Anomalies
9
24h window
Overview
What it does
KSE Identity Threat Detection analyzes authentication telemetry for impossible travel, credential stuffing, MFA fatigue, and privileged session anomalies — correlating with KSE threat intelligence where available.
IdP
Connectors
MFA
Coverage
ATO
Detection
RT
Alerts
Identity layer
Catch takeover
patterns.
Authentication telemetry analyzed for impossible travel, stuffing, and MFA bypass.
-
01
Login anomaly detection
CoreGeo velocity, device fingerprint, and TOR/VPN signals.
- Geo velocity
- Device fingerprint
- TOR / VPN signals
-
02
MFA health
DepthCoverage gaps and bypass attempt alerting.
- Coverage gaps
- Bypass attempts
- Enrollment drift
-
03
Privileged session monitoring
ScaleAdmin actions flagged against baseline behavior.
- Admin baselines
- Anomaly flags
- Session replay cues
-
04
Threat intel correlation
ProofCross-reference with known malicious IPs from KSE network.
- Known bad IPs
- KSE network signals
- Cross-module context
Session intelligence
Impossible travel
flagged.
Correlate logins with device, geo, and reputation signals — before accounts are drained.
- Geo velocity
- Device ID
- MFA health
- Intel fusion
MFA gap
12%
Users
Blocked
3
Sessions
How it works
Connect. Baseline. Respond.
From IdP telemetry to hardened identity posture.
01
Connect IdP / logs
Ingest authentication logs from your IdP and critical apps.
02
Establish baselines
Learn normal patterns for users, devices, and geographies.
03
Detect anomalies
Detect stuffing, impossible travel, and MFA fatigue attacks.
04
Respond & harden
Respond with session revocation guidance and hardening steps.
Identity ops
Sessions under watch.
User risk scores with MFA coverage and privileged session timelines.
- Per-user risk scoring
- MFA enrollment dashboard
- Privileged action timeline
- Intel-enriched alerts
Identity anomalies
9 anomalies
-
Impossible travel user@acme.com · Mumbai → Frankfurt4m
-
MFA bypass attempt admin@acme.com · 12 pushes18m
-
New device login finance@acme.com · unknown fingerprint1h
MFA coverage
88%
Ecosystem
Integrates with
Data and workflows connect across these KSE solutions.
Pricing
Identity Threat Detection — early access pricing.
Join the waitlist for introductory tiers. Final pricing may adjust at general availability.
Starter
Core workflows
₹9,999
/month
Excl. 18% GST · billed monthly
Single business unit
What's included
- Core Identity Threat Detection workflows
- KSE native integrations
- Email alerts & dashboards
- Standard retention
Growth
Expanded automation
₹19,999
/month
Excl. 18% GST · billed monthly
Growing security team
What's included
- Everything in Starter
- SSO & role-based access
- Extended retention
- Workflow integrations
Business
Advanced automation
₹24,999
/month
Excl. 18% GST · billed monthly
Multi-team rollout
What's included
- Everything in Growth
- Advanced reporting
- SLA tracking
- Auditor export bundles
- Dedicated onboarding
Enterprise
Tailored
Contact Sales
Everything configurable
Regulated / global programs
What's included
- Custom integrations
- Multi-framework mapping
- Custom SLA & retention
- Dedicated success manager
Compare
Side by side at a glance
| Feature | Starter Core workflows | Growth Expanded automation | Business Popular Advanced automation | Enterprise Contact Sales Tailored |
|---|---|---|---|---|
| Identity Threat Detection tiers | ||||
| Monthly price (excl. GST) | ₹9,999 | ₹19,999 | ₹24,999 | Contact Sales |
| KSE module ingest |
|
|
|
|
| SSO / team roles | - |
|
|
|
| Audit-ready exports | Basic |
|
|
|
| Dedicated onboarding | - | - |
|
|
Deploy
Add this module to your stack
Start here and expand across monitor, assess, simulate, and govern layers.