Skip to content

Awareness doesn't stop attacks. Behavior does.

For two decades, security awareness programs have transferred theoretical knowledge — and measurable organizational risk stayed high. With Behavioral Defense Engineering and platform version V3.2, CYBERDISE treats human behavior as an operational part of IT security instead of a compliance checkbox.

A researcher and a practitioner stand in front of a large wall screen full of charts, one holding a printed report mid-discussion
In this article

For years, the global cybersecurity industry has been fighting the right problem with the wrong methods. Traditional security awareness programs have focused on theoretical knowledge transfer for two decades, yet measurable organizational risk remains consistently high. A joint study by CYBERDISE and the Lucerne University of Applied Sciences and Arts (HSLU) scientifically confirms what practice has long shown: more knowledge does not automatically translate into secure behavior when employees are targeted by real, psychologically optimized attacks.

In response to this industry-wide realization, CYBERDISE is driving a fundamental paradigm shift by introducing Behavioral Defense Engineering (BDE). The objective is to stop treating human behavior as a mere theoretical compliance checkbox and instead integrate it as a measurable, operational component of active IT security processes. With the launch of its new platform version, CYBERDISE V3.2, the company provides the technological infrastructure required to improve habits and translate human behavioral signals directly into actionable cyber defense intelligence.

The problem is not knowledge, it is action

Most employees today are aware that phishing emails contain dangerous links. Yet under the pressure of daily business operations, individuals still click on malicious attachments, leak data, or fail to report incidents to IT in a timely manner. The issue in modern cybersecurity is not a lack of knowledge, but a behavioral gap.

Traditional awareness changes knowledge. Behavioral Defense Engineering changes how people act.
Palo StachoFounder, CYBERDISE

In the era of AI-driven social engineering, Stacho explains, theoretical knowledge is no longer enough. Attacks are highly personalized and carried out across multiple channels, and there will always be messages that reach the recipient, bypassing the Security Operations Center (SOC). Organizations must be capable of transforming human signals into real-time security data to maximize collective response speed.

Our research shows employees can become an effective first line of defense, but only if the right tools are deployed at the exact right time.
Dr. Carlo PugnettiResearcher, HSLU

As attackers evolve, Pugnetti adds, responses must stay one step ahead — a system that actively activates human behavior is a necessary addition to the modern security arsenal.

Behavior as an operational security factor

The core of Behavioral Defense Engineering is the continuous measurement and optimization of live behavior in real-world scenarios — moving away from simply checking boxes on training videos or multiple-choice quizzes. Human reactions are thus transformed into an active early warning framework, a Cyber Defense Intelligence System.

From real-time attack to instant immunization

Automated instant campaigns demonstrate how this approach works in practice. If a real phishing email bypasses technical defenses, CYBERDISE immediately converts the attack vector into a safe simulation as soon as the SOC identifies and purges the threat from user mailboxes. The workforce is confronted with a copy of the actual live attack in real time, effectively immunizing them against that specific threat vector.

  1. 01A real attack gets throughA phishing email bypasses the technical defenses and reaches user mailboxes.
  2. 02The SOC identifies and purges itThe Security Operations Center recognizes the threat and removes it from the mailboxes it reached.
  3. 03The attack vector becomes a simulationCYBERDISE immediately converts the same attack vector into a safe simulation.
  4. 04The workforce is immunizedEmployees meet a copy of the actual live attack in real time — immunized against that specific threat vector.

What version 3.2 adds

Version 3.2 of the CYBERDISE Suite validates this strategic approach through a series of additional, coordinated tools.

Multi-Channel Attack SimulationsEvaluation of real-world responses to phishing, smishing, vishing, quishing, and Microsoft Teams threats.
Educational Vulnerability ProfilesAI-powered OSINT analyzes publicly available employee data to execute automated, highly personalized attack simulations in real time.
SOC Infrastructure IntegrationAutomated workflows drastically reduce the time elapsed from a reported signal to active IT security incident response.

About CYBERDISE

Cyberdise AG is a pioneer in Behavioral Defense Engineering. Founded in 2023 and headquartered in Zug, Switzerland, the company combines behavioral science insights with an AI-powered suite for incident reporting, attack simulation, rapid incident response, and traditional training.

500,000+licensed users for whom CYBERDISE actively prevents complex social engineering threats today

Source: Cyberdise press release, June 2026

What is Behavioral Defense Engineering?
An approach that treats human behavior not as a theoretical compliance checkbox but as a measurable, operational component of active IT security processes. Its core is the continuous measurement and optimization of live behavior in real-world scenarios, so that human reactions become an active early warning framework instead of a training record.
How does an instant campaign work?
When a real phishing email bypasses the technical defenses, the SOC identifies and purges the threat from user mailboxes — and CYBERDISE immediately converts that same attack vector into a safe simulation. The workforce meets a copy of the live attack in real time and is immunized against that specific threat vector.
What does the CYBERDISE and HSLU study show?
It scientifically confirms what practice has long shown: more knowledge does not automatically translate into secure behavior when employees are targeted by real, psychologically optimized attacks.

See what your people actually do under attack.

Book a DemoDownload

Sources

  1. A Paradigm Shift in Cybersecurity: CYBERDISE Establishes Behavioral Defense Engineering to Combat AI-Driven ThreatsCyberdise AG
  2. Joint CYBERDISE and HSLU study cited in the press release — title and date to followCYBERDISE / HSLU

Written by

Palo Stacho

Founder and Managing Director

Founder and Managing Director of Cyberdise AG in Zug, Switzerland. He writes about the state of the awareness industry and why behavior, not knowledge, decides whether an attack succeeds.