# Know who is behind any address. Decide what your machines may reach. > Whisper Graph XDR decides what your machines and AI agents may reach, and cuts any of them off from outside the host. Whisper Intelligence shows who is behind any address, with the evidence attached. *Source: https://www.whisper.security/solutions* *Last updated: 2026-10-04* --- One account opens both. Pick your team below. - [Start free](https://console.whisper.security/sign-up?redirect_url=https%3A%2F%2Fwww.whisper.security%2Fsolutions) - [Book a demo](https://meetings-eu1.hubspot.com/rsaggar) ## Four teams, four jobs. Pick the one closest to yours. Each page shows the product that does the job, the workflows behind it and the proof. - **[SOC and threat intel](https://www.whisper.security/solutions/soc) (Whisper Intelligence)**: The alert brings an address and nothing else. Get the network, the owner and every name on the same address, inside your SIEM. - **[Security leaders](https://www.whisper.security/solutions/security-leaders) (Graph XDR and Intelligence)**: Asked whether you are exposed? Answer with what your machines reached, what your rules stopped and evidence an auditor can check. - **[MSSPs and MDRs](https://www.whisper.security/solutions/mssp) (Graph XDR for partners)**: A managed line your competitors cannot quote, with every client's fleet in one queue and reports in your name. - **[Engineers and AI agents](https://www.whisper.security/solutions/engineering) (Graph XDR)**: Give every agent and machine an identity anyone can check, a rule on what it may reach and an off switch outside its host. [Building a security product? Put Whisper inside it](https://www.whisper.security/solutions/security-vendors) ## Or start from the problem. What teams most often bring to us, and where each one is answered. - **[Enrich alerts in Splunk or Sentinel](https://www.whisper.security/solutions/soc#in-your-siem)**: Owner, network, co-hosted names and feed listings, written onto the event. - **[Expand one phishing domain to the campaign](https://www.whisper.security/solutions/soc#campaign)**: Every name on the same address, certificate or registrant, including names no feed lists yet. - **[Block what sits behind a destination](https://www.whisper.security/solutions/security-leaders#rules)**: Rules on countries, bulletproof hosting, Tor exits, new registrations and RPKI, at resolution and egress. - **[Map what a vendor depends on](https://www.whisper.security/products/intelligence/use-cases/infrastructure-supply-chain/supply-chain)**: Name servers, mail, hosting and CDN networks for any domain, with the organisation behind each. - **[Give each AI agent its own identity](https://www.whisper.security/solutions/engineering#identity)**: An address anyone can check with dig, and a revoke that works from our edge. - **[Ground an AI agent in internet data](https://www.whisper.security/ai#mcp)**: Seven read-only tools over MCP for Claude, Cursor or any MCP client. ## Two products, one account. Most teams start with one and add the other. The same sign-in opens both. | | Whisper Graph XDR | Whisper Intelligence | | --- | --- | --- | | The question it answers | What may this machine reach, and how do I cut it off? | Who is behind this address, and what else do they run? | | What it works on | Your laptops, servers, containers, AI agents and devices | Any address, name, network or certificate on the internet | | Where your team uses it | The Graph XDR console, your device management and your SIEM | The console, the API, MCP, the CLI and your SIEM | | How you start | Five identities free, for good | A free key, for good | - [See Graph XDR](https://www.whisper.security/products/graph-xdr) - [See Whisper Intelligence](https://www.whisper.security/products/intelligence) ## One graph of the internet under both products. - **46.2B** objects in one graph - **134** intelligence feeds, joined - **<10ms** anchored queries, server-side *Measured 2026-10-23* ## Check us before you call us. - **[Our own network](https://stat.ripe.net/AS219419)**: AS219419, allocated by RIPE, with exact-length RPKI routes you can check without asking us. - **[Who built it](https://www.whisper.security/about-us)**: Co-founder and CEO Kaveh Ranjbar was CIO of RIPE NCC and architect of K-root, one of the internet's thirteen DNS root servers. - **[Where it runs](https://www.whisper.security/trust)**: Our cloud, hosted in the EU by default. Or on premise on one server, air gapped with signed graph delivery, or EU sovereign with no US cloud in the data path. ## Before you pick a team. - **What is the difference between Whisper Graph XDR and Whisper Intelligence?**: Graph XDR controls your own machines and AI agents: what they may reach, and how to cut them off from outside the host. Intelligence answers questions about anything on the internet: who is behind an address, and what else they run. Both run on WhisperGraph, and one account opens both. - **Do we have to install anything to start?**: No. An identity and DNS-level policy work with no software on the host. The routed tunnel, the egress proxy and the sensor each add more. Intelligence needs nothing installed. - **We already have an EDR. Why Graph XDR?**: Because its control does not depend on the host. Its rules run at our resolver and egress, and a revoke stops a machine at our edge even when the host is fully owned. Software on the host cannot promise that. - **[What does it cost to start?](https://www.whisper.security/pricing)**: Graph XDR is free for five identities, for good. Intelligence starts with a free key, for good. Every paid tier is listed on the Whisper pricing page. - **[Where does Whisper run, and where does our data go?](https://www.whisper.security/trust)**: Our cloud is hosted in the EU by default. Whisper can also run on premise on one server, air gapped with signed graph delivery, or EU sovereign with no US cloud in the data path. - **[Can Whisper run it for us?](https://www.whisper.security/solutions/mssp)**: Whisper does not run a managed service. Partners do: an MSSP or MDR can run Graph XDR for you, in its own name. ## Start with the alert or the agent in front of you. Graph XDR is free for five identities, for good, then €3.99 per endpoint per month, billed yearly. Intelligence starts with a free key. - [Start free](https://console.whisper.security/sign-up?redirect_url=https%3A%2F%2Fwww.whisper.security%2Fsolutions) - [Book a demo](https://meetings-eu1.hubspot.com/rsaggar)