What is User Risk
User Risk helps you manage the human risk in your organization by combining data with real, actionable insights that help you develop and enforce policy, while providing real-time behavioral nudges for users to build secure habits across your workforce.
User Risk gives you
- Visibility and insight. Via an integration with your employee directory and a dedicated browser extension, User Risk gives you insights into your team’s app usage, Shadow IT and identity breaches.
- The ability to create and enforce policy. Set default, base, and custom rules for application usage. These rules carry through to the users real-time browser experience, transforming your security policies from a document into a consistently and measurably enforced program.
The browser extension provides users with real time cybersecurity insights into the pages they’re visiting, and, depending on settings, can help them understand how their behavior impacts their security score, and track trends over time.
How User Risk works
User Risk gathers information in two ways:
- By connecting with your company directory: this tells User Risk where your employees are using their company credentials to log into an application via SSO. For Microsoft customers, apps that users have consented to via Microsoft Entra (OAuth consent) appear in the Applications list.
- Via a browser extension: the extension tells you what apps and sites people are using (regardless of logins or credential usage). More on the extension’s usage tracking criteria.
Value
- Workforce risk visibility: Get a clear view of each employee's risk posture.
- Automated governance: Proactively enforce SaaS and AI policies.
- Behavioral coaching for your team: Drive secure habits with in-workflow coaching.
- Safer browsing experiences: Protect sensitive data and reduce credential risk across your workforce's web activity.
Navigate User Risk
Navigate User Risk from within UpGuard.
- Executive Summary. High-level insights pulling in data from across User Risk. You'll see how many users are in the platform, their risk ratings, the number of SaaS and shadow AI apps identified, and more.
- Risk Profile. All risks identified via User Risk (e.g. identity breach risks, SaaS usage risks, Shadow AI risks), their severity, date of detection, and number of affected users.
- Workflows. Contains Remediation (risks currently in remediation) and Risk Waivers (risks that have been waived).
- Users. A user-centric view focused on team members, their security rating, and their app usage.
- Identity Breaches. Detected breaches associated with your team.
- Applications. The apps and sites detected across your workforce — explore apps and manage usage policies from here.
- Permissions. A catalog of all permissions which users have granted applications. Explore permissions and assess whether they are appropriate for your organization.