Security teams at
Named Leader in the Forrester Wave™: Human Risk Management Solutions, Q3 2024.
What Livvy does
Four moves. The last one is yours.
Livvy does the reading, the joining and the drafting. Your team keeps the decision.
-
Read.
Livvy reads the signals from your security tools and joins them to one person.
4 signals · 2 sources
-
Find.
It finds where risk is building: the cohorts people share and the sequences they're moving through.
1 cohort · 1 sequence
-
Propose.
It proposes the next move and cites the evidence behind it, signal by signal.
3 actions · 4 citations
-
Approve.
Your team approves it, or edits it first. Approvals stay with your team.
Your decision
Try Livvy
Ask Livvy about Northwind Logistics.
Start with the accounts payable lead in Finance. Priority: High.
Next move
- Step-up MFAControl
- Credential resetControl
- 90‑second coaching nudgeNudge
Show the evidence
Start with the accounts payable lead in Finance. Priority: High. They were targeted by real phishing source 1 and clicked the link source 2. They hold an admin role source 3, and phishing-resistant MFA isn't enrolled source 4. That puts them in a cohort of 31 people, up from 29 last week, and four steps into Phish to takeover.
Cited signals
- source 1Targeted by real phishingEmail security09:12
- source 2Clicks links in real phishingEmail security09:14
- source 3Holds admin or privileged rolesIdentity provider & MFAStanding
- source 4Phishing-resistant MFA not enrolledIdentity provider & MFAStanding
Cohort
Real-phish clicker with privileged access
31 people · 29 last week
Sequence
Phish to takeover
14 people · 11 last week
- Targeted
- Clicked
- Admin role
- Weak MFA
- Takeover
Waiting for your approval. Approvals stay with your team.
Threat, access and behavior line up in one person. Priority: High.
Next move
- Step-up MFAControl
- Credential resetControl
- 90‑second coaching nudgeNudge
Show the evidence
Because threat, access and behavior line up in one person. Real phishing reached them source 1, they clicked source 2, and they hold an admin role source 3. The control that would slow a takeover, phishing-resistant MFA, isn't enrolled source 4.
Threat
what reaches them
source 1Targeted by real phishing
Behavior
what they do
source 2Clicks links in real phishing
Access
what they could expose
source 3Holds admin or privileged roles
Waiting for your approval. Approvals stay with your team.
14 people are on this path. The accounts payable lead is furthest along.
Next move, before step 5
- Step-up MFAControl
- Credential resetControl
- 90‑second coaching nudgeNudge
Show the evidence
14 people are on this path this week, up from 11 last week. The accounts payable lead is furthest along: four of five steps seen. The last step leads to credential abuse and account takeover.
Phish to takeover
14 people · 11 last week
01
Targeted
Targeted by real phishing
02
Clicked
Clicks links in real phishing
03
Admin role
Holds admin or privileged roles
04
Weak MFA
Phishing-resistant MFA not enrolled
05
Takeover
Credential abuse & account takeover
Waiting for your approval. Approvals stay with your team.
More people are reporting: Human sensor grew to 212 people.
First win
- Thank-you nudgeNudge
Show the evidence
More people are reporting. The Human sensor cohort grew to 212 people, from 204 last week. Silent repeat clicker fell to 47, from 49. A quick win, an Easy playbook: thank the people who report threats.
Waiting for your approval. Approvals stay with your team.
Guardrails
Livvy proposes. Your team decides.
- Approvals stay with your team.
- Livvy proposes training, nudges and controls such as step-up MFA. Your team approves or edits each one before it runs.
- Evidence for every recommendation.
- Each one cites the signals, their sources, the cohort and the sequence behind it, so anyone can check the reasoning.
- Facts you can verify.
- Priority reads as a word, High or Critical, next to the facts that set it.
- Your data.
- Livvy runs in the US or the EU, with PII and prompt-injection detection built in, and your team can turn every AI feature off at once.
Livvy's proposal
Actions · your team can edit
Why Livvy proposed this
- 1Targeted by real phishingEmail security
- 2Clicks links in real phishingEmail security
- 3Holds admin or privileged rolesIdentity provider & MFA
- 4Phishing-resistant MFA not enrolledIdentity provider & MFA
Waiting for your approval. Approvals stay with your team.
Livvy and the platform
The engine behind the Living Security Platform.
The platform connects the signals and runs the responses. Livvy is the intelligence in between.
Connect
- Email security
- Identity provider & MFA
- The tools you already use
Hundreds of human risk signals
Act, with approval
- Training
- Nudges
- Controls, such as step-up MFA
Approvals stay with your team.
See where risk is building in your workforce, act before it escalates, and prove the program is working.
Explore the platformThe signals, cohorts and sequences Livvy cites come from the Human Risk Management Framework, an open framework published under CC BY 4.0.
Explore the framework
