1. A computer-implemented method for protecting confidential information based upon user security awareness, the method comprising: in response to a user accessing a network-connected site, determining a measure of security awareness of the user; and granting or denying the user access to at least one feature of the site based upon the measure of security awareness.