A risk reduction framework for small business
Your peopleare the perimeter.
Cluzy turns employee data wellness into a measurable cybersecurity control - reducing the personal-data exposure that makes social engineering work.
THE THESIS / 2026
The threat is personal
Attackers do not need to breach your firewall if they can breach your people.
Data brokers package the personal details that make phishing credible: family relationships, addresses, phone numbers, work history, purchases, and habits. Traditional annual training asks employees to resist the result. Cluzy reduces the raw material.
THE CLUZY-ADDRESSABLE SHARE18%
60% human-element risk × 30% broker-data contribution
One system. Three levers.
From exposed data to visible risk reduction.
Make privacy worth acting on.
A self-sovereign data stipend gives employees a concrete reason to build, verify, and maintain a data profile they control.
Up to $250 / employeeDelete with precision.
Cluzy guides employees through a Google Takeout DSAR, includes continuous removal across 300+ brokers through a primary provider, and offers specialist partners for broader coverage.
One action. Three layers.Turn behavior into evidence.
DWS and TSRI convert employee participation into leading indicators that owners, boards, and underwriters can track.
Risk reduction, quantifiedExpected loss reduction
Put a dollar value on less risk.
The model combines attack probability, existential business risk, enterprise value, the addressable human layer and program participation level. It's built to be transparent so you can change the assumptions and see the expected outcome.
Open the calculator01
Annual attack rate × existential risk rate
BASELINE RISK02
Baseline risk × company TSRI
RISK REDUCED03
Enterprise value × risk reduced × addressable share
VALUE PROTECTEDMake the invisible visible