The Stack Identity platform is built on 3 key capabilities.

The first, the IAM Data Lake ingests identities, access entitlements, applications, network and data posture events from various systems and builds a connected context. Our proprietary pattern recognition algorithm discovers cloud native patterns using this connected context and builds the pathways between identities, applications and datastores.

The second capability is called Detections. Detections provide visibility to access flows and data flows that could result in data exfiltration. Detections are powered by our automated threat hunting and query analytics that discover pathways by which data can be exfiltrated. Stack Identity has a growing catalog of detections and an open platform for practitioners to develop their own detections using SQL. Detections are visualized using our Data Attack Map.

The third capability is our proprietary Breach Prediction Index BPI algorithm. The BPI helps customers to prioritize both RISK AND IMPACT to vulnerable cloud data. The BPI reveals the toxic combinations that impact ninety percent of data assets. BPIs are calculated for each datastore with explanations for security teams and data owners to evaluate and quickly take action. Remediation and governance actions are delivered as code and are implemented in the customers native notification, collaboration and workflow tools.

This approach transforms cloud IAM operations and brings together data detections and workflows in a complete platform to allow customers to take control of their cloud accounts and prevent breaches, exfiltrations and ransom attacks.