What are you
interested in?

A clean dashboard interface showing a purple toggle labeled “Presence is active” switched on. Below it are rounded metric cards for Active Users and Active Devices, each with a soft purple line graph and large numbers representing the last 24 hours. Additional cards show Files Accessed by AI and Files Accessed by Users, using a light beige, white, and lavender color palette.

Building an Insider Threat Program Without a SOC

Behavioral Baselines: How AI Learns What Normal Looks Like

A vertical activity timeline lists user actions in muted gray, such as new device sign-ins and external file sharing. High-risk actions are emphasized with purple highlight cards, including sending customer lists to a personal email address and downloading highly sensitive files. The layout visually separates routine activity from flagged behavior through color and elevation.

What is Insider Threat Detection? (And Why It's Not Surveillance)

A connected dot line graph displayed inside a UI alert card, using purple to represent normal activity and orange to represent flagged activity. The card shows a user named Olivia, Head of Finance, flagged for three types of unusual behavior. The graph shows a sharp increase where flagged activity rises significantly above the normal baseline. The visual contrast makes it clear that her activity has spiked during this time period, suggesting a possible account compromise.

Insider Threat Scenarios You Can't Afford to Ignore

Pistachio Presence dashboard on a light purple background. The product is active. “Everything looks normal” with 1,851,235 indicates no insider threats detected. Two new features are highlighted: “Low-Risk events” (16) with a “See events” button, and “Canaries Sent” (235).

New Features: Canaries and Low-Risk Events

Rolling ball on red lined surface

You, Me, and Data Denormalization

Written by Kasper Rynning-Tønnesen

Pistachio Presence

Pistachio Presence: The New Era of Insider Threat Detection

A mobile screen shows a scenario in Microsoft Teams where the user is asked what they would do when prompted to scan a QR code at a restaurant. Three options are presented: “Scan the code and order,” “Check the URL when scanning,” and “Have your friend order for you.” A speech bubble labeled “You” points to the second option, indicating it was selected. A message at the bottom reassures users that the goal is to learn, not necessarily to choose the correct answer every time.

Cybersecurity training integrated with your team’s go-to apps

Pistachio Loop

Pistachio Loop: Your regular check-in with cybersecurity

2024

Pistachio’s 2024 Year in Review

People toasting

One year of Pistachio

Written by Erlend Blix Seppola

Drawing the Line on Automation

Written by Zack Korman

We believe in a learn-by-doing approach over snooze-worthy videos.

Instead, Pistachio tailors real-world scenarios so your team can build their cyber skills in a safe environment.

Start Free Trial

Activity overview of user