Monitoring & Risk

Threat Intelligence: how risky is this domain's infrastructure?

DMARC tells you whether an email passed. Threat Intelligence tells you whether the domain behind it, or one of your own, is running infrastructure an attacker would love: open ports, unpatched software, a history with malware.

Where to find it

Monitoring & Risk → Threat Intelligence

What you'll see

• A Security Grade from A to F with a 0 to 100 score, and a Risk Level (low, medium or high).
• Open ports found on the domain's servers, and known CVEs (published vulnerabilities) affecting the software running there.
• If a cyber-intelligence integration is connected to your account: a company profile, industry compliance badges, and ratings per security category.
• Always-on modules for malware scan results, IP infrastructure (location, ISP, operating system) and a check against malware reputation feeds.

When to run it

• Before adding a new vendor to your SPF record.
• When a lookalike domain appears in Lookalike Monitoring and you want to know how dangerous it is.
• Periodically on your own domains, as a quick outside-in check of what the internet can see.