1. A system to provide an always-on embedded anti-theft protection for a platform, the system comprising: a storage including encryption to protect data; a risk behavior logic to detect a potential problem when the data is not encrypted; a core logic component to provide logic to analyze the potential problem and to trigger a security action logic to perform the security action, when the potential problem indicates a theft suspicion; the security action logic, to cause the platform to attempt a transition to a reduced power state when triggered by the core logic component, the transition causing the data to be encrypted.