HumanRisk ShieldDocs

Get started

How HumanRisk Shield fits together

The products, where each one lives, what they share, and which guide to read for each.

PublicUpdated October 6, 2026

HumanRisk Shield measures how people actually behave with security risk, coaches them when it matters, and shows the evidence that things improved. It is one platform with a few products around it, and HRS Learn is the base the others connect to.

The products

Product What it does Where you use it Status
HRS Learn Training, policies, people, reporting and ShieldScore. The home base for admins and employees. learn.humanriskshield.com Live
HRS Simulation Practice phishing: you build campaigns in HRS Learn and the simulation engine sends them and records the results. Inside HRS Learn, under Phishing Live
HRS Triage Turns emails people report into decided, contained cases for an analyst or MSP. Its own console Add-on, beta
HRS Exposure Shows what attackers can already learn about your people and domains from outside. exposure.humanriskshield.com, opened from HRS Learn Add-on, beta

Two capabilities run across them:

  • ShieldScore is a 0 to 100 risk score for each person, where higher means riskier, and the average for your organization. See ShieldScore.
  • Ask HRS AI is the help button on every page. It answers with the same permissions as the person asking, so an employee only ever gets answers about their own learning.

How information flows

  1. People come in from your directory: Microsoft 365, Google Workspace, SCIM, or a CSV file.
  2. Things happen to them. They complete training, acknowledge policies, receive practice phishing, report suspicious email, and turn up in exposure findings.
  3. Each event becomes a signal on that person's ShieldScore. Reporting counts in their favor; clicking, overdue training and exposed accounts count against them.
  4. Scores roll up to departments and to the organization, refreshed overnight.
  5. Reports and exports turn the same data into evidence for leadership, auditors or an insurer.

If you also use HRS Triage, emails people report through the Report Phishing button in Outlook go to Triage as cases, and the verdicts come back as signals. Practice phishing reports are recognized and never become Triage cases.

Who does what

  • Employees sign in to HRS Learn to take training and acknowledge policies, and report suspicious email from Outlook. Start with Questions from employees.
  • Organization admins run the program in HRS Learn. Start with Your first 30 days.
  • MSPs run many client organizations from the partner console. Start with Get started as an MSP.
  • Security analysts work reported email in HRS Triage. Start with How a reported email becomes a case.

Where to find help

  • This site, for guides. Signed-in customers see more of them under My guides.
  • The status page, to check whether something is down.
  • Contact support when you need a person.
Still stuck?Contact support

Related