About DTEX Systems
DTEX Systems sells the DTEX Platform, which integrates Insider Risk Management, Data Loss Prevention, User and Entity Behavior Analytics, User Activity Monitoring, and AI security into one solution. DTEX says human behavior, data movement, and AI activity now operate as one risk surface. DTEX unifies human behavior, data movement, and AI activity into a single model so teams can detect intent earlier and prevent incidents before they escalate. DTEX states its mission as empowering organizations to thrive with a trusted and protected human and AI workforce.[1][2][9][10]
DTEX collects activity 24/7, on and off network. DTEX collects more than 500 metadata elements to correlate activities across devices into one risk score. DTEX applies over 12 human-driven behavioral domains and reduces noise through AI modeling. DTEX risk scoring algorithms map behavior to intent: malicious, non-malicious, and compromised actions. DTEX behavioral intelligence differentiates between malicious, careless, and compromised behavior so appropriate action is taken. Pseudonymization is a patented capability that removes personal identifiers from activity data. DTEX can reconstruct digital activity into a single, chronological narrative of what a user did across tools, AI, and endpoints. DTEX provides a full history of every file in use, in motion, and at rest.[2][11]
Insider Risk Management combines behavioral context, user activity monitoring, and deep visibility into how people interact with data and AI. Risk-Adaptive Data Loss Prevention combines traditional data controls with behavioral risk signals. Risk-Adaptive Data Loss Prevention adjusts policies as user behavior, data sensitivity, and risk changes. AI Risk Management covers risk created by AI usage and agentic workflows across the enterprise. i³ Investigative Services provides investigation capabilities for security incidents and insider threats.[2][9]
DTEX Agentic Defenders help security teams investigate faster, prioritize what matters, and reduce manual effort. Triage Guardian enables an autonomous, multi-agent team with human-in-the-loop that accelerates the evaluation of security events. Threat Hunter is an agentic defender that hunts for risky behavior, not just single alerts. Threat Hunter automates complex, deep research hunts while eliminating manual query building. AI Risk Assistant turns complex behavioral, data, and AI signals into digestible, context-rich insights.[2]
DTEX tracks usage of all GenAI tools, showing which tools are in use, who is using them, and how. DTEX captures data flows to and from AI applications, including GenAI prompt questions and file sharing. DTEX monitors and differentiates between actions taken by humans and those initiated by autonomous or scripted AI agents. DTEX says its HTTP inspection capabilities detect interactions with generative AI chat sites to stop unauthorized sharing of sensitive information. DTEX says it protects sensitive data from GenAI exposure by uncovering Shadow AI usage, capturing prompts and uploads, and enforcing guardrails.[6][9][11]
DTEX i³ combines insider threat intelligence, insider risk services, and expert threat hunting. The DTEX i³ Insider Risk Research Hub publishes regular insider threat research and advisories based on real-world investigations. DTEX presents DTEX i³ and Mandiant as partners for strengthening security posture. MITRE partnered with DTEX in 2020 on a data-driven study to assist Five Eyes critical infrastructure entities. DTEX says it helps prevent IP loss during employee transitions by detecting staging, obfuscation, and early exfiltration behaviors. DTEX says it maintains visibility and applies adaptive controls across contractors and partners.[8][9]
DTEX sends critical information, including aggregated risk scores, to SIEM, SOAR, or IT ticketing systems. DTEX collects productivity application data from solutions like Google Workspace and Microsoft 365. DTEX integrates with data sources like HR systems and data platforms. DTEX integrates data classification tools to assist user behavior profiles and digital fingerprinting in detecting the movement of sensitive data. DTEX says lightweight deployment and integrations let insider risk management and SOC teams operate efficiently in globally distributed environments using SIEM-first workflows.[9][12]
DTEX is deployed in the largest banks in the world. DTEX says it fulfills SWIFT mandatory and advisory CSC controls by providing real-time detection and visibility and a full audit trail. DTEX says its detection and forensic capabilities enabled a complete time to resolution of under 24 hours.[6]
Mohan Koo is the Co-founder and President of DTEX. Marshall leads DTEX, a company specializing in AI-powered insider risk management. Marshall spent 17 years at Mandiant, most recently as Global CTO. DTEX has a 2025 Type II SOC 2 for December 1, 2024 to December 31, 2025. DTEX also lists a FedRAMP Moderate ATO Package.[2][8][9][10][11]
DTEX Systems on the record