Solutions
Know who is behind any address.
Decide what your machines may reach.
Whisper Graph XDR decides what your machines and AI agents may reach, and cuts any of them off from outside the host. Whisper Intelligence shows who is behind any address, with the evidence attached.
One account opens both. Pick your team below.
Four teams, four jobs.
Pick the one closest to yours. Each page shows the product that does the job, the workflows behind it and the proof.
SOC and threat intel
The alert brings an address and nothing else. Get the network, the owner and every name on the same address, inside your SIEM.
Whisper IntelligenceSecurity leaders
Asked whether you are exposed? Answer with what your machines reached, what your rules stopped and evidence an auditor can check.
Graph XDR and IntelligenceMSSPs and MDRs
A managed line your competitors cannot quote, with every client's fleet in one queue and reports in your name.
Graph XDR for partnersEngineers and AI agents
Give every agent and machine an identity anyone can check, a rule on what it may reach and an off switch outside its host.
Graph XDR
Or start from the problem.
What teams most often bring to us, and where each one is answered.
Enrich alerts in Splunk or Sentinel
Owner, network, co-hosted names and feed listings, written onto the event.
Expand one phishing domain to the campaign
Every name on the same address, certificate or registrant, including names no feed lists yet.
Block what sits behind a destination
Rules on countries, bulletproof hosting, Tor exits, new registrations and RPKI, at resolution and egress.
Map what a vendor depends on
Name servers, mail, hosting and CDN networks for any domain, with the organisation behind each.
Give each AI agent its own identity
An address anyone can check with dig, and a revoke that works from our edge.
Ground an AI agent in internet data
Seven read-only tools over MCP for Claude, Cursor or any MCP client.
Two products, one account.
Most teams start with one and add the other. The same sign-in opens both.
| Whisper Graph XDR | Whisper Intelligence |
|---|---|
| The question it answers | |
| What may this machine reach, and how do I cut it off? | Who is behind this address, and what else do they run? |
| What it works on | |
| Your laptops, servers, containers, AI agents and devices | Any address, name, network or certificate on the internet |
| Where your team uses it | |
| The Graph XDR console, your device management and your SIEM | The console, the API, MCP, the CLI and your SIEM |
| How you start | |
| Five identities free, for good | A free key, for good |
One graph of the internet under both products.
Measured
Check us before you call us.
Our own network
AS219419, allocated by RIPE, with exact-length RPKI routes you can check without asking us.
Who built it
Co-founder and CEO Kaveh Ranjbar was CIO of RIPE NCC and architect of K-root, one of the internet's thirteen DNS root servers.
Where it runs
Our cloud, hosted in the EU by default. Or on premise on one server, air gapped with signed graph delivery, or EU sovereign with no US cloud in the data path.
Before you pick a team.
Start with the alert or the agent in front of you.
Graph XDR is free for five identities, for good, then €3.99 per endpoint per month, billed yearly. Intelligence starts with a free key.