What does Living Security sell?

Living Security sells Livvy, Phishing simulation, Human Risk Management Framework and Living Security SCIM. Livvy: Livvy proposes the next move, and the customer's team approves it. Phishing simulation: Phishing simulation aimed by the customer's risk data, not its calendar. Human Risk Management Framework: An open framework of 137 signals, open to everyone under CC BY 4.0. Living Security SCIM: Account provisioning that follows the SCIM 2.0 standard.

Who does Living Security fit?

From its own pages, Living Security sells to organisations that already run security tools, from which it reads signals to reveal human and agent risk. Our reading is that the platform serves security teams that keep the final decision on responses, since approvals stay with the customer's team. The workforce Living Security describes includes people in business functions such as finance, with an accounts payable lead given as an example. Our reading is that Living Security sells to organisations running AI agents alongside people, with every agent held to an accountable owner.

How does CISO Tribune file Living Security?

CISO Tribune files Living Security under Human risk management, with Security awareness training as a secondary category.

Where is Living Security headquartered?

Living Security is headquartered in Austin, United States.

When was Living Security founded?

Living Security was founded in 2017.

Company record · security vendor

Living Security

Where Living Security appears on the record (30)

Every page on CISO Tribune and its network that carries this company, 30 in all.

Compared with (28): vs AccessIT Group, vs Adaptive Security, vs Arctic Wolf, vs Brite, vs Cofense, vs Defendify, vs Doppel, vs Egress, vs Elbit Systems, vs Fable Security, vs Forte Technologies, vs Frame Security, vs Google, vs Helix, vs Hornetsecurity, vs Hoxhunt, vs IANS, vs Immersive, vs Jericho Security, vs Keepnet Labs, vs KnowBe4, vs NINJIO, vs Proofpoint, vs Reflex Security, vs SoSafe, vs Third Wave Innovations, vs Trustifi, vs UpGuard
In the vendor directory (2): Human risk management vendors · primary category
Security awareness training vendors · category

What the company sells

Living Security sells a platform that reads signals from the security tools its customers already run to reveal human and agent risk, and guides the response. Living Security states that humans and AI agents now share access, data, and decisions. Living Security says human risk management was built on the assumption that the identity taking an action is a person, and that the assumption no longer holds. Living Security describes an AI agent as an identity that has credentials, does things that cannot be fully predicted, and can move risk as fast and as much as a person can. Living Security notes that AI agents have permissions, touch data and take action.

Living Security joins hundreds of human risk signals from the security and HR tools customers already use, per person, with Livvy guiding the response. Living Security weighs threat, access and behavior so that the riskiest few people rise first. In the Living Security model, signals from nine risk domains join into cohorts, cohorts feed sequences, and each sequence heads for a breach scenario. The Living Security map of how risk builds comes from the Human Risk Management Framework, which has 137 signals and is open to everyone under CC BY 4.0. In one Living Security example, four signals from email security and the identity provider reach an accounts payable lead in Finance, and that person's priority rises to High.

Livvy proposes the next move, and the customer's team approves it. Livvy recommends an action for each person, a playbook runs the action, and every result flows back into the Human Risk Index. Living Security guides or runs approved responses, and approvals stay with the customer's team. Livvy can recommend step-up MFA and a credential reset for a person, then a 90-second coaching nudge, and waits for the team's approval. Living Security says that when an employee's score moves, the response moves with it, and the response can be coaching, tightening the person's authentication or changing what the person can access.

Living Security offers phishing simulation aimed by the customer's risk data, not its calendar. For a Living Security phishing simulation, who is being targeted by real attacks, what assets those users can access and how they have behaved in the past go into shaping the test before it goes out. Living Security is launching support for phishing simulations via email and Teams. Living Security places SMS, voice, and video simulations on its near-term roadmap. In a playbook Living Security demonstrated, everyone who clicked gets training and the whole team gets a nudge. Access tightens on its own for the people who clicked in a playbook Living Security demonstrated.

Living Security offers AI calls and two-way texts that talk back, then coach. Living Security offers a library aimed by risk and delivered by playbooks. Living Security takes content from threat to training that is on brand and approved by the customer. Living Security offers team escape rooms and a tabletop for practicing the breach. Living Security offers a way to see the shadow AI and to hold every agent to an accountable owner.

Microsoft Entra ID can contribute normalized identity, sign-in, risk, device, and attack-simulation activity to Living Security. With a Microsoft Entra ID permission for group membership actions, a Living Security playbook can add a person to, or remove them from, a Microsoft Entra ID group. For group membership actions on the Microsoft Entra ID connection, an administrator chooses an explicit allowlist of groups on the connection. A Living Security customer can invite a system admin into the platform with scoped permissions, so that the admin enters integration credentials directly.

SailPoint Identity Security Cloud and IdentityIQ manage Living Security accounts through the SailPoint SCIM 2.0 connector. Living Security SCIM follows the SCIM 2.0 standard (RFC 7643 and RFC 7644). When a source sends a custom extension attribute for the first time, Living Security adds that extension. Living Security holds some changes that succeed in SailPoint, for example a change that would remove the customer's last owner.^[3][5][7][8]

Categories: Human risk management (primary category)
Security awareness training
Compare Living Security with companies in the same category
Headquarters: Austin, United States^[2]
Founded: 2017^[1][4]
Ownership: Not established from our sources
CISO on record: Not yet on our record. Send a verified source
Website: livingsecurity.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

Livvy^[5][10]
Livvy proposes the next move, and the customer's team approves it.
Livvy recommends an action for each person, a playbook runs the action, and every result flows back into the Human Risk Index. Livvy can recommend step-up MFA and a credential reset for a person, then a 90-second coaching nudge, and waits for the team's approval. Approvals stay with the customer's team.
Phishing simulation^[5][7]
Phishing simulation aimed by the customer's risk data, not its calendar.
Who is being targeted by real attacks, what assets those users can access and how they have behaved in the past go into shaping each test before it goes out. Living Security is launching support for phishing simulations via email and Teams. SMS, voice, and video simulations are on the Living Security near-term roadmap.
Human Risk Management Framework^[5]
An open framework of 137 signals, open to everyone under CC BY 4.0.
The Living Security map of how risk builds comes from the Human Risk Management Framework, which has 137 signals and is open to everyone under CC BY 4.0. In the map, signals from nine risk domains join into cohorts, cohorts feed sequences, and each sequence heads for a breach scenario.
Living Security SCIM^[8]
Account provisioning that follows the SCIM 2.0 standard.
Living Security SCIM follows the SCIM 2.0 standard (RFC 7643 and RFC 7644). SailPoint Identity Security Cloud and IdentityIQ manage Living Security accounts through the SailPoint SCIM 2.0 connector. The schema includes the core user, the Enterprise extension and the Living Security extension.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Living Security's categories, then alphabetical. A list from the record, never a ranking.

On human risk management, Living Security competes with Hoxhunt, Keepnet Labs, Fable Security, Cofense, Doppel, Frame Security, Immersive, Jericho Security, KnowBe4, NINJIO and 4 more.
On security awareness training, Living Security competes with Frame Security, Immersive, Jericho Security, KnowBe4, NINJIO, SoSafe, Adaptive Security, Google, Cofense, Doppel and 14 more.

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

[1]About usLiving Security · livingsecurity.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
[2]ContactLiving Security · livingsecurity.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
[3]PlatformLiving Security · livingsecurity.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
[4]Living security strengthens cybersecurity human risk platform with phishing simulation moderator free training and foreign translation support 301277650Living Security via PR Newswire · prnewswire.com · published April 27, 2021 · Tier A: the company, a regulator or a filing
[5]Living Security | AI-native Human Risk ManagementLiving Security · undated page, accessed October 26, 2026 · Tier A: the company, a regulator or a filing
[6]Microsoft Entra ID integration setup - Living Security PlatformLiving Security · undated page, accessed October 26, 2026 · Tier A: the company, a regulator or a filing
[7]HRMCon 2026: Human Risk Management Conference | Living SecurityLiving Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
[8]Set up SCIM with SailPoint - Living Security PlatformLiving Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
[9]Living Security Launches AI-Native Human Risk Management PlatformLiving Security · published March 24, 2026 · Tier A: the company, a regulator or a filing
[10]Living Security Launches Livvy, AI-Native Predictive HRM IntelligenceLiving Security · published January 14, 2026 · Tier A: the company, a regulator or a filing
[11]Living Security Welcomes Edna Conway as Executive AdvisorLiving Security · published March 12, 2026 · Tier A: the company, a regulator or a filing

Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 10, 2026 from the references above.

Work for Living Security? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.

Security leadership

CISO Tribune has not yet recorded who holds the top security seat at Living Security. We add a seat only from a verified source; if you have one, send it to the desk.

Questions CISOs ask about Living Security

What does Living Security sell?: Living Security sells Livvy, Phishing simulation, Human Risk Management Framework and Living Security SCIM. Livvy: Livvy proposes the next move, and the customer's team approves it. Phishing simulation: Phishing simulation aimed by the customer's risk data, not its calendar. Human Risk Management Framework: An open framework of 137 signals, open to everyone under CC BY 4.0. Living Security SCIM: Account provisioning that follows the SCIM 2.0 standard.
Who does Living Security fit?: From its own pages, Living Security sells to organisations that already run security tools, from which it reads signals to reveal human and agent risk. Our reading is that the platform serves security teams that keep the final decision on responses, since approvals stay with the customer's team. The workforce Living Security describes includes people in business functions such as finance, with an accounts payable lead given as an example. Our reading is that Living Security sells to organisations running AI agents alongside people, with every agent held to an accountable owner.
How does CISO Tribune file Living Security?: CISO Tribune files Living Security under Human risk management, with Security awareness training as a secondary category.
Where is Living Security headquartered?: Living Security is headquartered in Austin, United States.
When was Living Security founded?: Living Security was founded in 2017.

Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.