02 · Thermal prioritisation
Signal
Every exposure gets a temperature: how likely it is to be used, how reachable it is, and what it would cost you. Threat intelligence keeps the heat honest.
01Platform / Sight
See everything the adversary can see.
Continuous discovery of your external attack surface: domains, cloud, certificates, services, identities and suppliers, mapped from the outside in and kept current as it changes.
RS
Assets
1,28414 today
Exposures
14820 this week
Hot
075 this week
Mean time to fix
3.2 d0.4 d
Surface map
- Critical
- Hot
- Warm
- Cool
01Outside in
Start from a name. End with the estate.
Sight begins where an adversary begins, with your company name and nothing else, and works outward until it has the whole estate: the brands you acquired, the environments nobody decommissioned, the suppliers who host under your name. Every asset arrives with an owner, a zone and a history, so the map is something your team can act on the same day.
- Seed
- A company name, a domain, or both
- Expand
- Registrations, certificates, DNS, cloud, code and leaks
- Enrich
- Owner, zone, technology, first seen, exposure history
- Watch
- Change detection runs continuously; new assets are flagged within hours
Assets
1,28414 today
Exposures
14820 this week
New this week
14 today- Admin panel reachable from the internet2 min agoVerifiedvpn-02.brackwell.example
- Legacy API accepts expired tokens9 min agoTestingapi-legacy.brackwell.example
- New subdomain31 min agoWatchingpreview-14.brackwell-cloud.example
- Public storage bucket1 h agoRetestassets-eu.brackwell-cloud.example
- SSO metadata exposes internal host2 h agoTestingsso.brackwell.example
02Features
- 01
Outside-in discovery
Give Saluki a name and it maps outward: subsidiaries, registered domains, every subdomain and host beneath them, the cloud resources and services behind those, and the identities that reach them.
Live Discovery
Assets 1,284New today 14 - 02
Change, in hours
A new subdomain. A forgotten test environment. A supplier's breach. Sight notices and tells you within hours, long before the next quarterly scan would.
Live Assets1,28414 todayExposures14820 this weekNew this week
14 today- Admin panel reachable from the internet2 min agoVerifiedvpn-02.brackwell.example
- Legacy API accepts expired tokens9 min agoTestingapi-legacy.brackwell.example
- New subdomain31 min agoWatchingpreview-14.brackwell-cloud.example
- Public storage bucket1 h agoRetestassets-eu.brackwell-cloud.example
- SSO metadata exposes internal host2 h agoTestingsso.brackwell.example
- 03
Context on every asset
Owner, environment, technology, exposure history. A hostname becomes a decision.
Live VPNVerifiedvpn-02.brackwell.example91- Address
- 203.0.113.42
- Owner
- PTPlatform
- Zone
- Corporate
- Technology
- VPN concentrator
- First seen
- 2024-11-03
Exposure history
- PR-0917CriticalAdmin panel reachable from the internet
- 24 Oct · 22:28Pursuit verified PR-0917 and raised a ticket to the Platform team.
- 24 Oct · 22:28Routed to #sec-platform with heat, owner and evidence attached.
- 25 Oct · 09:12Platform acknowledged and scheduled the fix for the maintenance window.
In the loop
Sight runs the Watch step and hands a current, enriched inventory to Signal.
In the loop
- 01 · WatchSight
- 02 · IdentifySignal
- 03 · EmulatePursuit
- 04 · StrengthenResolve
Specifications
Sight
Continuous discovery
- Discovery sources
- DNS, certificates, cloud, registries, code and leak monitoring
- Cadence
- Continuous, with change detection
- Coverage
- Domains, subdomains, IPs, services, cloud resources, identities, suppliers
- Enrichment
- Owner, environment, technology, exposure history