Skip to content
SPECIFICTION
Get listed

Behavox Falcon

behavox.com

WebAPI
Visit behavox.com
Spec score 8.1 #2 of 26 in Insider Risk Management Software

What it is

Behavox Falcon is a human risk intelligence product designed to identify signals that may precede insider incidents. It analyzes 150+ communication data types against 18 risk policies: 17 AI-powered and one rule-based. Indicators include realized risks such as data exfiltration and credential sharing, and predictive signals such as financial distress and disgruntlement. When signals overlap for an individual, Falcon can add that employee to a watchlist and share a risk profile with security, HR, legal and compliance teams. Intervention options include manager notification, access revocation, or HR or legal engagement. On the Behavox platform, controls can also block sensitive transfers, quarantine attachments or hold messages for review. Falcon can run as an API overlay on existing infrastructure or on the Behavox platform, which uses Quantum for data aggregation, archiving and surveillance. Full-platform deployment is described as single-tenant on GCP or AWS, with customer-held KMS keys and support for 50+ languages. The maker says alerts are explainable and human-reviewed, and Falcon does not make employment decisions on its own. Pricing is on request.

Spec sheet

Purpose
Falcon detects human and behavioral signals that may precede insider incidents so organizations can intervene early.Read 3 Oct 2026 · behavox.com
Intended users
Behavox says Falcon is deployed across financial services, technology, healthcare, energy, government, defense, and legal sectors.Read 2 Oct 2026 · behavox.com
Deployment
Falcon is offered as an API overlay or on the Behavox platform, where it runs on Quantum; full-platform deployments are described as single-tenant on GCP or AWS.Read 3 Oct 2026 · behavox.com
Integrations
Falcon's API overlay can evaluate alert candidates from Global Relay, Smarsh, Relativity, and Bloomberg Vault, and its DataLabs API can connect insights to SIEM, data-visualization, and case-management systems.Read 3 Oct 2026 · behavox.com
Security
Behavox's security page states SOC 2 Type II, single-tenant GCP, and customer-held KMS keys.Read 3 Oct 2026 · behavox.com
Privacy
The API overlay sends extracted sentences for evaluation and the page states that no metadata or personally identifiable information is sent in transit.Read 2 Oct 2026 · behavox.com
Support
Behavox offers a managed-services option in which its insider-threat specialists review alerts, curate watchlists, and escalate confirmed risks to the client.Read 2 Oct 2026 · behavox.com
Headquarters
London, United KingdomRead 28 Sep 2026 · behavox.com
Founded
2014Read 28 Sep 2026 · behavox.com
Company
Behavox says it was founded in 2014 and lists London as its global headquarters.Read 2 Oct 2026 · behavox.com
Cloud and languages
The full-platform deployment is described as single-tenant on GCP or AWS, with customer-held KMS keys and support for 50+ languages.Read 2 Oct 2026 · behavox.com
Detection
Falcon runs 18 risk policies, 17 AI-powered and one rule-based, across 150+ communication data types.Read 3 Oct 2026 · behavox.com
Governance
The product page says monitoring scope, indicators, and thresholds can be configured for an organization's lawful basis and jurisdiction, with role-based, least-privilege access to risk profiles.Read 2 Oct 2026 · behavox.com
Human oversight
Falcon describes its alerts as explainable and human-reviewed, and says it does not make employment decisions on its own.Read 2 Oct 2026 · behavox.com
Indicators
The product covers realized indicators such as data exfiltration and credential sharing, and predictive indicators such as financial distress and disgruntlement.Read 3 Oct 2026 · behavox.com
Intended customers
The maker describes Falcon as deployed across financial services, technology, healthcare, energy, government, defense, and legal sectors.Read 3 Oct 2026 · behavox.com
Intervention
The product describes manager notification, access revocation, and HR or legal engagement as early intervention options based on watchlist status.Read 3 Oct 2026 · behavox.com
Investigation
When multiple signals overlap for an individual, Falcon can register that employee on a watchlist and share a risk profile with security, HR, legal, and compliance teams.Read 2 Oct 2026 · behavox.com
Languages
The Falcon page states that the full Behavox platform supports 50+ languages.Read 3 Oct 2026 · behavox.com
Privacy controls
Falcon supports configurable monitoring scope and thresholds, role-based least-privilege access, explainable alerts, and human review; the maker says it does not make employment decisions on its own.Read 3 Oct 2026 · behavox.com
Risk indicators
The product detects realized indicators such as data exfiltration and credential sharing, and predictive indicators such as financial distress and disgruntlement.Read 2 Oct 2026 · behavox.com
Risk profiles
When multiple signals overlap for an employee, Falcon can register that employee on a watchlist and share the risk profile with security, HR, legal, and compliance teams.Read 3 Oct 2026 · behavox.com
Support option
Behavox offers a managed-services option in which its insider-threat specialists review alerts, curate watchlists, and escalate true positives to clients.Read 3 Oct 2026 · behavox.com

Plans and prices

Behavox Falcon Priced on request Commercial options discussed with sales Read 3 Oct 2026 · behavox.com

Every Behavox Falcon plan and price →

Strong points and limits

Strong points

  • Analyzes 150+ communication data types.
  • Combines 17 AI-powered policies with one rule-based policy.
  • Can share employee risk profiles with relevant teams.
  • Alerts are described as explainable and human-reviewed.

Limits

  • Pricing is available on request.
  • Some intervention controls require the Behavox platform.
  • The described full-platform deployment uses GCP or AWS.

Who it suits

Falcon is intended for organizations managing insider risk, including those in financial services, technology, healthcare, energy, government, defense and legal sectors. It may suit teams that need configurable monitoring and coordinated review across security, HR, legal and compliance.

Verdict

Falcon combines risk indicators, watchlists and intervention options, with API-overlay and Behavox-platform deployments. Organizations should assess its monitoring configuration and review process alongside their requirements.

Where Specifiction places it

Alternatives to Behavox FalconAll alternatives →