The common way to do this in on-prem deployments is to hard-limit the user to a small amount of hacks (let's say 10). The more a tool like Pegasus is used the

The common way to do this in on-prem deployments is to hard-limit the user to a small amount of hacks (let's say 10). The more a tool like Pegasus is used the more it's exposed and the bigger the risk companies like Verint (or NSO in this case) of losing their 0-days take.