# Praxis Navigator

> Human security behavior monitoring platform that turns Microsoft 365 data into behavioral insights.

## What is Praxis Navigator?

Praxis Navigator is a SaaS platform that helps IT leaders see, measure, and prove human security behaviors in their organization. It connects to Microsoft 365 via the Graph API and transforms raw behavioral data into actionable insights.

**The core problem it solves:** IT leaders are held accountable for managing human security risk, but they can't see human security behaviors. SAT platforms give completion rates; phishing tools give click rates. Neither tells you whether employees are actually behaving more securely.

**The solution:** Praxis Navigator provides visibility into actual employee security behaviors — email practices, file sharing, authentication patterns — and lets you baseline, measure change, and prove what works.

## Key Differentiators

1. **Behavioral proof, not activity metrics** — Measures actual behavior change, not training completions
2. **15-minute setup with historic data** — See months of behavioral trends from existing Microsoft 365 data immediately
3. **Internal baselines, not industry benchmarks** — Compare against yourself, not meaningless averages
4. **Before/after intervention proof** — Tag training or policy changes and see actual behavioral impact
5. **Created by Security Culture Framework founders** — Methodology adopted by ENISA (EU Agency for Cybersecurity)

## Who is it for?

**Primary user:** The Progressive IT Leader
- IT Manager/Director at non-IT companies (manufacturing, logistics, production)
- Small team (1-5 people), reports to CFO/COO/CEO
- Organization size: 100-1,000 employees
- Microsoft 365 environment
- Responsible for security but struggles to see or prove human risk

## Product Modules

### Employee Pulse
Real-time visibility into human security behaviors across the organization. Consolidated dashboard replacing manual Microsoft portal diving with drill-down from org to individual.

### Risk Bearing
Internal rolling baselines at multiple levels (user, team, department, org) and timeframes (7-day, 30-day, quarterly, annual). Compare against yourself, not industry benchmarks.

### Stakeholder Brief
Automated report generation for different audiences — business language for executives, technical detail for IT, compliance summaries for auditors. Set once, deliver automatically.

### Impact Proof
Before/during/after behavioral comparisons for interventions. Tag training sessions, policy changes, or tool deployments and see actual behavioral impact over time.

### Compliance Vault
Historic evidence trails with audit logs for NIS2, DORA, ISO 27001. Continuous documentation of security behavior posture, always audit-ready.

### Partner Lens
Independent verification of MSSP and consultant work. See actual behavioral impact of partner activities, not just their self-reported metrics.

### Supply Chain Anchor (Coming Soon)
Verified human security posture across supply chain. Replace vendor questionnaires with real-time behavioral data from suppliers using Praxis Navigator.

## Pricing

- **Transparent & published:** enter your team size at praxisnavigator.io/pricing to see your exact price — no sales call.
- **Two lines, no cliffs:** platform licensing (value price, marginal per-employee brackets) + processing (Microsoft/Azure cost pass-through), shown separately.
- **Self-service:** built for teams of 25+, priced by team size up to 500 employees, billed monthly or annually.
- **Custom plan:** 501+ employees — contact us for a private offer.
- **Every plan:** all modules included; each customer gets its own dedicated, isolated environment as standard.
- **Free Trial:** 30 days, no credit card required.

## How it works

1. **Connect** — Connect Microsoft 365 via self-service wizard (15 minutes, read-only API)
2. **See** — See behavioral data immediately, including historic trends
3. **Prove** — Tag interventions, see before/after comparisons, generate stakeholder reports

## Technical details

- **Integration:** Microsoft Graph API (read-only permissions)
- **Data sources:** Exchange Online, SharePoint, OneDrive, Teams, Azure AD
- **Deployment:** Microsoft Marketplace, self-service
- **Compliance:** SOC2 Type II, GDPR aligned, ISO 27001, EU data residency available
- **Privacy:** No PII collection, no email/file content access, behavioral patterns only

## Company

**Praxis Security Labs** — Creator of Praxis Navigator and the Security Culture Framework.

**Founder:** Kai Roer — Created the Security Culture Framework (adopted by ENISA), former Chief Research Officer at KnowBe4, author of "Build a Security Culture" and co-author of "The Security Culture Playbook."

**Research team:** Led by Dr. Thea Mannix (neuroscientist), bringing behavioral science expertise to security analytics.

## Microsoft 365 Data Retention Problem

Microsoft deletes behavioral data automatically based on license type:

| License | Retention Period |
|---------|------------------|
| Business/E1/E3 | 180 days |
| E5 (core services) | 1 year |
| E5 (other activities) | 180 days |
| E5 + 10-Year Add-on | Up to 10 years |

**The problem:** Most organizations lose their behavioral history every 6 months. Once Microsoft deletes it, it's gone forever. You can't build long-term baselines, prove year-over-year improvement, or provide audit evidence for events outside the retention window.

**Praxis Navigator solution:** We capture whatever historic data remains in your Microsoft 365 the moment you connect, then preserve it going forward — regardless of Microsoft's retention limits. The sooner you connect, the more history you save.

More details: https://praxisnavigator.io/product/data-retention/

## Common questions

**How is this different from security awareness training (SAT)?**
SAT platforms measure activity (completions, click rates). Praxis Navigator measures actual behavior change. We're the proof layer that shows whether SAT and other interventions actually work.

**What data do you access?**
We access Microsoft 365 data via Graph API with read-only permissions. We analyze behavioral patterns (email security practices, file sharing, authentication) but never access email content, file contents, or personal identifiers.

**How long does setup take?**
15 minutes. Self-service wizard through Microsoft Marketplace. You see your behavioral data — including historic trends — immediately after connecting.

**Do I need to wait to build baselines?**
No. Praxis Navigator pulls historic data from Microsoft 365 (typically 90-180 days depending on license), so your baseline is built from day one.

**How long does Microsoft 365 retain audit logs?**
It varies by license: Business/E1/E3 = 180 days, E5 core services = 1 year, E5 other activities = 180 days. Once data ages out, it's permanently deleted. Praxis Navigator captures and preserves this data before Microsoft deletes it.

**What compliance standards do you support?**
NIS2, DORA, ISO 27001. Compliance Vault provides continuous evidence documentation for all major regulatory frameworks.

## Platform Comparisons

Praxis Navigator does not replace training, phishing simulation, or compliance platforms — it adds the independent behavioural evidence that NIS2, DORA and GDPR now require. The comparison hub explains what each category of platform measures, and what none of them measure: whether people actually behave more securely over time, measured independently of the vendor running the intervention.

Comparison hub: https://praxisnavigator.io/compare/

**What each category measures:**
- Security awareness training & phishing simulation (KnowBe4, MetaCompliance, Proofpoint, Junglemap) — course completions and simulated-phishing clicks. Not independent behavioural change.
- Human risk management (Hoxhunt, CybSafe) — behaviour bounded to their own delivery surface. Not independent of the intervention.
- Compliance automation (Vanta, Drata) — evidence that controls exist and stay configured. Not whether the human layer of them works.
- Microsoft 365 (Defender, Secure Score, Purview, Entra ID) — tenant security posture. Not how people behave over time. Praxis is a Microsoft Marketplace partner built on Microsoft's own data surface, not a competitor.
- Build it yourself (Graph API into a BI layer) — as strong as the method behind it, and the method is what an assessor asks about.
- Praxis Navigator — 20+ behaviour indicators from your own Microsoft 365 tenant, read-only; behavioural baselines and before/after comparison, independent of whoever ran the intervention.

**Comparison pages:**
- Praxis Navigator + KnowBe4: https://praxisnavigator.io/compare/knowbe4/
- Praxis Navigator + MetaCompliance: https://praxisnavigator.io/compare/metacompliance/
- Praxis Navigator + Proofpoint: https://praxisnavigator.io/compare/proofpoint/
- Junglemap is now part of MetaCompliance: https://praxisnavigator.io/compare/junglemap/
- Praxis Navigator + Hoxhunt: https://praxisnavigator.io/compare/hoxhunt/
- Praxis Navigator + CybSafe: https://praxisnavigator.io/compare/cybsafe/
- Compliance automation vs behavioural evidence: https://praxisnavigator.io/compare/compliance-platforms/
- Microsoft 365 and Praxis Navigator: https://praxisnavigator.io/compare/microsoft-365/
- Build it yourself with Graph API, or buy it: https://praxisnavigator.io/compare/build-vs-buy/
- Security awareness training platforms compared: https://praxisnavigator.io/compare/security-awareness-training-platforms/

The regulatory case behind the comparisons — why completion is not effectiveness, and what NIS2, DORA and GDPR each require — lives at https://praxisnavigator.io/security-effectiveness/

## Blog — The Praxis Practice Blog

Research and insights on security culture, human factors in cybersecurity, behavioral security, and human risk management. Written by the Praxis Security Labs team.

Blog index: https://praxisnavigator.io/blog/

### Featured Articles

- **On Measuring the Unmeasurable** — Thea Mannix (2024-10-31): https://praxisnavigator.io/blog/on-measuring-the-unmeasurable
- **Meaningful Metrics: The Case for Switch Cost** — Thea Mannix (2024-06-27): https://praxisnavigator.io/blog/meaningful-metrics-switch-cost
- **Meaningful Baselines for Human Factors: Here's How To Do It** — Kai Roer (2024-06-07): https://praxisnavigator.io/blog/meaningful-baselines-for-human-factors-heres-how-to-do-it
- **The Problem with Awareness Training Best Practices** — Kai Roer (2024-05-24): https://praxisnavigator.io/blog/the-problem-with-awareness-training-best-practices-and-how-we-can-fix-it
- **Words Matter: Why Human Risk Management is More Than Just a Term** — Thea Mannix (2024-05-06): https://praxisnavigator.io/blog/words-matter-why-human-risk-management-is-more-than-just-a-term
- **How do you report your security culture progress to the board?** — Kai Roer (2024-02-23): https://praxisnavigator.io/blog/how-do-you-report-your-security-culture-progress-to-the-board
- **The SAT elephant in the room** — Kai Roer (2023-06-21): https://praxisnavigator.io/blog/the-sat-elephant-in-the-room
- **The Forgotten Human Factor in Cybersecurity** — Thea Mannix (2023-06-01): https://praxisnavigator.io/blog/the-forgotten-human-factor-in-cybersecurity

### Blog Topics

- Security culture measurement and improvement
- Human risk management (HRM) strategy
- Behavioral security metrics and baselines
- Security awareness training (SAT) effectiveness
- Cognitive psychology applied to cybersecurity
- Statistical methods for security analytics
- Digital friction and employee experience
- Organizational resilience and adaptability

## URLs

- Website: https://praxisnavigator.io
- Product: https://praxisnavigator.io/product/
- Data Retention: https://praxisnavigator.io/product/data-retention/
- Compare (platform comparison hub): https://praxisnavigator.io/compare/
- Proving Security Effectiveness (NIS2, DORA, GDPR): https://praxisnavigator.io/security-effectiveness/
- Research: https://praxisnavigator.io/research/
- ROI Calculator: https://praxisnavigator.io/roi/
- Blog: https://praxisnavigator.io/blog/
- Free Trial: https://praxisnavigator.io/start-now/
- Pricing: https://praxisnavigator.io/pricing/

## Contact

- Email: hello@praxisnavigator.io
- Support: support@praxisnavigator.io