Plurilock DEFEND is deployed as a low-level, lightweight software agent on Windows and Mac OS systems. Plurilock DEFEND monitors all keyboard and pointer activity on the workstation or endpoint, using behavioral biometrics to verify the identity of the logged-in user every 3-5 seconds. The outcomes of these regular checks can be used to lock the workstation when a user’s identity can no longer be confirmed or to provide detailed identity input to SIEM systems or other security frameworks for further action.