Features

Every module's findings land in a single case format. The team prioritises from the command screen, owns each case and automates repeat work with playbooks.

• Tactical Command Center
• Cases
• Case Manager
• Entity Graph
• Global Discovery
• SOC Armory

Every externally visible asset, from domains to VIP staff, is inventoried, scanned and given a 0–100 risk score and a letter grade. What is exposed, how risky it is and what changed this week — on one screen.

• Monitored Assets
• Asset Profile and Risk Score
• ASM Findings

Domains, social profiles, ads and mobile apps impersonating your brand are watched across four channels; each finding is scored, classified by AI and tied to a takedown request.

• Phishing Monitoring
• Takedown Management

Posts from forums, marketplaces and closed channels are archived, and those targeting you, your sector or your country are separated out. The actor behind them — profile, techniques, history — sits in the same place.

• Threat Actors
• Dark Web Posts
• Briefing Room

Scored IP, domain, URL and hash indicators are listed with context; filtered lists flow to your firewall and SIEM, and hunting rules land in your SOC tools in eight formats.

• IP Feed
• IoC Feed
• IoC Lists
• Hunting Rules

Ransomware leak sites, stealer log markets, the CVE stream, leak databases and security news are scored against your organisation. When an outside threat meets inside exposure, it becomes a case.

• Ransomware Telemetry
• Underground Economy
• Vulnerability Intelligence
• Compromised Assets
• Intelligence Wire

Every module is exposed through a REST API with an OpenAPI schema. Scoped keys, team-based permissions and notification rules fit the platform to how your organisation works.

• REST API
• Access Control
• Users and Teams
• Notifications