do you explain any of it to a board that wants outcomes, not activity?
That gap between data and decisions is exactly what our new reporting suite is built to address.
The problem with data that doesn't tell you what to do
Cyber attacks are relentless and increasingly aimed at people rather than technology. Half of UK organisations face a cyber attack at least once a month and around two thirds of successful attacks come down to human error, rather than a technical failure.
Your people are your first line of defence, so understanding how they respond to threats matters enormously, yet traditional reporting tends to stop at the surface. It tells you how many phishing simulations went out and how many were clicked, but it rarely tells you where real risk sits or what to do next.
The result is familiar and teams spend hours pulling numbers together, leaders struggle to see the story behind the figures and valuable insight stays buried in spreadsheets.
From reporting data to reporting outcomes
Our new reporting suite is a complete overhaul of the Boxphish reporting experience. We have not simply refreshed the look and feel but rebuilt reporting around a single pain point our customers have communicated: How do we turn operational data into insights the organisation can act on?
Instead of showing statistics and who clicked or completed what, it helps you understand what that actually means and which parts of the organisation need your attention. That shift, from reporting data to reporting outcomes, runs through every part of the new reporting suite. Here is what that looks like in practice:
See your risk clearly with human risk scoring
Activity alone does not tell you how exposed your organisation really is. Our new suite introduces real human risk scoring, so you can move beyond click counts to a clear measure of risk across your teams.
New risk widgets bring the detail to life, including risk scores, score drivers, trends and league tables. You can see fail rates, repeat offenders, stage depth and training progress in one view, which makes it far easier to identify where attention is needed and act on it quickly.
So how is your score worked out?
Rather than relying on a single measure, your human risk score is a weighted blend of the behaviours that matter most. Failure rate carries the heaviest weighting at 35%, followed by stage depth at 20%, alongside repeat offender rate, training debt and course lag.
These score drivers combine into one clear figure, so you can see your overall level of human cyber risk at a glance and understand exactly what is shaping it. Because the score reflects real behaviour, it changes as your people learn, giving you a live picture of how your organisation’s human risk is improving over time.
Your score is only half the picture, which is where benchmarking comes in.
Put your performance in context with benchmarking
A number on its own rarely tells the full story. Is a 5% fail rate strong or a cause for concern? Without context it's hard to say.
Industry benchmarking lets you compare your organisation against similar businesses, so you can understand how you are performing and set realistic goals. League tables show how your organisation ranks against similar businesses in your sector, so you can see whether you are ahead of your peers or have ground to make up.
It turns an internal number into a meaningful comparison, helping you set targets and show leadership exactly where you stand against the organisations you are measured against, giving them the context they need to make confident decisions.
Explore your data with enhanced filtering and segmentation
Every organisation is different, so your reporting should reflect that and seamlessly integrate into your business structure. Enhanced filtering and segmentation let you break your data down in whatever way makes the most sense for your organisation, whether that's on a team, department, location or individual level.
This makes it simple to spot trends, investigate risk hotspots and target training where it will have the greatest effect. Rather than a one size fits all view, you get reporting that is tailored to the questions you actually need to answer.
Share insight easily with executive ready reporting
Insight only creates value when it reaches the right people and our improved reporting export options let you choose your preferred data view and schedule the send of automated reports straight to yours or your board’s inboxes, so the right information reaches the right stakeholders without any manual effort.
For senior leaders, executive summary dashboards present a clear, board ready picture of human cyber risk. That helps you get buy-in across the business and showcase the value of your programme to the people who fund it. It also saves your team hours of manual work normally lost through extracting and reformatting data before every meeting.
Everything in one place, including dark web monitoring
Fragmented reporting slows everyone down, so our new suite brings your Boxphish data together in a single place, with a modern interface that matches the rest of the portal and makes navigation simple.
For Enhanced customers, that unified view now includes dark web monitoring data, so breach mentions, leaked credentials and the number of emails exposed all sit alongside your training and simulation insights. It gives you a complete view of human cyber risk, without the tab switching.
Reporting that supports your whole security culture
Strong reporting is not only about measurement, but also about helping people across your organisation understand the risks they’re exposed to and take action against them when they land.
Clear, contextual reporting helps IT and security teams focus their effort, helps leaders see where the organisation stands and helps everyone track progress as your security culture strengthens over time. When people can see that their actions make a difference, awareness becomes part of how your teams work, rather than a box to tick.
Throughout, the focus stays on enabling your people with better insights which bring targeted support, so you can help employees improve, rather than simply telling them where they went wrong.
What's included
All customers on Essentials and Enhanced benefit from:
- A completely redesigned interface that makes navigation and data simple to work with.
- New action-based insights; including risk scores, score drivers, trends and league tables.
Enhanced customers also unlock:
- Industry benchmarking to see how you compare with similar organisations.
- Additional course and simulation widgets; including repeat clickers, time to click, clicks by device and course lag.
- Dark web monitoring data inside the platform; including breach mentions, leaked credentials and emails exposed.
- Advanced export options with scheduled reports delivered straight to yours or your board’s inboxes.
How to get started
If you are an existing customer, get in touch with your customer success manager, or email us to switch on the new suite or to talk through an upgrade to Enhanced. If you are new to Boxphish and want to see how measurable, actionable reporting can help you reduce human cyber risk, we would love to walk you through it.
