Living Security
About
Living Security is an AI-native Human Risk Management (HRM) platform company that continuously measures, prioritizes, and reduces cybersecurity risk created by workforce behavior across employees, contractors, and AI agents. The platform ingests 300+ behavioral, identity, and threat signals from integrations with existing security tools to generate individual Human Risk Index scores and automate targeted interventions such as training, nudges, and access controls. Founded in 2017, Living Securit...
Details
VenSearch Intelligence
Ideal Customer
- Living Security's platform is built explicitly for large and mid-to-large enterprises, with its Series A fundraise framed around expanding into the Global 2000 and its messaging consistently targeting CISOs, CIOs, CSOs, and security awareness program owners at organizations with complex security stacks.
- Named reference customers — Mastercard, Verizon, Biogen, AmerisourceBergen, and Hewlett-Packard — are all large enterprises with tens of thousands of employees, suggesting the sweet spot is enterprise organizations with 5,000+ employees and existing investments in identity, endpoint, SIEM, and DLP tooling that can be connected to the Unify platform.
Key Differentiators
- Living Security positions itself as the pioneer of the 'AI-native' Human Risk Management category — distinguishing itself from legacy security awareness training vendors by correlating 300+ behavioral, identity, and threat signals across the entire security stack rather than relying solely on training completion rates or phishing simulation click rates.
- Its proprietary Human Risk Index provides a dynamic, predictive 1–1,000 score for every employee, contractor, and AI agent, and its AI engine Livvy — trained on what the company claims is the industry's largest HRM dataset covering 100+ enterprises and billions of individual risk events — can automate 60–80% of remediation tasks while maintaining human-in-the-loop oversight.
Industries Served
- Living Security targets security-conscious enterprises across a broad range of verticals with no single exclusive industry focus; publicly named customers span financial services (Mastercard), telecommunications (Verizon), life sciences and biopharma (Biogen), pharmaceutical distribution/healthcare (AmerisourceBergen), and technology (Hewlett-Packard).
- The platform's GRC solution explicitly maps to compliance frameworks common in financial services, healthcare, and technology — including NIST CSF, ISO 27001, SOC 2, HIPAA, and PCI-DSS — indicating strong positioning in highly regulated sectors.
Service Coverage
- Living Security operates as a global SaaS vendor headquartered in Austin, Texas, with its platform delivered entirely via the cloud and accessible worldwide.
- The company self-describes as 'the global leader in Human Risk Management,' and its partner program welcomes partners 'globally across all industries.' Its employee footprint spans North America, Asia, and Europe, and its compliance program is explicitly designed to 'meet the needs of our global enterprise clients.' Named customer references include large global corporations such as Mastercard, Verizon, Biogen, AmerisourceBergen, and Hewlett-Packard, suggesting multinational enterprise reach rather than any single geographic focus.
Partnerships
- Living Security's Technology Alliance Program (TAP) includes dozens of integrations across email, web, IAM, SIEM, endpoint, device, DLP, and HR platforms — specifically named partners include Microsoft Azure, Microsoft Defender, Microsoft Intune, Proofpoint, Mimecast, Abnormal Security, Cofense, KnowBe4, Okta, SailPoint, Netskope, Zscaler, CrowdStrike, Rapid7, VMware Carbon Black, Sophos, Tenable, Google Workspace, and Workday.
- On the channel side, Living Security launched a formal partner program in October 2023 with a stated goal of being a 'channel-first organization,' offering up to 30% margins, SPIFs, MDF, and quarterly rebates; named channel partners include GuidePoint Security (a value-added reseller) and Optiv, with distribution integration also in negotiation.
Company Size & Ownership
- Living Security was founded in 2017 by Ashley Rose (CEO) and Drew Rose (CSO), a husband-and-wife team based in Austin, Texas.
- Employee counts across data sources range from approximately 50–81 as of 2024–2026, with the most consistent figures placing headcount between 50 and 76.
Compliance & Certifications
- Living Security completed a SOC 2 Type II audit in 2022 with a clean audit opinion and no noted exceptions, and undergoes annual independent audits to maintain this certification.
- The company's security and compliance page also references its program being designed to serve clients in 'highly regulated industries,' and its GRC solution supports customer compliance with NIST CSF, ISO 27001, SOC 2, HIPAA, and PCI-DSS as output frameworks — though these represent customer compliance enablement rather than Living Security's own certifications for those specific standards.
Compiled from public sources by VenSearch · Last researched October 14, 2026
Offerings
21 offeringsAdaptive Controls
Automated risk response capabilities that trigger access restrictions, policy enforcement playbooks, and ITSM tickets the moment an individual's Human Risk Index score spikes. Adaptive Controls allow teams to contain emerging risks before they spread by automatically adjusting user permissions or escalating to IT service management systems like ServiceNow or Jira. This capability represents the highest tier of HRM automation within the Living Security platform.
AI-Generated Personalized Training
A capability that uses AI to generate relevant, personalized security awareness training content based on live risk patterns observed in the workforce. Security teams can create risk-aligned training modules in minutes while retaining human review and approval before deployment. Content is tailored to the specific behaviors and signals driving risk for targeted individuals or cohorts rather than relying on generic, pre-built modules.
CyberEscape Online
A gamified cybersecurity escape room experience offered online as part of the Living Security platform to drive employee engagement with security training. The experience is designed to make security learning immersive and entertaining, with completion rates that the company states competitors cannot match. CyberEscape is listed as a distinct product in site navigation alongside the main Unify platform.
Cybersecurity Awareness Month Program
A turnkey October campaign package that provides organizations with engaging security awareness content and AI-powered insights specifically designed for Cybersecurity Awareness Month. The program includes speakers, training content, and marketing materials, and is designed to reduce the operational burden on security teams during the annual campaign period. It is available as an add-on to the core Living Security platform.
Discover Risk Use Case
An automated risk reporting capability within the Living Security platform that provides explainable summaries of Human Risk Index trends across the organization, clarifying what changed, why it changed, and which behaviors and cohorts are driving risk. Teams can drill down from enterprise-level trends to individual risk profiles with evidence-linked context that connects every insight to underlying activity. This use case is designed to surface workforce risk patterns for both security teams and executive stakeholders.
Employee and Manager Scorecards
Personalized scorecards delivered to employees and managers that provide visibility into individual and team security posture based on real behavioral risk signals. Employees can see what behaviors are driving their risk score and receive clear, actionable guidance to improve their security habits without punitive framing. Managers receive views of their team's risk trends to support accountability and coaching.
Entity Graph
A capability within the Living Security platform that unifies identity data across HRIS, SSO, endpoint, and email systems into a single, accurate user profile for each individual in the workforce. It eliminates blind spots by consolidating disparate identity sources and is designed to cut investigation time by up to 70%. This unified identity view supports both risk scoring and incident investigation workflows.
HRM for CISOs Solution
A tailored configuration and reporting layer of the Living Security platform designed specifically to give CISOs quantified, board-ready human risk intelligence including executive dashboards, before-and-after intervention comparisons, trend reporting by business unit and department, and board-ready risk narratives. The solution includes automated playbooks, agentic AI actions, and outbound integrations to ITSM and LMS systems, as well as 300+ signal source integrations covering SCIM, IAM, SSO, phishing, SIEM, SOAR, and DLP platforms. It is designed to help CISOs justify budgets, lead board conversations, and demonstrate program value across the business.
HRM for GRC Teams Solution
A compliance-focused solution layer of the Living Security platform that provides GRC teams with always-on compliance dashboards, training completion tracking, policy acknowledgment records, audit-ready exports, and framework mapping for NIST CSF, ISO 27001, SOC 2, HIPAA, and PCI-DSS. The solution includes risk quantification by department, role, and location, behavioral anomaly detection, and automated intervention workflows to support continuous audit readiness. It integrates with LMS, IAM, SIEM, SOAR, DLP, and ITSM systems including ServiceNow and Jira.
HRM for SOC and Incident Response Solution
A human risk intelligence layer for SOC and incident response teams that provides analysts with Human Risk Index scores and full behavioral timelines for every user involved in an alert, enabling faster triage and smarter escalation decisions. The solution correlates signals from SIEM, EDR, XDR, MDM, DLP, CSM, IAM, PAM, and IGA platforms to surface insider risk indicators and behavioral anomalies that individual tools cannot detect in isolation. Automated orchestration playbooks and adaptive user permission controls allow the SOC to move from reactive to proactive security operations.
Human Risk Index (HRI)
A dynamic risk scoring system that assigns a score from 1 to 1,000 to every employee, contractor, and AI agent based on historical risk trends across hundreds of behavioral, identity, and threat signals. The score enables teams to spot deteriorating security posture early, validate risk reduction efforts, and benchmark progress over time. It provides foresight into which individuals and cohorts pose the greatest risk before incidents occur.
Human Risk Management Partner Program
A channel partner program that enables resellers, MSSPs, and consulting organizations to sell and deliver Living Security's Human Risk Management platform to enterprise customers. The program includes industry-leading discounts, a sales incentive program (SPIF), dedicated sales support, quarterly rebates, and additional services revenue opportunities. Partners can offer HRM as a standalone resale product or as a managed service they operate on behalf of customers.
Just-in-Time Nudges (Slack and Microsoft Teams)
Real-time coaching messages delivered to employees through Slack and Microsoft Teams integrations at the moment a risky behavior is detected or a learning opportunity arises. Nudges provide step-by-step guidance to accelerate behavior change without requiring employees to leave their existing workflows. This intervention type is part of the broader automated response framework within the Living Security platform.
Living Security Platform (Unify HRM Platform)
A unified AI-native Human Risk Management platform that ingests 300+ behavioral, identity, and threat signals from across an organization's security stack to generate dynamic Human Risk Index scores for every employee, contractor, and AI agent. The platform continuously measures, prioritizes, and reduces workforce risk through predictive analytics, guided remediation, and automated response playbooks. It serves as the foundation for all Living Security capabilities, from basic security awareness training through full HRM automation.
Livvy (AI Intelligence Engine)
Livvy is the AI guide built into the Living Security platform, trained on the industry's largest HRM dataset covering 100+ enterprises and billions of individual risk events. It unifies 300+ behavioral, identity, and threat signals into a single Human Risk Index score for every identity and delivers explainable, evidence-backed recommendations with confidence scores and predicted impact. Livvy automates 60-80% of remediation tasks while keeping humans in control through auditable, approvable actions.
Phishing Simulations
AI-powered, multi-channel phishing simulations covering phishing, smishing, and vishing scenarios designed to empower employees to identify and respond to social engineering attacks. Simulations are available as ready-to-use or custom scenarios in multiple languages and integrate seamlessly with existing security tools to feed phishing behavior data into the Human Risk Index. Phishing simulation data, including real and simulated phish clicks, contributes to individual and company-wide risk scoring.
Promote Vigilance Use Case
An employee-facing use case that gives individuals visibility into their personal security score and clear behavioral guidance to help them understand and reduce their own risk. Employee-facing scorecards show which patterns contribute to elevated risk and provide specific, actionable recommendations delivered through the platform's coaching capabilities. The use case is designed to build a culture of shared security ownership through transparency and positive reinforcement rather than punitive measures.
Security Awareness Training
Dynamic, risk-based security awareness training that goes beyond compliance checkboxes, using modern AI-powered content including immersive live-action video and personalized learning paths tailored to roles, industries, and specific risk areas. The platform supports multilingual content, contextual reminders, and ready-to-use templates, and allows for risk-based training assignment so the right individuals receive the right content at the right time. Training events feed into the Human Risk Index to measure the overall effectiveness of employee education.
Take Action Use Case
An AI-guided intervention workflow that enables security teams to move quickly from risk identification to targeted remediation for specific individuals or cohorts. Livvy recommends targeted actions based on the behaviors and signals driving risk, and teams can launch cohort-aware interventions across departments or roles while tracking outcomes against changes in Human Risk Index over time. Every action is tied back to underlying evidence to support defensible, auditable decision-making.
Technology Alliance Program
A technology integration partner program that allows enterprise security technology vendors to integrate their platforms with Living Security's Unify HRM platform via APIs to contribute behavioral signal data and extend the value of HRM to joint customers. Integration categories include web and cloud security telemetry, phishing and email security, authentication and access and activity data, data security and privacy, endpoint security, and training platforms. Partners in the program include vendors across email, web, IAM, SIEM, endpoint, device, DLP, and HR technology categories.
Translate Risk Use Case
A capability that generates executive-ready reports with clear narrative summaries grounded in verified behavioral and risk data, designed to answer leadership questions about risk exposure, program ROI, and security outcomes. Reports connect risk trends to measurable business outcomes and provide dashboards that translate complex behavioral data into business language including trend lines, benchmarks, and quantified exposure. This use case supports CISO communication to boards, CFOs, legal, and other business stakeholders.
Considering Living Security?
Our team will work with you to determine if Living Security is the right fit for your organization. From research and assessment through procurement negotiation and ongoing vendor management — we handle the entire process at no cost to you.