1. A system comprising: a motion detector to detect movement of a platform; a pairing logic to pair the platform with a device, the device reached via a network connection; an arming logic to arm the platform when an arming command is received; a risk behavior logic to detect a potential problem when the platform is armed, the potential problem differentiated based on the movement of the platform and a proximity of the device; a core logic component to analyze the potential problem, and to move the platform to a suspecting state, when the potential problem indicates a theft suspicion, a combination of the motion detector and the risk behavior logic to enable the system to protect an in-transit platform while also permitting a user to be away from a stationary platform, wherein in the suspecting state the system to transmit movement information from the motion detector and a BSSID and RSSI sensor, the movement information to be evaluated by movement evaluator in a server to determine whether the platform is being stolen.