Infrastructure Security Blog
Stay up to date with the latest insights on infrastructure intelligence, threat hunting, and cybersecurity research from the Whisper Security team.
Prince of Persia: mapping the backend, and a reserve of domains staged for what comes next
An investigation into Prince of Persia’s backend infrastructure, revealing a previously unreported server, 58 dormant domains, and DNS patterns that can expose potential C2 infrastructure before activation.
The infrastructure you depend on but don't own
A single DNSSEC failure at Germany’s .de registry made millions of domains unreachable. The outage shows how infrastructure you don’t own can still become part of your attack surface
What an ASN actually is
Every IP belongs to an Autonomous System. Understanding ASNs is the first step to uncovering infrastructure relationships, tracing attacks, and investigating the internet beyond individual domains.
Every World Cup Threat Report Is a Starting Point
World Cup phishing campaigns are already scaling before kickoff. Whisper’s MCP turns public threat reports into actionable infrastructure investigations by uncovering the domains, hosting, DNS, and relationships hiding one layer deeper.
Concentration risk: when half the internet depends on three companies
Modern infrastructure looks distributed—but often isn’t. Hidden dependencies across cloud providers, DNS, and routing create concentration risk that most organisations can’t see until systems fail together
Your AI agent is only as smart as what it can see
AI agents don’t fail because of reasoning—they fail because of missing context. Without structured, connected infrastructure data, they can’t see the relationships that turn lookups into real investigations
The Internet Has a Map. Most Defenders Can't Read It.
The internet’s infrastructure is public—but fragmented. Without connecting DNS, BGP, WHOIS, and certificate data, defenders see isolated signals instead of the full attack surface
Why blocklists are always one step behind
Blocklists stop domains after they’ve already been used in an attack. By mapping the infrastructure behind malicious domains, registrars, hosting, DNS, and ASNs, security teams can uncover entire campaigns instead of chasing individual indicators
One Phishing Domain Is Never Just One
Blocking one phishing domain doesn’t stop the campaign. Phishing infrastructure is built in bulk, shared registrations, nameservers, hosting, and certificates. Detecting a single domain is just the entry point to a much larger network hiding behind it.
Your Vendors' Infrastructure Is Your Attack Surface Too
Your security perimeter doesn’t stop at your firewall. Every SaaS platform, payment processor, and third-party script extends your attack surface. When their infrastructure fails or is compromised, the impact flows directly to you, often without warning.
Attackers Change Their Domains. They Rarely Change Their Habits.
Security blocks domains. Attackers rotate them. But infrastructure patterns persist, and that’s where real detection begins.
Whisper welcomes Jeff Osborn
We’re excited to announce that Jeff Osborn, is joining Whisper’s Advisory Board.
Whisper welcomes Jonathan Cave
We’re proud to officially welcome Jonathan Cave to the Whisper Advisory Board.
Whisper is Coming to WebSummit 2025
Whisper will exhibit at WebSummit 2025 in Lisbon, showcasing its predictive cybersecurity platform and live 'God Mode' internet threat intelligence demos.
Whisper at Slush'D Heilbronn: A Day of Innovation, Community, and European Optimism
Whisper attended Slush'D Heilbronn, connecting with investors and founders, and celebrating Europe's vibrant, optimistic startup ecosystem.
Whisper Welcomes Geoff Huston
we’re proud to announce that Geoff Huston has joined Whisper’s Advisory Board.
Inside the D11Z Academy: Learning, Growing, and Building Together
Whisper attended D11Z Academy in Heilbronn, gaining practical insights, sharing experiences with fellow founders, and strengthening investor relationships.
Whisper welcomes Merike Kaeo
We’re proud to announce that Merike has joined the Whisper Advisory Board.
Whisper welcomes Maarten Botterman
We’re proud to officially welcome Maarten Botterman to the Whisper Advisory Board.
Whisper Welcomes Roman Viliavin!
Whisper welcomes Roman Viliavin as COO, strengthening its founding team with proven operational leadership to scale growth and cybersecurity innovation.
Rahul Saggar Joins Whisper as CRO
Whisper welcomes Rahul B Saggar as CRO, strengthening its founding team to scale commercial growth and accelerate its cybersecurity vision.
Whisper Secures €1.6M in Pre-Seed Funding to Scale Its Internet-Infrastructure Graph
Whisper raised €1.6 million in pre-seed funding to expand its infrastructure-intelligence platform — a queryable graph of the internet that helps teams investigate and respond to cyber threats.
Whisper Emerges from Stealth with a Queryable Map of Internet Infrastructure
Whisper exits stealth with a threat-intelligence platform built on a queryable graph of internet infrastructure — helping teams investigate domains, IPs, and networks and respond faster.
Meet the Minds Behind the Whisper's Mission
Whisper is a cybersecurity startup using deep internet and mathematical expertise to deliver infrastructure intelligence and help prevent cyber threats.
See what sits behind any domain or IP
A free key opens the console, the API and the MCP server. Sign-up takes under a minute.