Threat discovery and compromise detection for office network hosts / production networks and DMZ servers.

Threat detection cooperates with internal SOC/SIEM big data platforms or analysis logs from security devices such as WAF/IPS/NGFW.

Risk identification of external IP of applications or services that are accessible over public networks, such as web, mail and SSH.

Quickly discover assets and their changes with the extension of domains and IP addresses. Timely reduce the assets' attack surface, resultant risks of data leakage and service exposure.

Correlation analysis of internal and external security incidents.

Analysis of suspicious files/processes on endpoints/servers for identification of malicious programs.