July’s updates help partners bring human risk into sharper focus.

This month, we launched the 2026 Human Risk Intelligence Report, released new client-ready training, introduced the Phish Alert Button for Gmail, and added platform improvements to support clearer reporting, faster troubleshooting, and smoother workflows.

Here’s what’s new.

Spotlight: The 2026 Human Risk Intelligence Report

Human risk is now one of the most important areas of cybersecurity, yet many organisations still struggle to see where that risk sits, how it changes, and what to prioritise next.

The 2026 Human Risk Intelligence Report explores why the human layer needs to move beyond awareness activity alone, and how organisations can start measuring, reducing, and reporting on the risk users represent.

For partners, the report creates a useful conversation starter with clients who need to better understand the connection between user behaviour, exposure, compliance, and measurable risk reduction.

Read the report
Download the PDF

MSP Enablement: 7 Ways MSPs Must Secure Clients

Human risk is not solved by technology alone. MSPs need a practical way to help clients reduce risky behaviour, build stronger security habits, and prove progress over time.

In this guest webinar with Start Grow Manage, Nihil Morjaria joins Heather Mathis to share seven practical ways MSPs can secure their clients and reduce human cyber risk.

The session covers:

• Why human risk is one of the biggest cybersecurity gaps
• How to move beyond annual security awareness training
• How to use phishing simulations as a learning tool
• How to build a security-aware culture across clients
• How to turn users into an early warning system
• How to align with frameworks such as ISO 27001, SOC 2, and CIS Controls
• How to prove and communicate risk reduction

For MSPs, the webinar gives a clear framework for shifting client conversations from tools and checkboxes to people, behaviour, culture, and measurable security outcomes.

Watch the webinar.

Customer Spotlight: Why This MSP Dreaded Monday Mornings

The right platform should not add more admin to an MSP’s week. It should give time back.

Brenden Salter, Business Systems Manager at Northern Computer Inc, spent years trying to find a security awareness training platform that worked for his MSP.

After testing five different vendors, including Phishing Tackle, Phin Security, Hook Security, and Huntress, Northern Computer moved to usecure.

The results were significant:

• Client onboarding reduced from 90 minutes to 10 minutes
• Monthly admin reduced from three hours to near zero
• More than 36 hours saved each year
• Platform management handed off entirely to the NOC team
• Clients seeing reductions in cyber insurance premiums

In the video, Brenden explains what the old process looked like, why it was burning his team out, which platforms they evaluated, and what changed after switching to usecure.

Watch the video.

New Training Content: Passkeys, Physical Security, and Clear Desk Policy

This month’s new training content helps users understand the practical security risks they face across account access, physical security, and everyday workplace behaviour.

Passkeys

Passkeys are rapidly replacing traditional passwords as a more secure and convenient way to access online accounts.

Our new Passkeys course helps users understand how passkeys work, why they are resistant to phishing and credential theft, and what risks still exist around devices, syncing, and account recovery.

The course also covers best practices for using passkeys securely, helping organisations prepare users for a future where passwordless authentication becomes more common.

Liam Learns the Clear Desk Policy

We have released a new animated course, Liam Learns the Clear Desk Policy.

This course uses a new animation format designed to support faster production and reusable animation for future content releases. New instalments in this format are planned every other month, alongside projects using the original character designs.

Dubbings for the Clear Desk Policy animation have also been released in all dubbed languages.

Pam’s Physical Security

Pam’s Physical Security is a new animated course focused on practical physical security risks.

Using the same illustrative style as the AI phishing course, this release takes a more narration-led approach to help users understand how physical security decisions can affect organisational risk.

Watch the course

Explore the latest courses in the Course Library

More Localised and Multilingual Training

We have also expanded translation and localisation support to help partners deliver more relevant training across different customer environments.

Safe Use of AI Tools: Claude

Safe Use of AI Tools: Claude is now available in:

• Dutch
• French
• German
• Indonesian
• Spanish
• Swedish

Safe Use of AI Tools: DeepSeek

Safe Use of AI Tools: DeepSeek is now available in:

• Dutch
• French
• German
• Spanish
• Swedish
• Indonesian

Phishing Incremental Inline Training

All three parts of Phishing Incremental Inline Training are now available in Italian.

Chinese Text-Based Course Versions

We have released text-based versions of the following courses in Chinese due to Cloudflare restrictions in China:

• Quishing
• Deepfakes
• LLM: Hallucinations
• LLM: Data Exposure
• AI-Driven Spear Phishing
• MFA Fatigue

Auto-Enrol Video Updates

All remaining Synthesia videos in Swedish and Dutch Auto-Enrol have now been replaced with Doodly videos.

These updates help partners deliver more consistent, accessible, and regionally relevant training experiences across client bases.

Auto-Enrol Updates

The following courses have been added to this month’s Auto-Enrol updates:

• Secure Internet Use
• Secure Passwords and Authentication
• Secure VPN Use

These updates help keep automated training programmes aligned with core security behaviours, including safer browsing, stronger authentication, and secure remote access.

Explore the latest courses in the Course Library

Platform Spotlight: Phish Alert Button for Gmail

The Phish Alert Button for Gmail is now live.

The Phish Alert Button enables Gmail users to report suspicious emails directly from their inbox, helping organisations identify and respond to phishing threats more quickly.

For Gmail users, this means:

• Suspicious emails can be reported in just three clicks directly from Gmail
• Reported emails can be submitted for analysis based on configuration
• Users receive instant feedback when they successfully identify a simulated phishing email
• Security teams gain greater visibility into potential phishing threats and reporting activity

For partners, this adds another practical way to help clients turn users into an early warning system and strengthen phishing response across Google Workspace environments.

Learn more about Phish Alert Button for Gmail
Set up PAB for Gmail

Platform Improvements

This month’s platform updates focus on clearer reporting, faster troubleshooting, and smoother workflows across customer and partner environments.

User Exposure Report

A new User Exposure Report is now available in Report Hub and can be downloaded as a PDF.

This gives teams an easier way to review user-level exposure and support more focused reporting conversations around where risk sits across an organisation.

Faster uBreach Pro Reporting

We have improved the loading time of the uBreach Pro Breach Report to reduce slow responses and request timeouts.

This helps partners and customers access breach exposure insights more reliably.

User Diagnostic Tool

A new User Diagnostic Tool is now available in Microsoft 365 and Google Workspace settings.

The tool helps clients diagnose why users may be missing from sync. Clients can enter a missing user’s User Principal Name for Microsoft or Primary Email for Google, then see whether the user is included in sync and which criteria they did or did not meet.

This helps clients resolve common Microsoft Entra or Google Workspace sync issues more quickly, spot patterns across their user base, and self-serve troubleshooting without always needing support assistance.

Improved Content Access Controls

The Company Access field in the Course, Email Template, Landing Page, and Policy Template Builders has been updated from a dropdown to an autocomplete field.

This improves load times and makes it easier to limit access to content items for specific tenants, especially for teams managing content across larger client bases.

Also Improved

We have also expanded the public API with additional company settings and a new simulationPerformance query, giving technical partners and teams more complete data access for reporting, automation, and platform management.

July Wrapped

July gives partners new insight, stronger client conversation starters, fresh training content, and clearer platform visibility.

With the 2026 Human Risk Intelligence Report, practical MSP enablement, new courses, Gmail phishing reporting, and improved reporting workflows, partners have more ways to help clients understand, reduce, and prove progress against human risk.

Explore the latest updates in usecure