An organization's security data is compared to an aggregation of multiple organizations' security data. Security data is received from multiple organizations having organizational characteristics. The received security data is aggregated based on the organizational characteristics to generate sets of aggregate data associated with the organizational characteristics. A query is received from an organization of the multiple organizations. The query specifies a particular organizational characteristic. A set of aggregate data associated with the specified organizational characteristic is identified. A representation of the organization's security data in relation to the identified set of aggregate data is generated. The representation is transmitted to the organization in response to the query.