Question 1

How is the Phishing Resistance Score calculated?

Accepted Answer

The score is calculated across 12 weighted security controls including MFA coverage, email gateway deployment, DMARC policy strength, SPF/DKIM alignment, security awareness training cadence, phishing simulation frequency, one-click reporting capability, SOC triage of reports, privileged account separation, and conditional access policies. Weights are based on Verizon DBIR 2024 and IBM Cost of a Data Breach 2024 breach pattern analysis.

Question 2

What do the band labels mean?

Accepted Answer

Phishing-Resistant (85-100): Strong controls, attackers move to easier targets. Defensible (65-84): Meaningful controls with gaps. High Risk (40-64): Multiple critical gaps. Critical Exposure (0-39): Severe gaps across the board — assume compromise already.

Question 3

How accurate is the estimated breach cost exposure?

Accepted Answer

The estimate uses IBM Cost of a Data Breach 2024 industry-specific cost figures, scaled by your security posture score. The model reflects that organizations with poor phishing controls are more likely to experience a breach and have longer dwell times, increasing total cost.

Question 4

Is the assessment free?

Accepted Answer

The self-assessment tool is completely free and generates your score immediately. After seeing your score, you can enter your email to receive a detailed 8-page remediation PDF with a prioritized roadmap and CoreRecon pricing. Your contact info is never sold or shared.

Question 5

Who should use this tool?

Accepted Answer

Security managers, IT directors, CISOs, and business owners at organizations of any size. Phishing is the #1 attack vector across all industries — healthcare, legal, financial, defense, and municipalities are particularly targeted and should run this assessment regularly.

PHISHING RESISTANCE
SCORE

Report sent!

PHISHING RESISTANCESCORE

Report sent!

PHISHING RESISTANCE
SCORE