Cohort 1 · SAT-led legacy

Verified 2026-04-28 · Decays 2027-10-28

When the threat lands, what moves?

Us · Moxso · OSINT engine

Individual risk profiles shift across the workday.

Targeted to exposed individuals based on live external threat actor activity. Architectural connection between external threats and internal cross-system risk.

Them · Proofpoint · VAP from email telemetry

VAP grouping shifts when email attacks land.

Signal flows from TAP email attack telemetry to VAP grouping. Cross-system behavioural signal across identity, endpoint, data is outside the framework.

VAP is signal-led training within the email channel. Moxso's OSINT engine connects external threats to cross-system individual risk.