HUMAN Security: what it is, and when a specialist fits better

HUMAN has the strongest threat-research reputation in this market and it shows in the product. If you want a vendor whose researchers publish takedowns of botnets by name, HUMAN is that vendor. The trade-offs are in the day-to-day operation rather than the detection.

What HUMAN is

The Human Defense Platform, built around Sightline for attack analytics and AgenticTrust for AI agent governance. Detection covers web, mobile and APIs, with a heavy emphasis on ad fraud and transaction abuse alongside classic bot mitigation.

Where it leads

Forrester credits three things specifically. Attack profiles, which give richer attack analytics than most of the category. An out-of-the-box AI agent library that Forrester calls thorough, which matters because keeping an agent allow-list current by hand is a real cost. And a trust-governance vision Forrester describes as thoughtful, covering how agent trust gets managed over time rather than at a single decision point.

Where Forrester identified gaps

Customers described the management UI as mixed, and easier data access came up as a wish-list item. HUMAN is also missing cost-savings reporting in its transaction-assurance dashboards, the number a CFO asks for at renewal.

Data access is the point worth pressing in an evaluation. Ask to see how an analyst on your team pulls the raw events behind a specific block, and how those events reach the SIEM you already run.

What it costs

Quoted. HUMAN publishes no entry price.

Where data is processed

Primarily US-hosted. It is the main constraint for European buyers whose data protection agreement cannot accommodate US processing. Prosopo keeps processing inside the EU on Protect, and on the Custom plan can give a customer a database of their own where their visitors' data must not sit beside anyone else's.

How a block gets explained

Through Sightline. Forrester did not mark HUMAN down for explainability, so this is a genuine capability rather than a gap. What Sightline gives you is analytics over attacks. What it does not give you is the literal reason attached to the individual verdict.

Who authors the rules

Vendor-led, with customer configuration. HUMAN's model assumes their research team is doing the heavy lifting on detection, which for most buyers is the point.

Which buyers HUMAN suits

HUMAN is the stronger fit for organisations buying threat research as the primary value, needing ad fraud and transaction abuse from the same vendor, or wanting a maintained agent library. It also suits procurement that requires completed SOC 2 and ISO 27001 attestations today; Prosopo's ISO 27001 certification is in progress.

How Prosopo compares

Prosopo is the better answer on these points.

EU data processing. Processing can be restricted entirely to the EU on Protect. Prosopo also runs points of presence in the US, LATAM and APAC, so an EU processing requirement does not slow the service in other markets.

If you want the block reason to be readable rather than an analytics view. Every Prosopo block returns the string that matched, and every event behind it can be inspected and exported.

If your own team wants to write and deploy an Access Rule during an incident without a vendor in the loop.

Side by side

The full read of the Wave is in our Forrester Wave breakdown. If you are replacing HUMAN, the HUMAN Security alternatives guide compares the options.