Cohort 1 · SAT-led legacy

Verified 2026-05-19 · Decays 2027-11-19

Three buyers. Three decks.

Security Leader

The Security Leader

A clear view of whether human risk is going up or down, with NIS2 audit artefacts — not a VAP grouping derived from email attacks.

Proof

HRI's Human Resilience Score tracks risk direction — org, department, individual — across all three signals. NIS2 evidence at audit level. VAP is email-attack-derived population grouping.

Security Builder

The Security Builder

Signal that covers the full workday — not email-only telemetry bolted onto a training platform.

Proof

HRI's three signals across identity, endpoint, data, and collaboration. Signal Bus into Sentinel, Splunk, Cortex XSOAR. SCIM 2.0 with risk-attribute reverse-sync. Native at every tier.

Head of IT

The Head of IT

A platform that runs without the email-security bundle dependency — not a SKU that presumes Targeted Attack Protection is already deployed.

Proof

Intervention fires from policy. Two-week deployment. Board pack assembles overnight. Proofpoint's SAT module is strongest as a TAP add-on; standalone it's training records and VAP labels.

Pick one before you dial. Don't mix scripts on a multi-stakeholder call.