diff --git a/profiles/base/accounts/group/secanomaly b/profiles/base/accounts/group/secanomaly
new file mode 100644
index 0000000..d7b2a30
--- /dev/null
+++ b/profiles/base/accounts/group/secanomaly
@@ -0,0 +1,3 @@
+group:secanomaly
+gid:20178
+users:secanomaly
diff --git a/profiles/base/accounts/user/secanomaly b/profiles/base/accounts/user/secanomaly
new file mode 100644
index 0000000..e6669d0
--- /dev/null
+++ b/profiles/base/accounts/user/secanomaly
@@ -0,0 +1,6 @@
+user:secanomaly
+uid:20178
+gid:20178
+gecos:security anomaly detection daemon
+home:/dev/null
+shell:/bin/false