Product news

WethosAI Launches Human Cyber Range to Find Security Gaps Before Attackers Do

New AI-powered cybersecurity simulation platform tests how people respond to attacker techniques and psychological pressure, helping organizations identify security weaknesses before a real incident.

Human Cyber Range: find security gaps before attackers do. A network of five modeled people, one highlighted path from a MITRE ATT&CK impersonation technique to a service desk lead, flagged “Control bypassed.”

WethosAI, the Human Context Platform, announced the general availability of Human Cyber Range, a new approach to cybersecurity simulation that tests the human decisions behind security controls and incident response.

Traditional cyber ranges test networks, systems, and technical defenses. WethosAI extends simulation to people, modeling how specific employees, executives, and security teams might respond to cyberattacks, social engineering, and high-pressure decisions.

Using behavioral science, AI, and organizational context, Human Cyber Range helps security teams identify potential decision weaknesses, strengthen controls, and test improvements before an incident occurs.

Testing the Human Side of Cybersecurity

Attackers increasingly exploit trust, authority, and urgency. According to Mandiant's M-Trends 2026, voice phishing accounted for 11% of investigated intrusions with an identified entry point, compared with 6% for email phishing.

Recent research from NIST and SANS also highlights the growing importance of human factors in cybersecurity.

Human Cyber Range models specific decision-makers using WethosAI's Observed Twins and Permissioned Twins, then simulates their responses to MITRE ATT&CK-aligned techniques under psychological pressures such as urgency, authority, and trust.

Security teams can examine which modeled participants follow required controls, where procedures may break down, and how different conditions influence decisions.

Three Cybersecurity Applications

Incident Response: Simulate ransomware, breaches, and operational disruptions to examine escalation, containment, communications, and recovery decisions.

Human Controls: Test identity verification, approvals, and policy enforcement against phishing, executive impersonation, social engineering, and fraudulent requests.

Human + AI Security: Explore human oversight, delegated authority, permissions, and security decisions involving AI agents.

Organizations can use existing incident response plans, policies, runbooks, and emerging threats to run simulations on demand.

Findings help security teams prioritize improvements to controls, response procedures, training, and communications. Scenarios can then be rerun to compare modeled outcomes and inform further validation.

Introducing the 30-Day Cyber Pilot

WethosAI is also introducing a managed 30-Day Cyber Pilot, giving organizations a practical way to test a critical security scenario, identify potential human decision weaknesses, and evaluate improvements through repeated simulations.

WethosAI manages the engagement from scenario setup and modeling through findings, recommendations, retesting, and executive reporting.

Explore the 30-Day Cyber Pilot

Availability

Human Cyber Range is generally available through WethosAI's SaaS platform, with enterprise integration options based on organizational requirements.

Explore Human Cyber Range

Security and privacy information is available through the WethosAI Trust Center.

About WethosAI

WethosAI is The Human Context Platform, combining more than four decades of behavioral science research with AI and proprietary behavioral models to simulate how people and teams think, communicate, and make decisions.

Founded by Stuart McClure, cybersecurity pioneer and founder of Cylance and Foundstone, WethosAI supports consequential decision-making across cybersecurity, executive leadership, and business operations.

Headquartered in Irvine, California.

wethos.ai