Security - At Permiso, we don't take security lightly

Vendors Shouldn't Be Breached

Permiso is read only and unlike many other cloud vendors, only request privileges we need. We only monitor your control plane and aren't exposed to any underlying or transaction data.

LUCR-3: Scattered Spider Getting SaaS-y in the Cloud

Ian Ahl | 09.20.23

featured research

Summary LUCR-3 overlaps with groups such as Scattered Spider, Oktapus, UNC3944, and STORM-0875 and is a financially motivated attacker that leverages...

We Encrypt All Data

In Transit and At Rest

The data that we do maintain, control plane data, is encrypted at rest, as well as in transit.

We Dog Food Our Own Stuff

All identities are federated in the Permiso product. Local users and vendors are continuously monitored in our environment.

Our Sub-processors

Brands we use to build Permiso's platform.

Monitored by P0 Experts Using Permiso

Ian Ahl

SVP of Threat Research

20+ years of experience starting in the USMC, 8 Years Mandiant IR and Advanced Practices: tracking, detecting, and responding to nation state threat actors.

My favorite dessert is warm dark chocolate brownies with vanilla ice cream and some chocolate drizzle!

Daniel Bohannon

Principal Threat Researcher

UGA B.S. CompSci, Georgia Tech M.S. InfoSec, 13+ years IR & researcher roles including Mandiant Advanced Practices Team & Microsoft, OpenSource tool developer (e.g. Invoke-Obfuscation)

My favorite dessert is a lavender latte - to be enjoyed during or between any meal of the day

Andrew Kraut

Senior Threat Researcher

Born with a screwdriver in his hand, Andy has been digging into the internals of technology since he opened his eyes and in the security industry since the era of dial-up. Proudly a generalist, Andy has turned his hand at a wide swath of security industry focuses on both the offensive and defensive sides over the last 25 years. When he’s not breaking systems and questioning assumptions, you can find him suspiciously connecting his laptop to things, pushing buttons that say “Do not press,” biking mountains, and climbing rocks.

My favorite dessert is chocolate marshmallow churro fries (from Award Weiners at Disney’s California Adventure).

Nathan Eades

Senior Threat Researcher

RMU B.S. CIS, RMU M.S. InfoSec, 8+ years in IT with roles in software development, cybersecurity consulting, data loss prevention, threat detection and threat research

I cannot insult the other desserts by choosing one.

Bleon Proko

Threat Researcher

4 years on IT and cyber security working in Telecommunication, MSP, and Bank.

I tend to not eat sweets, but if I had to choose, trilece.

Ricardo Arancibia

Data Scientist

~4 years of experience solving problems using Data Science and building end-to-end ML solutions in a wide variety of industries. Co-founded an official ML Google community with +500 members.