> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rad.security/llms.txt
> Use this file to discover all available pages before exploring further.

# Runtime Security Model

> Deep runtime protection that drives autonomous SecOps decisions.

# Runtime Security Model

RAD continuously observes runtime behavior to detect drifts, anomalies, and active threats.

* **Real-time Introspection**: Process, syscall, and network analysis.
* **Behavioral Fingerprinting**: Detect anomalous activity, including novel attacks and zero-days.
* **Policy Enforcement**: Guardrails for safe automated actions.

<CardGroup cols={3}>
  <Card title="Real-time Introspection" icon="search" href="#real-time-introspection">
    Process, syscall, and network analysis for comprehensive visibility.
  </Card>

  <Card title="Behavioral Fingerprinting" icon="brain" href="#behavioral-fingerprinting">
    Identify anomalous activity based on your usage to spot novel attack patterns.
  </Card>

  <Card title="Policy Enforcement" icon="shield" href="#policy-enforcement">
    Guardrails for safe automated actions and responses.
  </Card>
</CardGroup>