Identity is Dead. Long Live Intent.

Identity is easily stolen. MFA can be phished. Intent is much harder to fake.

Legacy security asks:

"Is this user allowed to access this file?"

1stProtect asks:

"Is it normal for this user to read 5,000 files sequentially in 30 seconds and pipe the output to an unknown binary?"

The Physics of Data Movement

We stopped looking at static permissions and started analyzing the vector of data movement.

• Velocity: How fast is data moving?
• Destination: Is it piping to a local socket or an external IP?
• Entropy: Is the file encrypted before transit?

When you look at the physics, the difference between a legitimate user and an attacker becomes obvious immediately.