Abstract: A device, system and method for data monitoring, collection and analysis. A method may include creating one or more context insight records representing an indication of a behavior of a service based on raw footprint data related to use of said service by a population of users, and analyzing said one or more context insight records to detect a dynamically defined anomaly of said service.