Abstract

InsiderOUT is a cybersecurity platform that identifies insider threats by deploying realistic tokenized documents and tracking user interactions with them. When a document is opened, the system records the event and updates the associated user’s risk score, providing direct evidence of potentially suspicious behavior. The scoring model evaluates role, severity, and behavioral patterns to help analysts prioritize investigations. Built with Angular, ASP.NET, Python, and SQL Server, InsiderOUT integrates document generation, incident tracking, and risk scoring into a cohesive security solution.