Security teams at
%20--%3e%3csvg%20version='1.1'%20id='Layer_1'%20xmlns='http://www.w3.org/2000/svg'%20xmlns:xlink='http://www.w3.org/1999/xlink'%20x='0px'%20y='0px'%20viewBox='0%200%20185.6%2073.2'%20style='enable-background:new%200%200%20185.6%2073.2;'%20xml:space='preserve'%3e%3cstyle%20type='text/css'%3e%20.st0{fill:%2300095B;}%20%3c/style%3e%3cg%20id='Ford_Script'%3e%3cpath%20class='st0'%20d='M185.5,22c0.2-0.4,0-0.6-0.5-0.6c-2.4,0-5.5,0-8,0c-0.6,0-0.9,0.1-1.2,0.6c-0.9,1.8-12.1,18.5-14.2,21.8%20c-0.4,0.5-0.8,0.4-0.8-0.1c-0.2-1.9-1.9-4.2-4.5-5.2c-2-0.8-4-1-6-0.7c-3.7,0.5-7,2.4-9.8,4.6c-4.3,3.3-8.1,7.6-12.9,10.7%20c-2.6,1.7-6.3,3.2-8.7,1c-2.2-2-1.9-6.5,1.4-10c0.3-0.4,0.8-0.1,0.7,0.3c-0.3,1.6,0.1,3.1,1.3,4.2c1.5,1.3,3.5,1.5,5.3,0.6%20c2.1-1,3.3-3.1,3.7-5.4c0.6-3.6-2.2-6.7-5.6-6.9c-2.8-0.2-5.5,0.8-8.1,2.9c-1.3,1.1-2,1.9-3.2,3.5c-0.3,0.4-0.7,0.4-0.7-0.1%20c0.1-4.6-1.7-7.1-5.5-7.2c-2.9-0.1-6,1.5-8.5,3.5c-2.7,2.1-5,5-7.5,7.7c-0.3,0.3-0.6,0.3-0.7-0.3c-0.1-3-0.8-5.9-2.2-8%20c-0.5-0.7-1.5-1.1-2.4-0.6c-0.4,0.2-1.8,0.9-2.8,1.7c-0.5,0.4-0.7,1-0.5,1.8c1.3,4.5,1,9.6-0.8,14c-1.7,4-4.9,7.5-8.8,8.8%20c-2.5,0.8-5.2,0.4-6.8-1.8c-2.2-3.1-1.3-8.5,2-12.9c2.9-3.9,7.2-6.4,11.4-8c0.5-0.2,0.6-0.5,0.5-0.9c-0.2-0.7-0.6-1.6-0.7-2.1%20c-0.4-1-1.5-1.2-2.8-1.1c-3.1,0.4-5.9,1.4-8.6,2.9c-7.2,3.8-10.8,11.3-12.4,15.3c-0.8,1.9-1.4,3.1-2.2,4.2c-1.1,1.4-2.6,2.7-5.2,5%20c-0.2,0.2-0.4,0.6-0.2,1c0.3,0.5,1.6,2.5,2,2.6c0.4,0.2,0.9-0.1,1.1-0.2c1.8-1.2,4-3.2,5.1-4.5c0.4-0.4,0.8-0.3,1,0.4%20c1,3.5,3.6,6.4,7.2,7.7c6.6,2.2,13.4-1,18.6-6.6c3.3-3.6,4.5-5.8,5.7-7.4c2.1-2.6,6.3-8.5,11.3-12.3c1.8-1.4,4-2.5,5.1-1.8%20c0.9,0.6,1.2,1.9-0.2,4.4c-5.1,9.3-12.6,20.3-14,22.9c-0.2,0.5,0,0.8,0.4,0.8c2.7,0,5.3,0,7.7,0c0.4,0,0.6-0.2,0.8-0.5%20c3.9-6.1,7.6-12,11.5-18c0.2-0.4,0.4-0.1,0.4,0.1c0.1,1.4,0.4,3.3,1.3,4.6c1.5,2.3,3.6,3.3,6,3.3c1.9,0,2.8-0.3,4.8-1%20c1.6-0.6,3-1.4,4-2.1c0.6-0.4,0.7,0.3,0.7,0.4c-0.9,4.9,0.2,10.6,5,13c5.8,2.8,12.1-1.2,15.8-4.8c0.4-0.3,0.7-0.3,0.8,0.4%20c0.1,1.4,0.7,3,1.8,4.2c3.1,3.1,9.2,1.9,15.5-2.9c4-3.1,8.2-7.4,11.9-12c0.1-0.2,0.2-0.5,0-0.7c-0.6-0.6-1.4-1.3-2-1.8%20c-0.3-0.2-0.6-0.2-0.9,0c-3.9,3.7-7.3,7.9-12.4,11.3c-1.7,1.2-4.4,2.1-5.6,0.5c-0.5-0.6-0.4-1.5,0.1-2.7%20C161.1,59.5,184.3,24.1,185.5,22z%20M154.9,51.7c0.1,0.3,0.4,0.5,0.7,0.7c0.1,0,0.2,0.1,0.1,0.4c-1,2.1-1.9,3.3-3.1,5.2%20c-1.1,1.7-2.4,3-4,4.3c-2.3,1.9-5.6,4-8.3,2.6c-1.2-0.6-1.7-2.3-1.7-3.6c0.1-3.8,1.7-7.7,4.9-11.5c3.8-4.7,8-7.1,10.8-5.8%20c2.9,1.4,1.9,4.7,0.7,7.3C154.8,51.3,154.8,51.5,154.9,51.7z'/%3e%3cpath%20class='st0'%20d='M17.2,71.8C8.6,71.8,1,66.5,0.1,57.2c-0.5-5.1,1-9.7,3.9-13.5c2.6-3.3,6.9-6.1,10.6-6.8%20c1.2-0.2,2.8-0.1,3.5,0.7c1,1.2,0.7,2.5-0.3,3.1c-2.8,1.4-6.2,3.9-7.9,7.2c-1.4,2.7-1.6,6,0.4,9.2c3.5,5.2,13.2,5.4,22.2-3%20c2.2-2,4.2-4,6.2-6.3c4-4.5,5.3-6.2,10.6-13.5c0.1-0.1,0.1-0.2,0.1-0.2c0-0.1-0.1-0.1-0.3-0.1c-3.5,0.1-6.6,1.1-9.6,3.4%20c-0.9,0.6-2.1,0.5-2.6-0.3c-0.6-0.9-0.2-2.1,0.8-2.8c4.8-3.3,10-3.9,15.4-4.8c0,0,0.4,0,0.7-0.4c2.2-2.8,3.9-5.4,6.2-8.2%20c2.4-2.9,5.4-5.5,7.7-7.5c3.2-2.8,5.3-3.7,7.4-4.9c0.6-0.3-0.1-0.6-0.2-0.6C63.1,5.5,50.8,2.6,39,7c-8.1,3-11.7,9.5-10,13.8%20c1.2,3.1,5.2,3.5,9,1.7c3.1-1.5,6-4,8.1-7.2c1.1-1.8,3.6-0.5,2.3,2.6c-3.4,8.1-10,14.5-18,14.8c-6.8,0.2-11.2-4.8-11.2-11%20c0-12.2,13.6-20.2,27.8-21.4c17.2-1.4,33.4,3.1,50.5,5.2c13.1,1.6,25.6,1.6,38.7-1.4c1.5-0.3,2.6,0.6,2.5,2.2%20c-0.1,2.3-1.9,4.4-6.2,6.8c-4.9,2.7-10.1,3.5-15.4,3.6c-13,0.1-25.1-5-37.6-7.7c0,0.5,0.2,1.2-0.3,1.5C72.3,15.7,66,20.9,61.8,28.2%20c-0.1,0.2-0.1,0.3,0.2,0.3c3.6-0.2,6.9-0.3,10.3-0.6c0.6,0,0.6-0.2,0.6-0.6c-0.3-2.5,0.4-5.4,2.6-7.4c2.3-2,5.1-2.3,7-0.8%20c2.1,1.7,1.9,4.7,0.8,6.9c-1.2,2.3-3.1,3.5-5,4.1c0,0-0.4,0.1-0.3,0.4c0.1,0.6,2.6,2,2.9,2.4c0.2,0.4,0.1,0.9-0.3,1.3%20c-0.3,0.3-0.7,0.6-1.2,0.6c-0.4,0-0.7-0.2-1.3-0.5c-1.1-0.6-2.6-1.6-3.6-2.9c-0.3-0.4-0.5-0.4-1.3-0.4c-3.7,0.2-9.4,0.8-13.3,1.2%20c-0.9,0.1-1.1,0.3-1.3,0.6c-6.2,10.2-12.8,21.3-20.1,28.6C30.6,69.6,24.1,71.7,17.2,71.8z%20M76.4,26.3c0.1,0.5,0.3,0.6,0.5,0.6%20c1.2-0.2,2.5-1.2,3.2-2.3c0.7-1,1-2.5,0.3-3.1c-0.6-0.5-1.6-0.4-2.4,0.3C76.6,23.1,76.2,24.9,76.4,26.3z'/%3e%3c/g%3e%3c/svg%3e)
%20--%3e%3csvg%20version='1.1'%20id='Layer_1'%20xmlns='http://www.w3.org/2000/svg'%20xmlns:xlink='http://www.w3.org/1999/xlink'%20x='0px'%20y='0px'%20viewBox='0%200%20300%20299.9'%20style='enable-background:new%200%200%20300%20299.9;'%20xml:space='preserve'%3e%3cstyle%20type='text/css'%3e%20.st0{fill:%23CC0000;}%20%3c/style%3e%3cpath%20class='st0'%20d='M0.1,150C0.1,67.1,67.2,0,150,0c82.8,0,150,67.1,150,150c0,82.8-67.2,150-150,150C67.2,299.9,0.1,232.8,0.1,150%20z%20M150,249.9c55.2,0,100-44.8,100-100c0-55.2-44.8-100-100-100C94.8,50,50,94.8,50,150C50,205.2,94.8,249.9,150,249.9z%20M200,150%20c0,27.6-22.4,50-50,50s-50-22.4-50-50s22.4-50,50-50S200,122.4,200,150L200,150z'/%3e%3c/svg%3e)
Named Leader in the Forrester Wave™: Human Risk Management Solutions, Q3 2024.
What Livvy does
Four moves. The last one is yours.
Livvy does the reading, the joining and the drafting. Your team keeps the decision.
-
Read.
Livvy reads the signals from your security tools and joins them to one person.
4 signals · 2 sources
-
Find.
It finds where risk is building: the cohorts people share and the sequences they're moving through.
1 cohort · 1 sequence
-
Propose.
It proposes the next move and cites the evidence behind it, signal by signal.
3 actions · 4 citations
-
Approve.
Your team approves it, or edits it first. Approvals stay with your team.
Your decision
Try Livvy.
Pick a risk
Reading your signals
0events with customer data
- DLPCustomer data in 212 events last quarter
- Email securityCustomer files sent to personal addresses
- HR systemSupport and Sales hold the most customer data
Reading your DLP events: 212 last quarter involved customer data, most in Support and Sales.
Built: a 14-minute course from your policies, live April 13.
Livvy builtCareless data handling: on the scorecard
- 14 minutes · 6 modules
- Due July 12, 2027
- Weekly Teams reminders
- Finished on time
71%96% - DLP violations
212153 - Reminders sent
9,6002,140
Show the playbook
The risk Customer data handled carelessly: shared in the wrong channel, kept too long, sent to a personal address.
Your response Annual training written from your own policies, on a deadline, with reminders only for the people who have not finished.
The full request “Hey Livvy, build me a 14-minute annual training from our existing policies, with an emphasis on secure data handling and how we protect our customers’ sensitive data. Release it on April 13, 2027 and give each employee 90 days to complete it. Send Teams reminders once a week to everyone who hasn’t finished.”
Annual data handling training All employees · 2,400 people
| Apr 13, 2027 | Assign the 14-minute course to every employee |
|---|---|
| Every Monday | Teams reminder to people not finished |
| Course finished | Stop reminders · record completion |
| Jul 12, 2027 | Report completion by business unit |
Next: go deeper on data handling. The teams with the most DLP violations get a two-minute module from Content Studio, and their managers see the trend.
Reading your signals
0of 2,400 people report
- Email securityReal phish reach targeted people about 14 times a year
- Phishing1 in 5 people report a real phish
- Phishing12% click
Reading your phishing results: 1 in 5 people report a real phish, and 12% click.
Built: a year of phishing simulations for 2,400 people.
Livvy builtPhish nobody reports: on the scorecard
- 4 easy · 5 medium · 3 hard
- Reporters thanked, entered to win
- Clickers get two minutes of training
- Report rate
19%47% - Click rate
12%4% - Human sensor cohort
204612
Show the playbook
The risk Real phishing reaches your people every week, and too few of them report it.
Your response A year of simulations at every difficulty, a thank-you and a prize for the people who report, and two minutes of training for the people who click.
The full request “Hey Livvy, create 12 months of simulations. Mix easy, medium and hard templates. Branch them: if someone reports, send them to a cohort that gets congratulated and entered to win a prize, and if they click, route them to additional training.”
Phishing program, 12 months All employees · 2,400 people
| First week of each month | Send the month’s simulation |
|---|---|
| Reported | Add to Human sensor · thank-you · enter the prize drawing |
| Clicked | Assign a two-minute module on that lure |
| End of each month | Report rate and click rate by team |
Next: aim at the few who keep clicking. The people who click three times in a year get a vishing test and step-up MFA, with a person approving the access change.
Reading your signals
0repeat violators
- DLP86 people at 3+ events in 30 days
- DLP41 people at 5+ events
- HR systemMost in Finance and Support
Reading your DLP events: 41 people tripped it 5+ times this month, most in Finance and Support.
Built: DLP reminders. 86 people would get one today.
Livvy builtRepeat DLP offenders: on the scorecard
- 3+ events: policy reminder
- 5+ events: Repeat violators
- Monthly report to managers
- DLP violations
1,140821 - Repeat violators
4117 - Managers with a report
023
Show the playbook
The risk The same people keep tripping DLP: uploads to personal storage, customer files in the wrong place.
Your response A policy reminder the moment the pattern starts, and a monthly report to managers for the few who keep going.
The full request “Hey Livvy, set up a playbook that sends a policy reminder to any employee who creates 3 or more DLP events in a rolling 30-day window. If they get to 5 events, put them in a separate cohort of repeat violators so we can share that report with their manager at the end of each month.”
DLP policy reminders Anyone with 3+ DLP events in 30 days
| 3+ DLP events in 30 days | Send the data handling policy reminder |
|---|---|
| 5+ DLP events in 30 days | Add to the Repeat violators cohort |
| End of each month | Repeat violators report to each manager |
| Under 3 for 60 days | Leave the cohort · say thank you |
Validated: take it to insider risk. The pattern that worked for DLP now watches access and departures, so insider risk gets the same early warning.
Reading your signals
0Cyber Champions
- TrainingFinished this year’s training on time
- PhishingReported 2+ real or simulated phish in 12 months
- RecognitionNo thank-you sent this year
Reading training and reports: 212 people finish on time and report phishing. Nobody has thanked them.
Built: a monthly thank-you for 212 Cyber Champions.
Livvy builtReporting that fades: on the scorecard
- Training finished on time
- 2+ phish reported in 12 months
- Monthly thank-you
- Cyber Champions
212318 - Real phish reported first by a champion
22%63% - Teams with a champion
58%84%
Show the playbook
The risk Your best defenders go unnoticed, so the behavior you want never spreads.
Your response Find the people who finish training on time and report phishing, and thank them every month.
The full request “Hey Livvy, build me a cohort to find my true Cyber Champions: everyone who completed training on time and reported 2 or more real or simulated phishing messages over the rolling 12 months. Send them a special message at the end of each month letting them know how appreciated they are.”
Cyber Champions Cyber Champions · 318 people
| Meets both rules | Join Cyber Champions |
|---|---|
| End of each month | Thank-you message from the CISO |
| Reports a real phish | Credit it on their scorecard |
| Each quarter | Champions by team to every leader |
Next: champions in every team. Teams without a champion get a nudge to their leader, and champions become the first responders when a real campaign lands.
Reading your request
I can build that with your own signals in a demo. Here, pick one of the four above.
Guardrails
Livvy proposes. Your team decides.
- Approvals stay with your team.
- Livvy proposes training, nudges and controls such as step-up MFA. Your team approves or edits each one before it runs.
- Evidence for every recommendation.
- Each one cites the signals, their sources, the cohort and the sequence behind it, so anyone can check the reasoning.
- Facts you can verify.
- Priority reads as a word, High or Critical, next to the facts that set it.
- Your data.
- Livvy runs in the US or the EU, with PII and prompt-injection detection built in, and your team can turn every AI feature off at once.
Livvy's proposal
Actions · your team can edit
Why Livvy proposed this
- 1Targeted by real phishingEmail security
- 2Clicks links in real phishingEmail security
- 3Holds admin or privileged rolesIdentity provider & MFA
- 4Phishing-resistant MFA not enrolledIdentity provider & MFA
Waiting for your approval. Approvals stay with your team.
Livvy and the platform
The engine behind the Living Security Platform.
The platform connects the signals and runs the responses. Livvy is the intelligence in between.
Connect
- Email security
- Identity provider & MFA
- The tools you already use
Hundreds of human risk signals
Act, with approval
- Training
- Nudges
- Controls, such as step-up MFA
Approvals stay with your team.
See where risk is building in your workforce, act before it escalates, and prove the program is working.
Explore the platformThe signals, cohorts and sequences Livvy cites come from the Human Risk Management Framework, an open framework published under CC BY 4.0.
Explore the framework