Completion is
not proof.
Behaviour is.
A finished module tells you who turned up. It tells you nothing about who would actually pause before clicking, question the call, or report the thing that felt off. Instinct Lab measures the decisions your people make, turns them into one number, and shows you whether it moved.
Engagement leads to awareness. Culture multiplies it. The result is instinct, the only thing that holds up when a real attacker calls. That output is your SII.
Measuring the
wrong thing.
The whole industry counts completions. Modules finished, certificates issued, boxes ticked. None of it answers the only question that matters: would your people actually behave differently under pressure?
Instinct Lab is built around behaviour, not attendance. It reads the decisions people make, in surveys and inside live rehearsals, and resolves them into a single measured estimate of security instinct across your organisation.
One number you can take to the board. The detail underneath it when they ask how you got there. And the same number, measured again later, to prove the rehearsal worked.
Three inputs.
One output.
Instinct is not a thing you train directly. It is what you get when three conditions line up. Get one wrong and the whole result drops, which is exactly how real risk behaves.
What they think.
What they do.
The board and
the floor disagree.
Ask the leadership team how secure the culture is. Then ask the people who live in it every day. The two answers rarely match, and the boardroom is almost always the optimistic one.
Instinct Lab measures both, staff and executives, and puts the distance between them on a single screen. That gap is not a rounding error. It is the difference between the risk you think you're carrying and the risk you actually are.
It's also the most useful slide in the room. Close the gap and everything downstream gets easier: people report sooner, speak up faster, and trust that the right call will be backed.
Measure. Rehearse.
Measure again.
Anyone can show you a score. We show you a score that moved, and prove the rehearsal is what moved it. This is the mechanism the whole company is built on.
Say it. Do it.
See it proven.
One source never tells the truth on its own. Instinct Lab reads three kinds of evidence and layers them into a single score: what your people say, what they actually do, and what we observe around them.
The survey says your people would report a suspicious call. A CTRL+VISH call proves whether they actually do. And observed behaviour, captured around a live engagement, settles it. When all three line up at the same level, you are not guessing any more.
Every experience sharpens your formula, rolling out across 2026. We show you what is live and tell you straight what is coming. We never invent a number.
Five secure behaviours.
The score is not abstract. Underneath it sit five behaviours that decide whether a real incident gets caught or gets through.
Aligned to the
frameworks that matter.
Each of the five behaviours maps to the controls behind the frameworks your auditors and regulators already speak. So a behavioural score becomes language a board understands.
The Rehearsal Log records everything you run, with participation, scores and dates, exportable as a board-pack PDF. Behavioural evidence, generated from what your people actually did.
Instinct Lab indicates behavioural alignment with the referenced frameworks at a control level, reviewed against current published versions. It is not a compliance assessment, audit, or certification, and it does not guarantee any regulatory outcome.
Get your
baseline.
Start with a baseline of where your people's instinct sits today. Then rehearse, and watch the number move. We will walk you through the whole loop.