Cyberhaven Insider Risk Management vs Living Security

Cyberhaven Insider Risk Management helps security teams detect and stop insider threats by combining data awareness with behavioral signals. It can block data exfiltration across cloud services, email, websites, removable storage, Apple AirDrop, and other channels. User risk scores account for data sensitivity and can include organization-defined risk groups. Event records are retained indefinitely, allowing the product to correlate related activity weeks or months apart. For investigations, it can remotely capture user actions related to data and store forensic events in Cyberhaven’s cloud. Optional incident screenshots and highlighted content matches can be stored in the customer’s cloud. Cyberhaven supports directory services, SIEM and SOAR platforms, cloud applications, and customer cloud repositories for incident evidence; it integrates natively with SIEM tools such as Splunk and exposes incidents through an API. It runs on API, browser extension, Linux, macOS, web, and Windows. Pricing is on request. Support engineers are available 9:00 AM–5:00 PM ET Monday through Friday, while the portal and self-service resources are available 24/7.

Living Security provides security awareness training for organizations that need individualized employee risk training and compliance support. Its platform includes hundreds of professionally produced, plot-driven live-action modules that can be tailored by role, industry, department, and specific risk area. Ready-to-use campaign templates, audience filters, and multi-campaign management support program administration. Training is available in 20 languages, with templates described in more than 26 languages. Microsoft Teams and Slack can deliver reminders and nudges. Risk mitigation reporting covers individual, team, and company levels. Living Security lists more than 160 native integrations, custom API endpoints, and CSV uploads, producing more than 300 Human Risk signals. The training page says requirements for PCI, SOC, NIST, CMMC, HIPAA, FedRamp, and more are met. Web access supports current Microsoft Edge and Google Chrome. Phishing simulations, risk scoring, automated training, SSO, and a phish reporting button are listed.