Security leaders
Know what you are exposed to.
Prove what you did about it.
Whisper Graph XDR shows who is behind every connection your machines and AI agents make, enforces your policy on them and cuts a compromised machine off at our edge.
Whisper Intelligence maps the providers each of your vendors depends on, including the fourth parties nobody declared. Both hand your auditor evidence they can re-run.
The questionnaire stops at the company.
A vendor questionnaire tells you what a supplier says about itself. It does not show which network carries your traffic to them, which country their servers sit in, or who else depends on the same provider.
Your own logs show addresses, not owners. So when the board asks whether an incident in the news touches you, the answer is a guess with caveats.
Where the evidence for NIS2 and DORA lives.
- NIS2 Article 21: supplier weaknesses
DNS, hosting and routing, resolved for each direct supplier.
- DORA Articles 28 to 30: ICT third parties
A dependency map per provider, including the fourth parties nobody declared.
- Concentration risk
Single points of failure: one DNS operator, one mail provider or one hosting network behind a supplier.
Concentration risk: when half the internet depends on three companies
- Jurisdiction
The organisation behind each host and the country it sits in.
- Whether a provider can be replaced
Routing diversity and the upstream networks each provider leans on.
A crosswalk to the articles. Whisper supplies the evidence; your auditor decides.
From a question to an answer with its working.
See every connection, with who is behind it
Each destination your laptops, servers and AI agents reach, logged with its owner, network, country and risk.
Lookups of your own identities show up too, grouped by the operator behind them.
Set rules on what sits behind a destination
Block countries, bulletproof hosting, Tor exits, newly registered domains and routes that fail RPKI, at resolution and at egress.
Start in monitor mode and see what would have been stopped.
Hand auditors evidence they can re-run
Controls mapped to SOC 2, ISO 27001, PCI DSS, HIPAA and CMMC, each citing a live count or a check you can run.
Exports carry a SHA-256 digest.
See where your vendors actually run.
Give Whisper Intelligence a supplier's domain and it maps the name servers, mail, hosting and CDN networks it depends on, grouped by function, and flags any function that rests on a single provider. Whisper Atlas then shows where that infrastructure physically sits.
We run the network we tell you about.
Your enforcement point should belong to someone you can check.
- Our own network
AS219419, allocated by RIPE, with exact-length RPKI routes you can check without asking us.
- Who built it
Co-founder and CEO Kaveh Ranjbar was CIO of RIPE NCC and architect of K-root, one of the internet's thirteen DNS root servers. Advisers include Geoff Huston, Jeff Osborn, Maarten Botterman, Merike Kaeo and Jonathan Cave.
- Where it runs
Our cloud, hosted in the EU by default. Or on premise on one server, air gapped with signed graph delivery, or EU sovereign with no US cloud in the data path.
Evidence an auditor can check for themselves.
The Graph XDR compliance view maps your controls to SOC 2, ISO 27001, PCI DSS, HIPAA and CMMC. Each control cites a live count or a check you can run now, and says where it is still partial. CSV and JSON exports carry a SHA-256 digest, and every identity granted or revoked is written to a public, append-only log, cosigned by a witness.
Cut a machine off without asking it.
Revoke an identity and it stops at our edge, even when the host is fully owned. The identity stops resolving, its firewall drops traffic, and its public record is withdrawn.
See the blast radius first: revoking a node cuts everything connected beneath it. Every action goes to the audit trail.
Four board questions, each a workflow.
Your team runs each one in the console, on your own domains.
Map a vendor's infrastructure
What happens if one of your vendors goes down? Every provider a domain depends on, with the organisation behind each.
Map your attack surface
What does an attacker see? Every subdomain, name and mail server, registrant and third-party service, scored.
Find look-alike domains
Who is impersonating your brand? Registered look-alikes, which are yours, and which are fresh.
Check your DNS delegation
Could someone hijack your domain? The name-server misconfigurations that make it possible, checked.
What security leaders ask first.
See what your vendors depend on, on one call.
Bring five vendor domains to a demo and we map them with you. Or start free: Graph XDR covers five identities, for good, then €3.99 per endpoint per month, billed yearly.