Platform

It all runs on
one graph.

46B data points of live internet infrastructure, joined rather than stacked. Ask it questions, or let it decide what your endpoints and agents can reach. Same graph, same second.

Book a DemoFree Sign Up
The Graph

Nine layers. Every one joined to the next.

Everyone in this market holds one or two of these layers. The value is not in holding them. It is in the joins, because every question worth asking crosses three of them.

NamingAddressingNetworkOwnershipCertificatesThreatPhysical
LayerWhat is in it
NamingDNS zones, hostnames, nameservers, DNSSEC, certificate transparency, newly observed domains
AddressingIPv4 and IPv6, CIDR blocks, geolocation to city
NetworkAutonomous systems, prefixes, live BGP, peering, RPKI validation, routing registries
OwnershipOrganisations, WHOIS and RDAP registrants, registrars, regional registries
CertificatesIssuers, subjects, every name a certificate covers, reuse across hosts
Threat93 feed connectors, threat actors, MITRE ATT&CK, Tor relays, TLS fingerprints, known good allowlists
PhysicalSubmarine cables and landings, facilities, internet exchanges, cloud regions

A hyperlink resolves to a host, the host to an address, the address to the network that announces it, and that network to the building it sits in. One traversal, under a millisecond. No flat API answers that.

Two Ways In

Look it up. Or lock it down.

RDAP registrant0.31BGP origin / ASN0.27certificate chain0.24passive DNS0.18verdictowner, ASN, prefix, geo

Whisper Intelligence

Ask the graph anything about any host, address, network or certificate, and get the evidence back with the answer.

See Whisper Intelligence
act now, one actor, 3 hostsrankedlaptop-1182, dest AS204601expandedgraph verdict: unownedevidencereview, 11 hostsranked

Whisper Graph XDR

Turn what the graph knows into what an endpoint or an agent is allowed to reach, enforced at DNS and egress.

See Whisper Graph XDR

Most teams start on the left and move right. Nothing forces the order, and nothing gets replaced on the way.

Integrations

No new tab for anyone to remember.

SplunkMicrosoft SentinelOpenCTIWazuhClaudeOpenAICursor
See all integrations
Deployment

Your data does not have to leave.

ModelFor
CloudFastest to value. EU hosted by default
On premiseThe full engine inside your perimeter, on a single server rather than a cluster you have to operate
Air gappedSigned graph delivery for environments with no egress at all
EU sovereignEuropean operator, European hosting, no United States cloud provider in the data path

Whisper is a Dutch company running its own RIPE-allocated autonomous system.

Bring the host
nobody could identify.

Book a DemoFree Sign Up