Cohort 1 · SAT-led legacy

Verified 2026-04-28 · Decays 2027-04-28

Objection · 02

Proofpoint has VAP – they're already signal-led for training.

Validate

Acknowledge it. VAP is real and the strongest signal-led architecture in the SAT category. Within the email channel the framework works as advertised.

Reframe

The architectural question is what the framework reads outside the inbox. VAP is fed by email attack telemetry. Identity, endpoint, data, collaboration – all outside the framework's visibility.

Say

VAP is signal-led training within email. HRI is signal-led human risk intelligence across the workday — including what's targeting your industry from outside.

Proof · Stat

VAP groups people at population level — fed by TAP email telemetry. HRI tracks individual risk across three signals and shows whether that risk is going up or down.