Living Security | AI Transformation Index

Overview

Living Security sells a SaaS-based human risk management platform to enterprises, generating subscription revenue by helping security teams identify, measure, and mitigate cybersecurity risks driven by employee behavior through training content, behavioral analytics, and AI-driven risk prediction.

Executive Summary

Living Security is a small AI-native security awareness and human risk management SaaS company operating in a category under structural consolidation pressure from Proofpoint, KnowBe4, and Microsoft — all of whom have the distribution, data, and resources to absorb the HRM function into broader security platforms. The company's AI-forward positioning is directionally correct and the market need (human-driven breach prevention) intensifies in an agentic AI world, but its durability challenge is more about competitive displacement than AI substitution per se: it risks becoming a feature in a larger platform rather than a standalone business. For a PE sponsor, the strategic question is whether Living Security's domain intelligence and behavioral data assets can be scaled fast enough to establish a defensible position before the category consolidates around larger incumbents.

Durability Rationale

Living Security operates in a structurally vulnerable market position: the human risk management category is being absorbed by larger security platform incumbents with superior distribution, data estates, and resources, creating meaningful profit pool migration risk. The company's core output — training content and behavioral risk scores — is a digital information product with limited structural protection, and the coordination layer it occupies between enterprise buyers and employees is precisely the kind of middle-layer that AI-enabled platform consolidation displaces. Moderate switching costs and a nascent proprietary signal dataset provide some defense, but are insufficient against the gravitational pull of KnowBe4, Proofpoint, and Microsoft bundling equivalent functionality into existing enterprise security stacks.

Opportunity Rationale

AI is genuinely relevant to Living Security's product roadmap — the core workflows of content generation, behavioral analytics, risk scoring, and remediation guidance are broadly AI-applicable, and AI enables new capabilities like autonomous risk prediction and real-time adaptive training that represent a meaningful expansion of the value proposition. However, the unrealized step-change is moderated by two factors: the company is already AI-native in its positioning (Livvy, the AI risk visibility solution), meaning much of the first-order opportunity is being captured internally; and at 29 employees with a moderate engineering team, the cognitive labor pool available to compress is limited compared to large-workforce services businesses where AI's impact would be transformative at scale.

Key Risks