Archipelo, Code42, DTEX Systems and Teramind

About Code42

Code42 provides data security and recovery solutions, with its Incydr platform helping organizations identify, monitor and protect critical information across endpoints, cloud storage and collaboration tools by analyzing user behavior to detect insider threats and data leaks. The company is headquartered in Minneapolis, MN, USA, and was founded in 2001.

About DTEX Systems

DTEX Systems sells the DTEX Platform, which integrates Insider Risk Management, Data Loss Prevention, User and Entity Behavior Analytics, User Activity Monitoring, and AI security into one solution. DTEX says human behavior, data movement, and AI activity now operate as one risk surface. DTEX unifies human behavior, data movement, and AI activity into a single model so teams can detect intent earlier and prevent incidents before they escalate. DTEX states its mission as empowering organizations to thrive with a trusted and protected human and AI workforce.^{[1][2][9][10]}

DTEX collects activity 24/7, on and off network. DTEX collects more than 500 metadata elements to correlate activities across devices into one risk score. DTEX applies over 12 human-driven behavioral domains and reduces noise through AI modeling. DTEX risk scoring algorithms map behavior to intent: malicious, non-malicious, and compromised actions. DTEX behavioral intelligence differentiates between malicious, careless, and compromised behavior so appropriate action is taken. Pseudonymization is a patented capability that removes personal identifiers from activity data. DTEX can reconstruct digital activity into a single, chronological narrative of what a user did across tools, AI, and endpoints. DTEX provides a full history of every file in use, in motion, and at rest.^[2][11]

Insider Risk Management combines behavioral context, user activity monitoring, and deep visibility into how people interact with data and AI. Risk-Adaptive Data Loss Prevention combines traditional data controls with behavioral risk signals. Risk-Adaptive Data Loss Prevention adjusts policies as user behavior, data sensitivity, and risk changes. AI Risk Management covers risk created by AI usage and agentic workflows across the enterprise. i³ Investigative Services provides investigation capabilities for security incidents and insider threats.^[2][9]

DTEX Agentic Defenders help security teams investigate faster, prioritize what matters, and reduce manual effort. Triage Guardian enables an autonomous, multi-agent team with human-in-the-loop that accelerates the evaluation of security events. Threat Hunter is an agentic defender that hunts for risky behavior, not just single alerts. Threat Hunter automates complex, deep research hunts while eliminating manual query building. AI Risk Assistant turns complex behavioral, data, and AI signals into digestible, context-rich insights.^[2]

DTEX tracks usage of all GenAI tools, showing which tools are in use, who is using them, and how. DTEX captures data flows to and from AI applications, including GenAI prompt questions and file sharing. DTEX monitors and differentiates between actions taken by humans and those initiated by autonomous or scripted AI agents. DTEX says its HTTP inspection capabilities detect interactions with generative AI chat sites to stop unauthorized sharing of sensitive information. DTEX says it protects sensitive data from GenAI exposure by uncovering Shadow AI usage, capturing prompts and uploads, and enforcing guardrails.^[6][9][11]

DTEX i³ combines insider threat intelligence, insider risk services, and expert threat hunting. The DTEX i³ Insider Risk Research Hub publishes regular insider threat research and advisories based on real-world investigations. DTEX presents DTEX i³ and Mandiant as partners for strengthening security posture. MITRE partnered with DTEX in 2020 on a data-driven study to assist Five Eyes critical infrastructure entities. DTEX says it helps prevent IP loss during employee transitions by detecting staging, obfuscation, and early exfiltration behaviors. DTEX says it maintains visibility and applies adaptive controls across contractors and partners.^[8][9]

DTEX sends critical information, including aggregated risk scores, to SIEM, SOAR, or IT ticketing systems. DTEX collects productivity application data from solutions like Google Workspace and Microsoft 365. DTEX integrates with data sources like HR systems and data platforms. DTEX integrates data classification tools to assist user behavior profiles and digital fingerprinting in detecting the movement of sensitive data. DTEX says lightweight deployment and integrations let insider risk management and SOC teams operate efficiently in globally distributed environments using SIEM-first workflows.^[9][12]

DTEX is deployed in the largest banks in the world. DTEX says it fulfills SWIFT mandatory and advisory CSC controls by providing real-time detection and visibility and a full audit trail. DTEX says its detection and forensic capabilities enabled a complete time to resolution of under 24 hours.^[6]

Mohan Koo is the Co-founder and President of DTEX. Marshall leads DTEX, a company specializing in AI-powered insider risk management. Marshall spent 17 years at Mandiant, most recently as Global CTO. DTEX has a 2025 Type II SOC 2 for December 1, 2024 to December 31, 2025. DTEX also lists a FedRAMP Moderate ATO Package.^{[2][8][9][10][11]}

About Teramind

Teramind sells a platform that tracks user activity across devices and apps and detects risky behaviour, for security and HR teams. Teramind describes itself as a behavioral analytics platform that gathers detailed data across systems, applications, and activities. Teramind consolidates user activity monitoring, behavioral analytics, data loss prevention, process mining, and digital forensics into a single platform. Teramind describes its offering as a unified workforce analytics, user activity monitoring (UAM), and data loss prevention (DLP) platform. Teramind offers Timmy, which it calls its Workforce Intelligence Copilot, for CISOs, HR teams and executives.^{[1][3][4][12]}

Teramind combines privacy-first insider threat monitoring with user and entity behavior analytics (UEBA), covering human operations and agentic AI across an organization. Teramind monitors actions taken by human employees and by non-human identities and agentic AI tools executing tasks on the endpoint. Teramind assigns dynamic risk scores to incidents using machine learning models so security teams can focus on urgent threats. Teramind employs customizable rule engines to block unauthorized uploads, risky file access, or suspicious data movement in real-time. Teramind delivers forensic evidence through session replays, OCR keyword indexing, and detailed activity timelines. Teramind gathers activity logs under privacy safeguards that include Role-Based Access Controls (RBAC), end-to-end data masking for PII/PHI, and compliance alignment with GDPR, HIPAA, and SOC 2. Teramind moves departing staff into elevated monitoring profiles 30 to 90 days before their departure date, restricting personal cloud connections and bulk file exports. Teramind applies targeted monitoring to external accounts without installing infrastructure on non-owned endpoints. Teramind establishes oversight for users with administrative privileges or elevated permissions.^[7][8]

Teramind offers endpoint-based data loss prevention for cloud that monitors how employees access cloud services, prevents unauthorized data transfers, and protects sensitive data moving to cloud environments. Teramind detects and blocks attempts to upload financial data, personally identifiable information, or intellectual property to unapproved cloud services. Teramind monitors and blocks unauthorized file transfers across USB drives, cloud storage platforms, email attachments, and web uploads. Teramind searches screen recordings and screenshots for sensitive text strings like credit card numbers or PII. Teramind provides pre-configured DLP rules and audit trails that help organizations satisfy requirements under HIPAA, GDPR, SOC 2, and PCI DSS.^{[1][9][10][12][14]}

Teramind controls what employees upload or paste into web-based Large Language Models (LLMs). Teramind tracks autonomous AI agents running in terminal shells, captures command transcripts, and detects superhuman execution speeds. Teramind identifies unsanctioned AI applications, browser extensions, desktop AI software, and local LLMs operating across devices. Teramind redacts or restricts sensitive source code, PII, PHI, and financial data from entering public models while allowing non-sensitive AI usage to continue. Teramind distinguishes personal logins from sanctioned corporate AI accounts. Teramind delivers inline micro-training alerts when users perform risky operations, such as sharing sensitive cloud documents via unrestricted public links.

Teramind runs as a cloud-based SaaS platform that delivers real-time activity monitoring, comprehensive workforce analytics, and automated insider threat detection. Teramind lets organizations deploy agents in complete stealth mode for discreet security audits, or in transparent mode for open team communication. Teramind lets organizations restrict activity tracking to working hours, protecting employee privacy outside scheduled shifts and during personal breaks. Teramind lets organizations take control of remote employee computers in real-time to provide support, troubleshoot issues, or prevent data breaches and insider threats. Teramind offers an employee fraud prevention platform that detects fraudulent activity, prevents financial fraud, and protects company assets through behavioral monitoring.^{[4][7][9][10][13]}