Scores tell you how bad it is. Labels tell you what it is — and why it matters.
Every account gets a tier, a dominant signal, a behavioral profile, and network context. One classification. Every report. Zero ambiguity. The risk manager has everything they need to make the right call.
Example: CONFIRMED — Speed exploitation pattern. Datacenter origin. Part of a multi-account identity cluster. Measurable spread leakage on a single instrument. The classification gives the risk manager full context to decide the next step.
Five confidence levels from confirmed to clean.
Which engine fired strongest.
What kind of behavior, and why it matters.
Cluster membership and coordination warnings.
Enough detail for the risk manager to act with confidence.
Other platforms: “Score: 73. Investigate.”
PNL Factory: A verdict. A classification. A dollar impact. An action. In one line.
