Right-click to expand
An entity's known links pour onto the canvas in one move.
GRAPH Investigate by seeing the links
Entity Graph
Connect domains, people, emails, passwords, technologies, CVEs and actors on a single canvas. Save the map, share it with the team, add it to a report as an image.
Screenshots are taken from a demo tenant; organisation names and data are entirely fictional.
An identity-trail investigation usually starts with one email address: which leaks mention it, which passwords were used, which corporate subdomains it can reach? The Entity Graph answers with links you open by right-clicking. Saved map examples: attack surface and CVE chain, an APT group's finance-sector campaign map, an employee's identity trail.
What it does
Saved maps
Investigations are saved by name, with undo/redo, and downloaded as images.
Mixed entity types
Domain, subdomain, technology, CVE, note, person, email, password and compromised asset on the same graph.
What you get
- An incident report gets context in a single image.
- The investigation lives in a saved map, not in one person's head.
- The weak link in the chain becomes visible.
Scenarios featuring this module
Employee credentials in a stealer log
An infostealer on an employee's personal device exfiltrated credentials and an active session cookie for the corporate VPN portal. The record surfaced inside a bulk sale package on …
4 modules
Third-party risk through a supplier breach
The supplier's customer portal was leaked. The published dataset included API keys, webhook URLs and technical contact emails.
3 modules
Other modules
Next step
What shows up on your own surface?
In a 30-minute session we run a live scan against your own domains.