Knowledge Base
Understand the identities, access and behaviours that shape security. Explore clear guides to the concepts, risks and everyday practices behind identity security.
Foundational knowledge. Practical context. No product walkthroughs.
Start with the fundamentals or jump straight to the topic you want to understand.
6 guides

Attackers log in instead of breaking in, so identity has become the main attack surface. Learn what ISPM and ITDR each do, how they differ, and why preventing risk before attacks and detecting threats after login work best together as one system.

Both regulations expect control over who has access to critical systems and fast detection when something goes wrong. Learn what NIS2 and DORA require, how identity security supports monitoring and alignment, and how to turn access and behaviour data into audit evidence.

A copilot waits for a prompt, while an autopilot acts on its own within set limits. Learn how the two AI models differ in identity security, why speed matters most when an attack unfolds, and where human oversight and control still belong.

Authentication proves who is logging in, not what they do next. Learn why attacks using valid accounts are so hard to spot, what monitoring inside critical applications adds, and how to detect misuse in real time, down to individual transactions and queries.

Identity-based attacks rarely look like attacks. Follow one from the first stolen credential to the critical application, see what each stage looks like in the logs, and learn where detection and response can break the chain early, before any data is touched.

Insiders and privileged accounts are trusted by design, which makes misuse hard to see. Learn the early warning signs, why access controls alone fall short, and how behavioural monitoring helps you tell normal administration from real abuse before serious damage is done.