Personam scales by adding Detectors, not by rearchitecting.
A three-tier federated architecture that deploys in hours and requires no ongoing tuning. One site or forty, the deployment pattern is the same: add Detectors as the network grows, and manage all of them from one place.
Deployment Architecture
Three tiers. Scale by adding Detectors. No rule tuning.
Personam's architecture federates hierarchically. Telemetry flows from Sensor to Detector to Portal, with behavioral analysis performed at the Detector layer, without requiring any centralized data store or manual configuration. Deploy Sensors where you need visibility and point NetFlow at Personam. PCAP, DNS, and Syslog add further context where available.
Layer 1
Sensor
Up to 10 Gb/s network throughput
Passive tap or mirror port, no inline changes
Ingests NetFlow, PCAP, DNS, Syslog
Deploys in under one hour
No agent installation required
Multiple sensors per Detector
Layer 2
Detector
Up to 20 Sensors per Detector
Up to 15,000 entities per Detector
Runs behavioral analytics locally
Automated network discovery
No ongoing detection tuning
Single Windows host, on-premises
Layer 3
Portal / Dashboard
Aggregates every Detector in the estate
One view across every site and enclave
Multi-enclave centralized response
Enterprise dashboard and reporting
SIEM export and workflow automation
Cross-site investigation and correlation
No decryption. No PII exposure. Personam works at the session metadata layer, approximately 200 behavioral data points per session, without inspecting packet payloads or accessing application-layer content. Patient data never leaves your network.
Scale Numbers
Built for environments that can't afford disruption.
1 → n
Detectors Per Deployment
A single 200-bed hospital runs on one Detector. Multi-site systems add Detectors per site and manage them from one Portal.
<1 hr
Time to Deploy
Operational from the first packet. Point NetFlow at Personam, baselining begins immediately
10 Gb/s
Per Sensor Throughput
Line-speed analysis with zero performance impact on the monitored network
15,000
Entities Per Detector
Users, devices, service accounts, IoT, clinical systems, all profiled simultaneously
~200
Behavioral Data Points Per Session
Session metadata only, no payload inspection, no decryption, no PII exposure
0
Rules or Signatures to Maintain
No rules to write. No signatures to update. No thresholds to tune. Self-adapting from day one
See how Personam fits your environment.
Book a 30-minute demo. We'll show you a deployment sized to your network, no slides, no pitch deck.