Coming to the Graph
Capabilities the engine can model that aren't yet live on the public graph — popularity ranking, sanctions flags, ASN reputation, RPKI source provenance, BGP relationship typing, and live subscriptions.
Coming to the Graph Documentation
WhisperGraph grows continuously. This page lists capabilities the engine can model that are not yet populated or exposed on the public graph — so you know they're coming, and so you don't build a query on something that returns nothing today.
Everything documented in the Graph Schema, Procedure Reference, and the Cypher Query Cookbook is live and reproducible right now. The items below are not — treat them as a preview, not a contract, and check back as they light up.
Coming to the graph
Popularity & trust ranking
A per-domain popularity rank (and the sources behind it) for prioritizing and whitelisting by real-world prominence. The popularity/trust feeds (Tranco, Cloudflare Radar) are already live as FEED_SOURCE nodes; a ranked score on each hostname is on the way.
Node-level sanctions flags
A sanctions flag directly on indicators (beyond the OFAC SDN sanctioned-crypto feeds, which are already live under the OFAC SDN Sanctions category). This will let you filter sanctioned infrastructure in a single property read.
Exfiltration-destination signals
A flag marking endpoints commonly used as data-exfiltration destinations, for DLP and insider-risk workflows.
ASN reputation from behavior
Network-science reputation on ASN nodes — AS rank, customer-cone size, peering degree, and a resolved organization name — to score how large, central, and trustworthy a network is, beyond a simple blocklist hit.
RPKI source provenance
Distinguishing whether a route origin authorization comes from a published RPKI ROA versus an IRR route object. ROA coverage is already live (ROA nodes + ROA_AUTHORIZES_PREFIX / ROA_AUTHORIZES_ORIGIN); the source distinction is coming.
BGP relationship classification
Typing the ASN↔ASN BGP_NEIGHBOR edge as peer-to-peer vs. customer-to-provider, so you can reason about transit hierarchy, not just adjacency.
Live subscriptions & alerting
Subscribing to a query and receiving a push when the graph changes — turning a point-in-time investigation into continuous monitoring.
Need one of these sooner for an evaluation or integration? Tell us what you're building — roadmap order follows what customers ask for.