Risk Signals

Risk signals are the structured evidence a detection system produces alongside each result — which manipulation indicators fired, on which channel, in which workflow, and when. Individually they explain one decision; aggregated, they describe your threat surface. ScamAI's Risk Signals layer rolls result telemetry up into heatmaps and trends, so you can see where synthetic-media activity concentrates, how the attack mix shifts week over week, and where the same forged template keeps reappearing.

The raw material is result telemetry: every detection check records what fired, where, and when. Trend monitoring aggregates that stream by channel, team, and workflow, so shifts become visible — a new generation tool in onboarding, injection attempts concentrating on one product, attack volume moving to off-hours. Effective teams review trends on a fixed cadence with a named owner, then respond through policy: tightening thresholds on workflows under pressure or routing the riskiest sessions to human review.

Yes — that feedback loop is the point of the analytics layer. ScamAI results are probabilistic confidence scores rather than fixed yes/no answers, so thresholds are yours to set, and analytics tell you when to move them. If trend data shows a campaign concentrating on one workflow, lower that workflow's auto-decline threshold or widen its human-review band — a policy change, not a redeploy. Best practice: decide in advance which patterns trigger which changes, so tuning is documented policy.