Bottomline Internal Threat Management vs Living Security

Bottomline Internal Threat Management monitors user behavior across systems to help organizations identify unusual activity by insiders or intruders before it becomes disruptive. It captures behavior in real time and applies machine learning to find anomalies and reduce false-positive alerts. The agentless product collects data from the network without installing software on employee devices, covering legacy systems, SaaS, and web applications. Dashboards support searches across platforms and review of alerts across geographies, including searches against lists such as VIP names or known fraudulent accounts. Record and Replay reconstructs sessions screen by screen for investigators, security officers, and internal auditors. Recordings are encrypted and secured for later use, including as court evidence. Recorded actions can be processed by Bottomline’s analytics engine or sent to data lakes or third-party analytics. Use cases include identifying unauthorized client-data changes and employee policy violations such as snooping. The solution is presented for financial institutions, government, insurance, and telecom. It runs on the web; pricing is available on request.

Living Security provides security awareness training for organizations that need individualized employee risk training and compliance support. Its platform includes hundreds of professionally produced, plot-driven live-action modules that can be tailored by role, industry, department, and specific risk area. Ready-to-use campaign templates, audience filters, and multi-campaign management support program administration. Training is available in 20 languages, with templates described in more than 26 languages. Microsoft Teams and Slack can deliver reminders and nudges. Risk mitigation reporting covers individual, team, and company levels. Living Security lists more than 160 native integrations, custom API endpoints, and CSV uploads, producing more than 300 Human Risk signals. The training page says requirements for PCI, SOC, NIST, CMMC, HIPAA, FedRamp, and more are met. Web access supports current Microsoft Edge and Google Chrome. Phishing simulations, risk scoring, automated training, SSO, and a phish reporting button are listed.