A successful login doesn't tell the whole story.
The blind spot after access
Most security controls are designed to secure access. Once access has been successfully granted, other questions remain:
- Are the granted rights still necessary?
- Is access being used as expected?
- Has user behaviour changed suddenly?
- Do identity, access, and activity signals correlate?
- Which activity warrants investigation first?
This is not exclusively an insider threat issue. Risk can also arise from human error, excessive privileges, outdated access rights, misuse of valid credentials, compromised accounts, or changing behaviour patterns.
What does Fryqua do?
A platform that combines identity, access rights and user behaviour to identify meaningful anomalies
Step 2. Access
A permission is changed
IAM records a legitimate change to the account’s rights.
IAM records a legitimate change to the account’s rights.
Step 3. Behaviour
Unusual files opened (from new places)
A large number of files are being accessed or modified within a short period of time.
With Fryqua
Context matters
The team assesses whether the behaviour is consistent with e.g.:
- intensive project work
- incorrect synchronisation
- data theft
- insider threat.
The strenght
Three interconnected intelligence capabilities
Identity & Access Intelligence
Why does this access exist, and is it used?
Provides visibility into accounts, roles, access rights, changes and actual usage. The focus shifts
from ‘who has access?’ to ‘why does that access exist and how is it being used?’
User Anomaly Detection
Is this behaviour out of the ordinary?
Identifies behaviour that deviates from usual patterns or from predefined risk rules. An anomaly is
not an incident, but a signal that may warrant further investigation and additional context.
Advanced Security Analytics
What does it mean, here and now?
Transforms disparate events relating to user, account, access and activity information into a single,
coherent picture, making anomalies and risks visible so they can be addressed in a targeted manner.
Learns what's normal
Neural networks build a baseline per user, role and group from activity in your own environment. The models run locally on the Fryqua server.
Neural networks build a baseline per user, role and group from activity in your own environment. The models run locally on the Fryqua server.
Checks before it alerts
Every anomaly is weighed against access rights, recent account changes and your rules first. Less noise, fewer false positives.
Every anomaly is weighed against access rights, recent account changes and your rules first. Less noise, fewer false positives.
Your team stays in charge
Adjust thresholds, mark anomalies as legitimate and record why a risk was investigated, mitigated or accepted.
Adjust thresholds, mark anomalies as legitimate and record why a risk was investigated, mitigated or accepted.
Where Fryqua fits
Fryqua complements existing security
Fryqua specialises in the areas of identity, access and user behaviour, and complements the existing security stack.
Fryqua adds a detailed research perspective: examining how access is actually used, and ensuring that existing data becomes more meaningful for research and for assessing that behaviour.
Our added value lies in targeted intelligence within this specific risk domain. Fryqua combines data relating to identity, access and actual user behaviour into a single, coherent picture, which helps to investigate and assess risks associated with valid access.
How it works
Architecture and security under your control
For organisations, it matters not only what insights a solution provides, but also how it collects, processes, and manages data. Especially when dealing with sensitive user, access and activity data, control over the technical architecture is a key part of the decision-making process. Fryqua is therefore designed based on the principle that organisations retain control over their own data and infrastructure.
The organisation retains control of the storage and use of data and log files.
Fryqua has no permanent or hidden access to the environment and requires explicit
customer authorisation.
Agent-based monitoring collects relevant activity data close to the source.
Fryqua can be deployed on-premises and or in hybrid environments.
Relevant alerts can be easily integrated with external applications, including existing SOC
and SIEM solutions.
The Fryqua server can operate entirely within the organisation’s own IT environment, without
an internet connection.
Have a question that’s specific to your organisation? If the source data exists, Fryqua can map the logic for it. Tell us your case.
Security Issues
Turn complex security issues into a single, coherent picture
Who is opening far more data than usual?
A spike in files or locations, linked to the user’s identity, account and rights.
A spike in files or locations, linked to the user’s identity, account and rights.
Which permissions does nobody use anymore?
Valid but unused or outdated rights, ready for your next access review.
Valid but unused or outdated rights, ready for your next access review.
Is new access being used straight away?
Account changes, access and activity in one overview.
Account changes, access and activity in one overview.
Is someone else using this account?
The login is valid, but the behaviour doesn’t match the person.
The login is valid, but the behaviour doesn’t match the person.
Are files being changed or encrypted?
Rules can raise an alert and halt the action.
Rules can raise an alert and halt the action.
What exactly happened, and when?
A continuous audit trail to reconstruct incidents and show auditors what you did.
A continuous audit trail to reconstruct incidents and show auditors what you did.
Have a question that’s specific to your organisation? If the source data exists, Fryqua can map the logic for it. Tell us your case.
Can your team explain not just who got in, but what happened next?
Our Fryqua Suite
Two products. One Goal: Better Visibility
Data Security & Activity
Fryqua Data
See who accesses information, what changes and where unusual file or account activity may indicate a risk.
IT & Performance Monitoring
Fryqua Infra
Keep an eye on your ICT landscape, from network performance to storages, and detect warning signs before they become operational problems.
The next step