# Platform URL: https://www.deepinfo.com/platform/ ## Every Module. One Index. One Place to Act. The Deepinfo Platform is a Continuous Threat Exposure Management platform built as modules, each reading a different part of the internet, from the hosts you expose to the credentials that have already leaked. All of them run on Deepinfo’s own internet index, with one engine, one scoring scale and one API. [Request demo](https://www.deepinfo.com/request-demo/) · [Platform overview (PDF)](https://www.deepinfo.com/downloads/deepinfo-platform-overview.pdf) ### What Each Module Reads. EASM, BRP and TPRM read the visible internet: your hosts, the domains built to imitate you, your vendors. CTI reads what has already leaked. Deep Search & Insights opens the index under all of them to your team. #### [External Attack Surface Management](https://www.deepinfo.com/platform/easm/) Discovers the domains, subdomains and IPs tied to your organization, scans each one layer by layer, from WHOIS and DNS to open ports and web data, and ranks what it finds with CVSS, EPSS and CISA KEV. Each issue stays on record until a rescan confirms the fix. #### [Cyber Threat Intelligence](https://www.deepinfo.com/platform/cti/) Reads breach data, infostealer logs and dark web sources for your domains, employees and customers, and profiles the threat actors that target your region and industry. Each finding points to an account, a device or a person your team can act on. #### [Brand Risk Protection](https://www.deepinfo.com/platform/brp/) Matches domains across the index against your brand keywords: exact, inside a longer name, one typo away, or spelled with characters from other alphabets that read as your own. Each lookalike your team approves is then monitored across DNS, MX, SSL and HTTP, with a risk score timeline. #### [Third-Party Risk Management](https://www.deepinfo.com/platform/tprm/) Runs the EASM engine on a portfolio for each third party, with its discovery, scanning and scoring. A vendor’s score and yours sit on one scale. #### [Deep Search & Insights](https://www.deepinfo.com/platform/dsi/) Opens the index to your analysts and developers: domain search and reverse lookups, WHOIS and DNS history, vulnerability search and live lookups. It is the data the other modules run on. ### The Modules Share Data. That’s the Platform. A shared login does not make a platform. The modules read one index, and your surface and your vendors run through one scanning engine, so a vendor’s domain is scanned, scored and tracked the way one of yours is. - One internet index under all the modules - One engine and one score for your surface and your vendors - Shared decisions for EASM issues and CTI credentials: resolved, risk accepted, ignored, false positive - Notifications across EASM, CTI and BRP - Reports on demand or on a schedule - One REST API, one `apikey` header, one filter syntax [Why Deepinfo](https://www.deepinfo.com/why-deepinfo/) · [Integrations](https://www.deepinfo.com/integrations/) ### Collected, Resolved and Kept With History. Deepinfo collects its own registration, DNS and certificate data, resolves it and keeps it with history. Discovery in EASM and TPRM and lookalike matching in BRP all query it, DSI opens it to your team, and Deepinfo Data Feeds and API Services deliver it on its own. 400M+ domains Registered domains across every TLD, with registration, WHOIS history and daily deltas. [Domain Search](https://www.deepinfo.com/data-api/apis/domain-search/) · [Feeds](https://www.deepinfo.com/data-api/feeds/) · [WHOIS](https://www.deepinfo.com/data-api/apis/whois-lookup/) 2B+ subdomains Subdomains discovered and resolved to the IP addresses they point to. [Subdomain Finder](https://www.deepinfo.com/data-api/apis/subdomain-finder/) · [Feeds](https://www.deepinfo.com/data-api/feeds/) 200B+ DNS records Every observed DNS record, kept with its history, so infrastructure can be traced back in time. [DNS Lookup](https://www.deepinfo.com/data-api/apis/dns-lookup/) · [DNS History](https://www.deepinfo.com/data-api/apis/dns-history/) · [Reverse IP](https://www.deepinfo.com/data-api/apis/reverse-ip/) · [Reverse MX](https://www.deepinfo.com/data-api/apis/reverse-mx/) · [Reverse NS](https://www.deepinfo.com/data-api/apis/reverse-ns/) 30B+ SSL certificates Certificates collected and indexed. The names a certificate covers often reveal hosts nobody announced. [SSL Lookup](https://www.deepinfo.com/data-api/apis/ssl-lookup/) [Data & API](https://www.deepinfo.com/data-api/) · [Deep Search & Insights](https://www.deepinfo.com/platform/dsi/) ### Discover, Monitor, Prioritize, Act. 1. **Discover** EASM and TPRM start from a seed domain and propose related assets for your team to approve. BRP matches domains in the index against your brand keywords. 2. **Monitor** Approved assets are scanned continuously, and each layer keeps its history. CTI reads breach data, infostealer logs and dark web sources for your domains and people. 3. **Prioritize** CVEs are ranked with CVSS, EPSS and CISA KEV together. Assets and domains get a security score with a timeline, and monitored lookalikes get a risk score. 4. **Act** Each issue stays on record until a rescan verifies the fix. Notifications, reports and the API carry the work to whoever owns it. [How the platform works](https://www.deepinfo.com/platform/how-it-works/) ### The Capabilities of Each Module. Each module page covers its capabilities together, and each capability has its own page with the mechanism behind it. - [Asset Discovery](https://www.deepinfo.com/platform/easm/smart-asset-discovery/) (EASM) - [Continuous Scanning](https://www.deepinfo.com/platform/easm/continuous-scanning/) (EASM) - [Risk Detection](https://www.deepinfo.com/platform/easm/comprehensive-risk-detection/) (EASM) - [Remediation](https://www.deepinfo.com/platform/easm/remediation-with-actionable-insights/) (EASM) - [Risk Scoring](https://www.deepinfo.com/platform/easm/complete-risk-scoring/) (EASM) - [Dark Web Search](https://www.deepinfo.com/platform/cti/dark-web-search/) (CTI) - [Dark Web Mentions Monitoring](https://www.deepinfo.com/platform/cti/dark-web-mentions-monitoring/) (CTI) - [Employee Email Breach Monitoring](https://www.deepinfo.com/platform/cti/employee-email-breach-monitoring/) (CTI) - [Compromised Employee Device Monitoring](https://www.deepinfo.com/platform/cti/compromised-employee-device-monitoring/) (CTI) - [Compromised Client Credential Monitoring](https://www.deepinfo.com/platform/cti/compromised-client-credential-monitoring/) (CTI) - [Compromised Payment Credential Monitoring](https://www.deepinfo.com/platform/cti/compromised-payment-credential-monitoring/) (CTI) - [Executive Threat Monitoring](https://www.deepinfo.com/platform/cti/executive-threat-monitoring/) (CTI) - [Threat Actor Intelligence](https://www.deepinfo.com/platform/cti/threat-actor-intelligence/) (CTI) - [Data Breach Index](https://www.deepinfo.com/platform/cti/data-breach-index/) (CTI) - [IOC Feeds](https://www.deepinfo.com/platform/cti/ioc-feeds/) (CTI) - [Cybersecurity News](https://www.deepinfo.com/platform/cti/cybersecurity-news/) (CTI) - [Cyber Threat Score](https://www.deepinfo.com/platform/cti/cyber-threat-score/) (CTI) - [Fraudulent Domain Monitoring](https://www.deepinfo.com/platform/brp/fraudulent-domain-monitoring/) (BRP) - [Social Media Monitoring](https://www.deepinfo.com/platform/brp/social-media-monitoring/) (BRP) - [App Store Monitoring](https://www.deepinfo.com/platform/brp/app-store-monitoring/) (BRP) - [Search Engine Monitoring](https://www.deepinfo.com/platform/brp/search-engine-monitoring/) (BRP) - [Managed Takedown](https://www.deepinfo.com/platform/brp/managed-takedown/) (BRP) - [Vendor Discovery](https://www.deepinfo.com/platform/tprm/smart-third-party-discovery/) (TPRM) - [Continuous Monitoring](https://www.deepinfo.com/platform/tprm/continuous-monitoring/) (TPRM) - [Vendor Risk Assessments](https://www.deepinfo.com/platform/tprm/comprehensive-risk-assessments/) (TPRM) - [Vendor Risk Scoring](https://www.deepinfo.com/platform/tprm/automated-risk-scoring/) (TPRM) - [Compliance Tracking](https://www.deepinfo.com/platform/tprm/compliance-tracking/) (TPRM) - [Domain Intelligence](https://www.deepinfo.com/platform/dsi/domain-intelligence/) (DSI) - [Domain Search](https://www.deepinfo.com/platform/dsi/domain-search/) (DSI) - [Vulnerability Intelligence](https://www.deepinfo.com/platform/dsi/vulnerability-intelligence/) (DSI) - [Vulnerability Search](https://www.deepinfo.com/platform/dsi/vulnerability-search/) (DSI) - [Instant Lookups](https://www.deepinfo.com/platform/dsi/instant-lookups/) (DSI) ### Questions About the Platform **What is Continuous Threat Exposure Management?** Continuous Threat Exposure Management (CTEM) is a program model, described by Gartner, that replaces periodic assessments with an ongoing cycle of scoping, discovery, prioritization, validation and mobilization. The Deepinfo Platform covers discovery, prioritization and mobilization across your surface, your brand, your third parties and data that has already leaked. Validation, such as breach and attack simulation, is a different category of tool. **Do we have to buy every module?** No. A quote covers the modules you use, and others can be added as your program grows. See [pricing](https://www.deepinfo.com/pricing/) for what shapes the number. **Does the platform need an agent or access to our network?** No. It works from the outside in, reading what anyone on the internet can see: DNS, certificates, WHOIS, open ports and web responses. Internal networks and systems behind a login stay out of its view by design, as the [methodology](https://www.deepinfo.com/methodology/#limitations) explains. **Where does the data come from?** The index is Deepinfo’s own, built from the open internet: passive DNS, certificate transparency logs, public WHOIS and IP WHOIS records, and crawling of publicly reachable web pages. Cyber Threat Intelligence adds breach data, infostealer logs and dark web sources. **How does the platform relate to Data & API?** They share one dataset. The platform wraps it in workflows: discovery, scanning, scoring, issue states, notifications and reports. Deepinfo Data Feeds and Deepinfo API Services deliver the data itself, as bulk files and endpoints, for teams that build their own pipelines. See [Data & API](https://www.deepinfo.com/data-api/) for the feeds and endpoints. **Is Third-Party Risk Management a separate engine?** No. Each third party becomes a portfolio that the EASM engine discovers, scans across the same layers and scores on the scale used for your surface. That is why a vendor’s score and yours can be compared directly. **Can we work with the platform from our own tools?** Yes. The platform API covers EASM, CTI, BRP, notifications and reports, with one `apikey` header and one filter syntax for search and bulk actions. See the [API reference](https://docs.deepinfo.com/reference/) and the [integrations](https://www.deepinfo.com/integrations/) page. **Is there a mobile app?** Yes. [Deepinfo Mobile](https://www.deepinfo.com/mobile-app/) is a companion app for iOS and Android: asset overviews, issues by severity, inventory search and security news, signed in with your platform credentials. ### Walk Through the Modules on Your Own Data. Book a working demo with our team. [Request demo](https://www.deepinfo.com/request-demo/)