The main dashboard gives you a snapshot of your organization's security risk: where you stand today, how it is changing, which groups need attention first, and which parts of your program are covered.
1 – Objectives
See your organization's risk level at a glance
Track how your score changes over time
Spot the groups and behaviors that need action first
Check which parts of your program (training, phishing, smishing, vishing) are covered
2 – Prerequisites
An active Arsen account with the initial configuration completed
Employees registered and at least one completed campaign to populate the data. Employees who have never been tested have an unknown risk.
3 – Understand your risk level
3.1 – Read the header
The header shows your organization's risk level, from Very high to Very low, with your current score on the gauge.
It estimates how many people would take the bait, and how many would give the attacker what they wanted, if you were targeted today. It also tells you how you compare with the median for companies your size.
3.2 – Follow the Risk overview
The Organization view plots your score over time. Choose 3m, 6m or 1y, and check the trend label (for example "Improving").
The Groups view shows each group as a tile with its score and number of people.
3.3 – Know how the score is calculated
The score is based 60% on simulations (phishing, smishing and vishing) and 40% on training. To learn more, see the Security Score calculation article.
4 – Act on recommendations and insights
4.1 – Recommended actions
This card suggests the next actions to take. When there are none, it shows "No recommendations right now": check back as your results change.
4.2 – Arsen Insights
These cards highlight notable findings, such as the employees who fell for two or more simulations, or the techniques you have never tested (QR codes, ClickFix, malicious files, voice calls).
5 – Compare your groups
The Groups compared with the company chart plots each group as a bubble. Its height is the group's score compared with the company score (dotted line), and its position along the bottom is the number of people tested.
Act first lists the groups that need attention
Leading highlights the best-scoring group
6 – Check who has been tested
The Population observed card shows the share of employees tested at least once and how that population has grown. An employee who has never been tested has an unknown risk.
7 – Review endpoint exposure
The Endpoint overview card has three tabs:
Browsers and Systems: the versions seen during simulation visits, their status on the visit day (Outdated or Unsupported) and the number of visits. Systems that do not report their version, such as Windows 10 or 11, are counted separately.
Devices: the share of desktop, phone and tablet visits, and any unsupported versions per device type.
Only email simulations are counted: SMS clicks are not included yet.
8 – Check your coverage
The Training and coverage card shows the percentage of employees in awareness training, and whether phishing, smishing and vishing are Covered or Not covered. For a channel that is not covered, click Start a campaign.
