Abstract: A risk assessment system assesses risk associated with users based at least in part on online presence of the user. The risk assessment system includes at least one processor and at least one processor-readable storage medium that stores at least one of processor-executable instructions or data. Assessing user risk includes accessing publicly available online data specific to the first user and accessing privately available online data specific to the first user. The privately available online data is only available via authorization granted via the first user. Based at least in part on the accessed publicly and privately available online data for the first user, a respective value is generate specific to the first user for each of at least one subject matter index. The respective value indicates amount of risk associated with the first user based on a respective set of subject matter criteria for each subject matter index.