Whoever looks after security
A short queue ordered by relevance, with the fix, the block list and the ticket ready to paste.
Threat intel for small IT teams, without the enterprise price. We score every public threat feed against your sector, suppliers and software. You get a short list, the reason for each, and whether your own tools would have caught it.
Try the demoFree check of your domainRequest access
Fictional company, sample data. No account. Nothing saved.
Public sources, read every morning. Not partners or customers.
Each threat gets three answers from what your tools already know: detected, blocked, patched.
Nothing is simulated. Where it cannot tell, it says not known.
Sector, country, domains, suppliers, software. Connect a scanner or endpoint tool to count your real devices.
Exploited flaws, actors, leaked credentials, lookalikes and supplier incidents, scored for you.
Most urgent first, each with its reason. The rest stays out of the way but searchable.
Indicators, tickets and chat alerts. Off until you switch them on.
Read only first. Writing to a tool is off until an owner switches it on. Most connectors are new and marked unvalidated until a first customer has run them.
Known exploited flaws matched to what you run. Confirmed on your devices comes first.
Actors ranked by how directly they point at you, plus the techniques you cannot yet detect.
Breaches, leak site claims and domain changes, and who is overdue a check.
Leaked credentials and new lookalike domains, grouped into campaigns you can block.
Quarterly figures as sentences, with the numbers behind each one.
Every estimate is marked. Each model tests itself and switches off when it cannot beat chance.
A short queue ordered by relevance, with the fix, the block list and the ticket ready to paste.
Who owns what, what is overdue, and a monthly proof of value to show the business.
The verdict, the few decisions that need you, and anything that may need reporting.
See why an item ranks where it does, and disagree.
Row level security separates every organisation. Keys sit in a vault.
How data is handledManaged Postgres and the app, both in London. Providers and gaps are listed openly.
Providers and retentionPublic and open sources: CISA, abuse.ch, MISP and TAXII feeds, certificate transparency, registration data, and any feed you connect. No private feed is claimed. Feed health shows each source and when it last ran.
No. It says what matters and what to do, then feeds the tools you run: Defender, Sentinel, Splunk, Elastic, ServiceNow, Jira, Teams and Slack, plus a TAXII feed and JSON API. Anything that writes to your tools is off until an owner or admin switches it on.
It reads what your tools already hold: imported detection rules, indicators you blocked through it, and scanner or Defender findings. Nothing is simulated or run on your network. If it cannot tell, it says not known.
It ranks the actors behind your highest scoring items and says why: your sector or country, software you run, or indicators in your own logs. It also shows the techniques you have no rule for. A ranking with reasons, not attribution.
Row level security in the database, and keys in a vault. The security page has the detail.
A few small models run on your own data: tag suggestions, exploit likeness, surges and trends. Every suggestion is marked estimated. Each model tests itself and switches off when it cannot beat chance. Your Right and Wrong marks teach it, and a page explains each one.
No. Every score shows its reasons so an analyst can disagree. Reporting prompts are guidance, not legal advice.
From £149 a month for a team of under fifty, £349 for up to 250 staff and £699 up to a thousand; two months free paid annually. The pricing page lists what each plan includes.
A managed Postgres database in London. The Trust page lists providers, retention and what we do not yet have, such as certifications and a signed processing agreement template.
Access is by invitation while we onboard the first teams. Tell us about yours and we reply by email.
Prefer to look first? Open the demo. No account needed.