We strengthen security culture in a rapidly changing threat landscape: through penetration tests, awareness training and security strategies.
We are glad to work with a diverse group of exceptional people who enrich our work every day with new inspiration, experience and passion. For operational reasons, however, we have decided not to present our active social engineering pentesters by name on our website.
Human Risk Consulting GmbH was founded in 2015 with the aim of protecting organisations specifically against social engineering. Founder Michael Willer recognised early on that cybersecurity does not fail because of technical measures, but because of human behaviour.
With 16 years of experience in military intelligence with the German Armed Forces, he specialised in human intelligence (HUMINT) and psychological interrogation techniques. In international deployments and in cooperation with special forces he gained in-depth knowledge of protecting sensitive information, of targeted influence and of the mechanisms of social manipulation.
After moving to the private security industry, Michael Willer led a specialised team investigating economic crime. There, too, it became clear: social engineering is one of the most effective methods of modern attackers. Companies lose millions because perpetrators manipulate people, not systems.
Today Human Risk Consulting is an interdisciplinary team of experts with backgrounds in military intelligence, the civilian security industry and the investigation of economic crime. This expertise is united by one goal: to protect organisations of every kind, from public authorities and medium-sized companies to international corporations, effectively against social engineering. With realistic simulations, sound risk analysis and strategic training we strengthen what is often overlooked: people as an integral part of the security architecture.
A first conversation: no obligation, confidential, and as equals. Together we work out where your biggest risks lie.
This pentest was one of the first SE pentests we carried out as a larger team.
In the course of digital transformation the focus is often on endpoints, cloud infrastructure and compliance. Yet one unpredictable element remains: the human voice.
Social engineering is one of the most serious threats in cybersecurity. Attackers exploit psychological mechanisms to build trust and compromise security.
Real cases, concrete attack vectors and insights from our operational work in social engineering and human risk.