The Modern Investigation Platform
Graph-Based Investigations
Add and enrich entities. See shared infrastructure and identities as you work.
Built-in Enrichments
Query threat intelligence, infrastructure, identity, breach, blockchain, and company data from the graph.
Private Enrichments
Connect internal and proprietary data sources through private enrichments.
Custom Entities
Define your own entity types when the defaults don't fit your case.
Images and attachments
Link images and files to entities so evidence stays with your analysis.
Automatic Correlation
Shared data points are connected automatically, revealing related infrastructure and identities.
Bulk Actions
Run up to 1,000 enrichments at once, then move or retype entities in bulk to keep large investigations manageable.
Work Together in Real Time
Work in the same case at the same time, with organization roles and case-level access controls.
Case management
Keep graphs, files, and analysis organized in cases that stay synchronized across your team.
Live collaboration
Work on the same graph with other analysts and see their changes in real time.
Access controls
Use roles and case-level permissions to control who can view or modify investigations.
Use the Sources You Already Trust
Bring data from your preferred intelligence providers into the graph, run enrichments in bulk, and connect internal sources through private enrichments.
Straightforward Pricing
Plans for individual analysts, teams, and self-hosted deployments.
Standard
Ideal for solo analysts
