We are on the whole, wired to be nice people. I have a real problem with this and so should you. When we attack computer systems we remain objective. It is after all just mechanical systems and failures requiring logical solutions. When people are attacked however, the psychological dance of fear, compassion and vulnerability that follows often makes the situation worse. This emotion makes us weak. It makes us targets and it prevents us from building defenses. In fact most organisations feel so uncomfortable with human security that they don’t test it at all - hiding behind horrific security awareness e-learning modules and blind hope. What if we could continuously monitor and test our human security risk? What if we could bring human security closer to technical and systems security? It’s time for you to meet AVA, a brand new prototype human network vulnerability assessment tool. AVA is designed to be a new way of continuously visualising and vulnerability assessing networks of connected people. By exposing these networks to risk, AVA is able to identify the human vulnerability points in these environments and assess the likely human consequence of attack. But what is the cost of this dehumanisation? Should we be assessing human risk in a mechanical way? Is this progress or the slippery slope to a dystopian nightmare? Are we ready to harden up and remove emotion from the equation? I hope so. The offensive world has been playing this game for years and we have a lot of catching up to do.