Saporo identified a few significant gaps in the market by recognizing the fragmented nature of security analysis—the prevalence of false positives and negatives straining resources. There was a gap between available solutions and actual needs. In response, Saporo aimed to change the cybersecurity approach and focus on identity and permissions.

Their approach emphasizes proactive problem-solving over reactive measures. How? Saporo uses graph theory along with AI to automatically prioritize security risks at scale, based on business and security impact. They use graph database technology to map complex relationships and paths attackers use, making cybersecurity more intuitive and preemptive, especially in environments dealing with sensitive information.

Saporo anticipates how attackers can use the system configuration weaknesses and user access permissions. They help protect platforms like Microsoft Active Directory, Azure, AWS, and Okta.
In this case, permissions are connections that represent relationships between resources and users. When translating those connections into the graph domain, they become nodes and edges forming a graph. From the beginning, Saporo knew that graph technology was the way to go as they had relationship-heavy data. To paraphrase John Lambert, Engineer and General Manager from the Microsoft Threat Center, “Defenders think in lists. Attackers think in graphs”. As long as this is true, attackers win. Cyber attackers see the access points in a hierarchical and not in a flat way. They primarily want to find routes to assets. On the other hand, defenders typically think in terms of lists.
The graph-based approach contrasts with traditional, list-based defenses. It’s faster, computes a high number of paths, and is more effective in identifying and simulating attacker strategies. All before the actual attack even happens.
Okay, so how does Memgraph play into this, and why does Saporo use Memgraph?