Net promoter score (NPS) is a simple sentiment metric based on one question: how likely are people to recommend a company to others? It is usually reported as a score derived from survey responses, and it is often used for customers, but many organizations also adapt it for employees.
In cyber security, NPS is not a control or detection tool, but it can be a useful signal. Strong trust and positive sentiment often make security programs easier to adopt, while low scores can point to poor communication, weak culture, or frustration with security policies. After a breach, NPS may drop because people feel the company handled data badly or failed to explain what happened. Defenders use the metric alongside phishing-report rates, training completion, and support feedback to judge whether security changes are being accepted or are creating resistance.