Last November, we shared Amplifier’s view of Human Risk Management (HRM) as a control plane for reducing human risk, a next-generation vision that's more than a surface-level rebrand of security awareness and training (SAT). The control plane model is straightforward: quantify what matters as human risk, engage employees to take action in the moments that matter, and prove outcomes that leadership recognizes as progress. 

Today, we’re expanding the “engage” pillar with two new capabilities that make the "in-the-moment intervention" approach easier to implement and easier to demonstrate proof of impact.

First, we’re introducing AI-powered Security Coaching Tips. They're short, contextual nudges delivered in the flow of work and tied to real user behavior signals.

Second, we’re launching a Compliance Training module, and we’re making it available for free. Why? Baseline compliance is table stakes. We believe that if you or your team has to burn time and budget just to keep the floor from collapsing, you will never have enough energy left to build the transformational program that actually reduces risk.

Alongside both releases, we’ve also expanded the AI Engagement Studio in Amplifier so teams can customize training engagements with the same flexibility as our mitigation engagements. This reflects our philosophy: adjusting tone, cadence, escalation, and message variants should not require a full rebuild of a fragile set of manual workflows.

Here’s how these new capabilities fit into Amplifier's visionary approach to HRM.

Quantify: make human risk prioritization credible and actionable

Security awareness programs often fail to progress, not due to a lack of concern from security teams, but because justifying their priority is challenging.

Amplifier is built so our quantification of human risk remains transparent and configurable, because human risk is rarely a single data point. It’s the intersection of signals across your workforce security stack: what people do, what they have access to, and what is true about the devices and applications they use.

When prioritization is credible, engagement becomes focused. When engagement is focused, proof becomes possible.

Engage: move from “assign training” to durable behavior change

Engagement is where HRM becomes real.

Assigning training is administration. Real engagement is what happens when an employee encounters a risky moment in their normal workflow and gets clear, timely guidance they can act on.

Amplifier’s engagement model follows a simple loop: Train, Coach, Mitigate.

Training establishes the baseline. Coaching builds habits. Mitigation closes specific exposure windows when risk is detected.

This launch expands the first two legs of that loop, Train and Coach, while keeping Mitigate as the mechanism that closes the last mile.

Compliance Training: baseline compliance, simplified and audit-ready

Every security program needs a compliance floor. Annual or periodic training is part of the job. The problem is that compliance work tends to become a treadmill. Teams spend cycles assigning modules, tracking completions, exporting reports for audits, and sending waves of reminders that feel disconnected from the work employees are trying to do.

Compliance Training in Amplifier is built to make that baseline straightforward.

You can assign training by role, group, risk level, or policy requirement. You can track completion and overdue status in a way that stays clean enough for audit readiness. And you can automate reminders and escalations without turning the program into a monthly chasing exercise.

Compliance Training is also free.

We made that decision intentionally. Our mission is to go beyond training. If your budget and attention are consumed by making sure that training was completed, you have less room to invest in what actually reduces risk: coaching people in the moment, closing last-mile actions, and measuring outcomes that go beyond participation.

After all, compliance training is not the destination. It is the foundation that human risk management is built upon.

AI-powered Security Coaching Tips: micro-guidance that builds better habits

Most human risk shows up in routine decisions: postponing a restart, ignoring a prompt, reusing a workaround, granting access quickly to keep work moving, or adopting a new app before anyone has a chance to evaluate it. The problem is not that employees are incapable of learning. The problem is that the learning moment and the risk moment rarely happen at the same time.

Security Tips are built to close the awareness-to-action timing gap.

A Security Tip is a just-in-time, hyper-personalized micro-training message delivered directly to an employee based on the analysis of risk signals Amplifier is already receiving from your security stack. Instead of guessing what someone might need to remember from a course they took months ago, Amplifier engages them with a small piece of guidance that is relevant to what is happening right now. 

Security Tips shape real-time behavior by providing actionable coaching in a handful of focused training themes that most organizations recognize as recurring sources of exposure: phishing, passwords and credentials, device security, data and privacy, and safe AI usage. 

There is also an operational advantage here that matters. Because Security Tips are derived from the signals Amplifier is already ingesting, they can deliver value quickly without requiring you to design and configure a complex set of custom engagement workflows just to get started. You choose which themes you want to run with, and you deliver tips through the notification channels employees already live in, like Slack or Microsoft Teams. The experience feels lightweight to the employee, and it feels low-friction to the program owner.

A program that relies exclusively on completion rates may look healthy on paper. A program that consistently coaches employees in the flow of work becomes a system that steadily shifts behavior, without asking people to absorb everything once a year and remember it forever.

Mitigate: close the last mile loop with action when risk is detected

Coaching builds habits, but some exposures cannot wait for habits to form.

When risk is detected, teams need a way to close the last mile without turning every issue into a manual follow-up campaign. A delayed vulnerability patch, a tooling coverage gap, an overexposed file with sensitive information, a risky configuration, or any behavior that opens an exposure window is not the kind of problem you want sitting in a queue for weeks, months, or longer.

Mitigation engagements guide employees through the action that reduces exposure, validate completion through signals, and escalate appropriately when follow-through stalls.

Train creates a baseline. Coach builds the habit. Mitigate closes the gap.

AI Engagement Studio: customize training at scale, without program fatigue

If you have ever tried to operationalize workforce engagement, you already know the hard part is not writing one good message. It is keeping the program calibrated over time.

Different audiences respond to different tones. Some teams need gentle nudges. Others need clear deadlines and firm follow-up. Executives and frontline employees should not receive the same wording. Timing matters. Cadence matters. Escalation matters.

AI Engagement Studio now supports customization for training engagements in addition to mitigation engagements.

Teams can tailor tone and voice, adjust cadence and timing, create message variants by audience, and define escalation logic that fits their culture. The objective is simple: higher participation, less fatigue, and less manual work.

In practice, this means your program can feel human. Helpful when it should be helpful. Firm when it must be firm. Always grounded in how employees actually work.

Prove: demonstrate measurable outcomes and ROI

If the only metrics you can show are “training completed” or “messages sent,” it is hard to defend the human risk management program as a business investment. Amplifier closes the loop to prove the impact of your program and align to business outcomes.

The nuance for this phase is in what you measure. In programs where teams apply the full loop with Amplifier, results look less like awareness metrics and more like operational progress. Organizations have reduced vulnerability remediation time significantly, cut OS version fragmentation, improved training compliance to 98%+, and driven device compliance toward full coverage.

Quantification makes priorities defensible. Moment-of-risk engagement makes action repeatable. Proof of outcomes makes progress visible.

Get started: free compliance training, two ways

If you want to raise the compliance floor immediately, start with Compliance Trainings for free. You can run annual or periodic training by delivering assignments, reminders, and completion tracking through collaboration channels like Slack or Microsoft Teams.

If you already have an LMS, you can download our compliance training modules in SCORM format and load them into the system you use today.

If you are ready to move beyond baseline compliance, Security Tips and AI Engagement Studio (click for interactive demo) are built for the next step. Coaching and mitigation are what turn participation into behavior change, and behavior change into measurable risk reduction.

When you're ready, schedule a demo and we'll guide you through the next steps.