In network security, the focus is typically on proving presence, verifying that an authorized user is interacting with the system. However, equally critical is the ability to prove absence, the capacity to confirm when an authorized user is not present. This seemingly simple concept holds profound implications for preventing many of today’s most damaging cyber exploits, such as Florida’s Oldsmar Water Plant hack and the infamous SolarWinds breach.