Customer communication security vulnerabilities are resolved. A usage history is obtained for a user device including communications involving the user device. Pattern recognition is applied to the usage history. The user device is assigned with a risk classification from a predetermined set of possible risk classifications, based on the pattern recognition. A vulnerability on the user device is remedied when the risk classification exceeds a predetermined threshold.