Use cases

Common use cases for NL3’s next gen cybersecurity locking solution.

Cyberattacks can strike when you least expect it. Investing in strong cybersecurity measures like NL3’s locking solution can prevent costly and devastating attacks.

Cyber attackers are always thinking ahead, shouldn’t your organization be, too?

Whether you’re facing business email compromise, phishing, ransomware, or another type of cyber attack, NL3 can help you get one step ahead of the attackers.

As the global landscape of cybersecurity threats continues to evolve, it’s more important than ever for organizations to stay one step ahead of the latest attacks.

That’s where NL3 comes in.

NL3’s bleeding edge cybersecurity locking solution helps organizations proactively detect, analyze, and stop cyber attacks. With NL3, you can rest assured that your organization is prepared to face the most pressing cybersecurity threats head-on without having to constantly live in defensive-mode:

Advanced threat detection. Continually monitor for suspicious activity through audit logs.
Rapid response policy management. Quickly deploy countermeasures to thwart potential attacks and minimize the damage.

MFA is the industry standard – the OG in the tech stack – but threat actors don’t bother with industry standards — they’ve figured out how to bypass MFA and biometrics.

Business email compromise and phishing prevention

Common ways BEC and phishing threats are carried out:

Account compromise or impersonation
Domain spoofing and man-in-the-middle attacks
Malware infection and ransomware
Phishing, vishing, and smishing (aka “SMiShing”)

NL3 solution:

Using NL3’s scheduled policies, you can set-up automatic locking to prevent business email compromise and phishing attacks. Use NL3’s multiapproval policies to add an extra level of oversight to your authentication system.

-HOW IT WORKS-

1 | Preemptive policy set-up

Let’s say Acme Healthcare has a group of employees or contractors that don’t require access between 10pm and 6am every day. Acme sets up a scheduled policy to lock the users’ accounts from 10pm to 6am daily. When the scheduled policy is set up, Acme can either to allow users to unlock their account and override the lock to login or disallow all attempts during the locking period.

2 | Account access attempt occurs

At 11pm, a Acme Healthcare user within the scheduled policy group tries to access an application protected by NL3’s protection check feature, which is called upon the attempt. Since the policy was applied by Acme, the user account was locked and not accessible without an exception.

3 | Account protection check allows/disallows access

Account protection is allowed or disallowed automatically based on how the schedule policy was setup by Acme Healthcare.

If Acme’s policy was set up to allow user overrides, the user will be sent a push notification to verify their intent to unlock the account and login. If the user selects “yes”, they can return to login; if the user selects “no”, the user is not logged able to login.

If Acme’s policy was setup with disallow users to override, no verification check is sent to the user to override and approve. The status is returned as locked, and the user is not able to login.

4 | Account protection check logging

NL3 system records a real-time history of each action for Acme Healthcare, from the initial attempt to any user-initiated approvals or disapprovals.

-HOW IT WORKS-

1 | Preemptive policy set-up

Let’s say Stark SaaS Co. wants to improve the speed of malware threat detection and response. Stark sets up a scheduled alert policy (called “Malware detected alert policy”) and assigns it to all user groups to preemptively lock all accounts instantly upon malware detection.

2 | Malware attempt occurs

At 3am, Stark SaaS Co.’s malware detection system discovers an attempted breach using the credentials from a user in the scheduled policy group. Stark’s “Malware detected alert policy” is automatically executed by NL3’s protection check feature, which is called upon the attempt.

3 | Account protection check disallows access

Since the policy was applied by Stark SaaS Co., all user accounts in the group are locked and not accessible without an exception allowing an unlock action.

4 | Account protection check logging

NL3 system records a history of each action in real-time in Stark SaaS Co.’s action log, from the initial malware detection to any approvals or disapprovals resulting from verification checks.

Ransomware prevention

Common ways ransomware attacks are carried out:

Phishing
Domain impersonation
Cybersecurity theater (negligent to update processes or tech)

NL3 solution:

Immediately lock accounts using NL3 alert policies and prevent account access ahead of ransomware and malware attacks. For an additional level of authenticaion oversight, implement NL3 multiapproval policies.

Access oversight and fraud prevention

Common ways user access is compromised and fraudulent threats are carried out:

Broken authentication from weak or reused passwords
Missing or ineffective processes or tools for employee access management
Missing or ineffective processes or tools for contractor access management

NL3 solution:

Require secondary approval prior to unlocking accounts for access by setting up and applying NL3’s multiapproval policies.

-HOW IT WORKS-

1 | Preemptive policy set-up

Let’s say Fells Wargo Bank wants to add an extra level or oversight to its authentication systems. Fells Wargo sets up a multiapproval policy to lock access to all users’ accounts in the group unless secondary approval from the customer is verified.

2 | Account access attempt occurs

2.30pm, a banking customer contacts a Fells Wargo Bank service agent to assist with a funds transfer request between bank accounts.

When the service agent attempts to gain account access to initiate the funds transfer, the customer‘s bank account is protected by NL3’s protection check feature., which is called upon the attempt. Since the multiapproval policy was applied by Fells Wargo, the user account was locked and not accessible without customer approval.

3 | Account protection check allows/disallows access

Fells Wargo Bank’s multiapproval policy triggers a push request to the customer asking them to approve unlocking of their account – essentially making it possible for only the customer to override the lock to temporarily grant access to the agent. This way, an agent is prevented from directly accessing the customer’s account without their knowledge or consent.

4 | Account protection check logging

The NL3 system records a history of each multiapproval policy action in real-time, from the initial 3rd party request to any user-enacted approvals or disapprovals that occur during the push request that is sent to the end-customer.

Use cases

Cyber attackers are always thinking ahead, shouldn’t your organization be, too?

Business email compromise and phishing prevention

Ransomware prevention

Access oversight and fraud prevention

Quick Links

Get In Touch