Research

Peer-reviewed studies from the Praxis team on how people actually behave in security — and how to measure it.

We build on published, peer-reviewed research, not assertion. Each study here is open to read in full.

• A large share of phishing risk is organizational, not individual

  A field study of 83,269 employees across 510 organizations, combining a survey of security-related norms with employees' real responses to phishing campaigns.