We’re the inaugural sponsor of the Insider Threat Matrix

In chess, the strongest players study the same openings. Not because creativity is forbidden — but because a shared repertoire is how the whole community gets better. Every new idea has to stand on ground everyone else can see.

Insider threat has been missing that shared ground for a long time.

Today, we’re announcing that Above Security is the inaugural sponsor of the Insider Threat Matrix™, the open framework maintained by Forscie. The ITM is the closest thing our field has to a shared repertoire — a practitioner-built catalog of the human behaviors and discrete events that define insider threat investigations, used by security, legal, and HR teams around the world.

Why we did it

Our whole platform is built on the premise that insider risk is behavioral. Above’s Arbiter engine made up of the fleet of AI investigators correlates signals across identity, endpoint, SaaS, and AI environments, and determines intent the way a human investigator would. That means we speak the same language as the ITM — chains of behaviors, discrete events, the actual trajectory of how insider incidents unfold.

When a framework like that exists, is open, is vendor-neutral, and is maintained by people who have actually done the work, the right thing to do is back it. Not because we think every insider threat program should use our product, but because we think every insider threat program deserves a common vocabulary, and the ITM is the best one we have.

There are only six sponsor slots for the ITM, ever. We’re honored to be the first.

What this means for the community

The ITM is open source, and we don’t want that to change. Our sponsorship helps fund the maintenance, the community programming, and the ongoing expansion of the framework as the insider threat landscape evolves — particularly as AI agents take on more autonomous roles inside enterprises and redefine what “insider” even means.

If you’ve never looked at the ITM, start here: Insider Threat Matrix™ | Unified Framework For Investigators . Pull it into your investigations. Contribute back. Use it to challenge your own tooling — including ours.

What this means for us

We’ve said from day one that the insider threat problem is bigger than any single vendor. Backing the ITM is how we put that belief into practice. It’s a commitment — twelve months, renewable — to an open framework that our industry needs more than it needs any one product.

Huge thanks to Joshua Beaman, James Weston, and the entire Forscie team for the work they’ve been quietly doing for years. We’re glad to stand behind it.

Above Security
‍

Learn more about the ITM Sponsorship Program at Insider Threat Matrix™ | Unified Framework For Investigators.