User behavior monitoring

Hold authorized users accountable, investigate suspicious behavior, respond in real-time, and prevent the next crime using a cross platform “surveillance system” that captures user behavior and provides visual replay of user activity within your corporate applications.

Anchor: Overview

The Challenge

Cyber threats are increasingly aggressive, complex, and frequent. Today your investments in security protect against malware and unauthorized access, but that alone can't truly protect you. 78% of cyber fraud is committed by or with employees. Without visibility into users' behavior, organizations are missing a critical layer of defense and are less able to stop fraud and data breaches before they happen.

Our Solution

Bottomline's user behavior monitoring solution offers the next layer of defense, providing a virtual "surveillance camera" to deliver unparalleled visibility and real-time alerts based on internal and external user activity. This first-of-its-kind, cross-platform surveillance system offers unparalleled visibility of internal and external end-user activity in corporate applications across the enterprise. The solution provides a critical infrastructure for combating internal fraud and information leakage, enabling proactive response to internal and external threats, rather than “after-the-fact” reactive response. With complete recording, monitoring, and analysis of authorized user activities across all major platforms, security officers can act on suspicious behavior as it occurs, and use the intelligence gathered to preempt crime in the future.

Anchor: Resources

Customer Success Story

Delaware Justice Information Services Protects Sensitive Information from Internal Misuse and Fraud


Bottomline User Behavior Monitoring


Bottomline User Behavior Monitoring

Anchor: Benefits


  • Create accountability among authorized users.
  • Shift from transaction tracking to human behavior monitoring.
  • Increase organizational security with central visibility into user behavior across all sensitive applications.
  • Act on suspicious behavior as it occurs, rather than reacting after crimes and fraud have been perpetrated.
  • Reduce investigation time significantly and improve its effectiveness in identifying, analyzing, and documenting suspicious behavior with visual replay of user sessions.
  • Over time, use the intelligence the system gathers to preempt crime, data leakage, and theft before it happens.
70% of companies suffer from at least one type of fraud
Anchor: Functionality
Real-time investigation while the suspicious activity is occurring


  • Complete visibility into end-user activity with visual replay of every screen, keystroke, and flow of screens in thin-client applications across all major platforms.
  • Record of activity of all end users, including privileged IT users.
  • Real-time investigation while the suspicious activity is occurring, or post-event via examination of historical recorded data.
  • Simple set-up and integration to quickly start recording user activity and prevent fraud and data leakage.
  • Central system of record for user behavior, eliminating information silos that provide an advantage to criminals and malicious insiders.

All Bottomline Cyber Fraud and Risk Management solutions incorporate Intellinx technology and use a common platform to capture, normalize, analyze, and act. With this platform all data is captured, normalized, encrypted, and signed—making it easy to analyze suspicious behavior over time and across applications, analyze and prevent new types of fraud, ensure compliance, and provide legally admissible forensic evidence. A common user interface for all types of fraud and compliance analysis maximizes productivity of network operators and fraud investigators. Learn more about the Bottomline Cyber Fraud and Risk Management platform.

Anchor: Testimonial

Customer Testimonials

"Intellinx allows our fraud investigators to visually replay screen data of both current and historical transactions and receive real-time alerts on suspicious events."
Tony Spinelli, Chief Security & Compliance Officer, Equifax