Find the marble before someone else does.
Discovery collects external intelligence from hundreds of public and restricted sources, then works out which of it actually belongs to you. Collection is the easy half.
Where marbles come from.
Identities
Employee and contractor accounts, aliases, and the personal profiles that quietly reference your organisation.
Credentials
Paste sites, breach corpora and dumps, matched against the identities we already attribute to you.
Infrastructure
Passive DNS, certificate transparency and host data — including subdomains pointing at services nobody owns any more.
Repositories
Public commits containing keys, internal hostnames, and the configuration that explains how everything fits together.
Documents
Files and pages published to the open web that were never intended to leave the building.
Underground
Restricted forums and channels where access to an organisation is discussed before it is used.
Seed, expand, attribute.
The order matters here — attribution before expansion produces a tidy graph of things that are not yours.
-
Seed
Start from what you know
Your domains, brands, executives and known ranges. A small, high-confidence set is a better starting point than a large uncertain one.
-
Expand
Follow the relationships
Each confirmed artifact suggests others. A domain suggests certificates; a certificate suggests hosts; a host suggests an owner.
-
Attribute
Decide what is actually yours
Every artifact carries a confidence score and the sources behind it. Anything we cannot attribute stays visible and stays flagged as unattributed.
Severity and confidence are different questions.
Collapsing them into one number is how teams end up chasing a certain-but-trivial finding ahead of a probable-and-serious one.
- Severity
- How much damage could this cause if it is real?
- Confidence
- How sure are we that it is real, and how many independent sources agree?
- Attribution
- How sure are we that it belongs to you rather than to someone with a similar name?
More evidence. Less guessing.
We don't promise perfect visibility. We promise better understanding.