How This Briefing Works
This report opens with key findings, then maps the gaps between what Introvoke discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.
Key Findings
Key Findings
2 detections across 2 sites
Disclosure Gaps
Claims vs. Observed Behavior
1 gaps
Pending Analysis
UNKNOWN
They Claim
“Claims extraction pending”
Observed Behavior
CDT analysis needed — session replay vendors capture behavioral data by design
Customer Impact
What This Means For You
No measurable behavioral risk from current detection data. Session replay vendors capture granular user interaction data by design — including mouse movements, scroll depth, and potentially form inputs. Runtime analysis is critical to determine capture scope and consent compliance.
Recommended Actions
What To Do About It
Role-specific actions based on observed behavior
If You Use Introvoke
- →audit recording scope and PII masking configuration
- →verify consent gating for session recording
If You're Evaluating Introvoke
- →recon investigation for behavioral capture scope and data exfiltration patterns
Negotiation Leverage
- →Baseline detection only — session replay vendors require behavioral audit
- →Session replay inherently captures behavioral biometrics (BTI-C06) and interaction data
- →Verify PII masking, recording consent, and data retention policies
IOC Manifest
IOC Manifest
2 INDICATORS
Indicators of compromise across 2 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.
No indicators in this category
Ecosystem
Ecosystem & Supply Chain
Introvoke operates in the session replay and user experience analytics market. Session replay vendors inherently capture detailed behavioral data including interaction patterns and form content.
Evidence
Evidence Artifacts
Artifacts collected during analysis, available with evidence-tier access.
HAR Capture
Complete network capture with all requests and responses
IOC Manifest
3 detection signatures across scripts, domains, cookies, and network endpoints