Risk detection is automated screening that looks for warning signs before harm occurs. In cyber security, it evaluates signals such as message content, sender reputation, login behavior, device changes, or account activity to decide whether a request, session, or transaction looks suspicious.
It matters because many attacks succeed through deception rather than malware. Phishing, impersonation, and fraudulent payment requests often rely on a user trusting something that seems normal. Risk detection can interrupt that moment by warning, requiring extra verification, or blocking the action. Defenders use it in email filters, fraud engines, and mobile security features. The main challenge is balance: weak detection misses threats, while aggressive detection creates false positives that users may ignore.