Silverfort sees the full authentication trail of each user, both on-prem and in the cloud. This enables Silverfort’s risk engine to create a high-precision behavioral baseline for each user and sense anomalous authentications when they happen. In addition, Silverfort also consumes risk data from other components in the security stack, such as SIEM, XDR, and SOAR, and feeds it to the user’s risk score calculation.