In a world where threats evolve in seconds, measuring cybersecurity effectiveness requires more than counting incidents — it requires understanding how fast and how autonomously an organization can neutralize them.
The Automated Resilience Index (ARI) introduces a new paradigm for assessing cybersecurity readiness. Developed by Gianclaudio Moresi and creator of the Cyber Risk Evaluator (CRE) platform, ARI quantifies the speed, efficiency, and automation level of a company’s response to phishing and identity-based attacks.
Unlike traditional awareness or detection metrics, ARI focuses on systemic strength, not human weakness. It evaluates how effectively AI, automation, and people collaborate to contain threats before they escalate. Every second counts — and every automated containment action improves the overall score.
Formula for the Automatic Resilience Index:
The ARI is expressed on a 0–10 scale, where 10 represents instant, fully automated containment within 0 seconds. It combines key performance indicators such as:
- Containment Success Rate (CSR): the percentage of threats neutralized before reaching users.
- Autonomous Containment Efficiency (ACE): the share of mitigation handled automatically by AI or SOAR systems or Human.
- Mean Time to Neutralization (MTTN): the average time, in seconds, between detection and complete elimination of a threat.
Where:
| Variable | Meaning |
|---|---|
| CSR | Containment Success Rate — % of threats neutralized before reaching users |
| ACE | Autonomous Containment Efficiency — % of mitigation handled automatically by AI/SOAR |
| MTTN | Mean Time To Neutralization (seconds) — average time between detection and elimination |
| 2π | Calibration constant ensuring interpretability (~10-point scale) |
| c=4.25 | A normalization factor that ensures the ARI function remains stable and bounded, preventing division by zero and aligning the resilience curve with typical MTTN distributions observed in operational environments |
The result is capped between 0 and 10, where 10 represents instant, fully automated containment.
The curve illustrates the reverse engineering of the CTR generated by phishing attacks. The ARI (Automated Resilience Index) reaches a score of 10 when automation is fully optimized and the residual risk is reduced to zero — meaning AI systems can automatically detect and remediate all types of attacks.
An ARI score of 5 corresponds to a CSR (Containement Success Rate) and ACE (Automated Containment Efficiency) value of 0.95, with a MTTN (Mean Time to Neutralize) of 10 seconds. This reflects a situation where the first phishing clicks occur within 5 seconds, followed by multiple clicks within 10 seconds.
The curve illustrates the reverse engineering of the CTR generated by phishing attacks. The ARI (Automated Resilience Index) reaches a score of 10 when automation is fully optimized and the residual risk is reduced to zero — meaning AI systems can automatically detect and remediate all types of attacks.
An ARI score of 5 corresponds to a CSR (Click Simulation Resilience) and ACE (Autonomous Containement Efficiency) value of 0.95, with a MTTN (Mean Time to Neutralize) of 10 seconds. This reflects a situation where the first phishing clicks occur within 5 seconds, followed by multiple clicks within 10 seconds.
) and ACE (Automated Containment Efficiency) value of 0.95, with a MTTN (Mean Time to Neutralize) of 10 seconds. This reflects a situation where the first phishing clicks occur within 5 seconds, followed by multiple clicks within 10 seconds.
Whitepaper Download:
Online Calculator
https://www.cyberriskevaluator.com/automated-resilience-index-calculator.html
This model shifts cybersecurity measurement from reactive to proactive — from counting clicks to measuring resilience. It provides executives and SOC leaders with a clear, quantitative indicator of how mature and self-defending their digital ecosystem truly is.
In the AI-human alliance, resilience is not about avoiding mistakes — it’s about how quickly systems recover, adapt, and protect. The Automated Resilience Index captures that reality and sets a new benchmark for organizations striving to build a secure, intelligent, and autonomous defense posture.