The internet,
queryable like a database
DNS, BGP, WHOIS, hosting, threat intel, even the physical datacenters — every layer of the internet, joined into one graph.One query does what used to take five tools and a day of pivoting.
The value isn't the data. It's the connections.
Plenty of tools hand you a WHOIS record or a BGP route. Whisper joins every layer of the internet into one graph, so a single query runs from a domain all the way to the datacenter behind it.
One query crosses every layer
One domain, expanded across every layer the graph connects: the IPs it resolves to, the nameservers and mail servers behind it, who owns it, the network announcing its routes, the peers that network talks to, and the datacenters it physically sits in. Each connection is another question you can ask — so the graph isn’t a lookup, it’s a starting point.
Show the one query that built this
A query language, not fixed pivots
Ask any pivot in Cypher over REST — shared registrant, co-hosting, MOAS conflicts, peer ASNs. Not the handful a UI decided to expose.
See the APIBuilt for AI agents
Connect once over MCP and your agent walks the graph itself, citing the exact feeds behind every answer.
Set up MCPAnswers in milliseconds
Sub-millisecond server time across ~7.4B nodes. A three-hop hosting lookup lands in about 110 ms; P99 stays near 236 ms under load.
How it worksNever a stale snapshot
43 threat-intel feeds across 25 categories, refreshed continuously. Freshly resolved domains stream in every few minutes.
About the dataWhat security teams are doing with Whisper
When your tools have a complete map of the internet infrastructure, steps that took days can be taken in seconds.
Threat investigation & response
Enrich an indicator, cluster a campaign, and map a compromise — every dimension and connection joined in one traversal, not stitched from point lookups.
Attack surface & exposure
HotInventory everything an org exposes, then trace the route an attacker takes through it across every layer — and the choke point that severs it. Internal tools stop at the perimeter.
Routing & BGP security
Catch BGP hijacks and audit routing health — MOAS conflicts, RPKI coverage, and the threat-listed space behind a network — on the same rows.
Internet research
Map any organisation or network across the open internet — its complete digital footprint, or a whole ASN’s routes, peers, and the buildings it sits in.
Brand & domain protection
Catch live lookalike and typosquat domains before they phish — generated, filtered to the registered ones, then resolved and scored in a single pass.
Compliance & posture
Audit the postures regulators and frameworks ask for — RPKI route-origin coverage and DNS/email authentication (SPF, DMARC, DNSSEC) — crossed with live infrastructure.
One graph. Three ways in.
Whisper is the infrastructure layer your stack queries when it needs context — over the API, through your SIEM, or straight from an AI agent.
Available as cloud-hosted or on-prem deployment.
Built by internet infrastructure experts
Few security companies can say they helped build the thing they protect. Whisper comes from people who did — engineers with time at RIPE NCC and ICANN, working on internet governance down at the protocol level. Meet the team.
We built Whisper because no tool gave us what we needed: one queryable map of how the internet actually connects. What used to take a research lab, any security team can now have.
in internet infrastructure, DNS, BGP, PKI, and threat intelligence.
from 60+ internet data sources, cross-referenced and continuously updated.
Global coverage across every IP range, ASN, and top-level domain.
Start seeing infrastructure
Connect Whisper once, and every tool in your stack gets sharper.