Detect faster, detect better
Identify Security Threats Faster with ThreatWave Data
Key Benefits
• Unprecedented scale
with 100-200 million
daily hits
• Representative
sample shows threat
ecosystem beyond
your regular data feeds
• Gain context and
insight to better
inform and help your
customers
• Geo diversity - 60%
internationally
originated from 300+
countries daily
Unprecedented Speed and Scale
ThreatWave’s Threat Intelligence data provides a comprehensive
view into the security landscape so you can identify cyber security
threats - botnet detection, phishing, malware, spam, fraud, etc - to your
networks and your brand faster.
Data for Broad Spam Identification:
• Identify botnets, spammer origination points for blocking access to
your network or filtering inbound mail
• Build on IP and Domain reputation to continually protect network
from inbound attacks
Data for Brand Protection:
• Identify and track keywords related to your brand
• Insights into spoofing and phishing incidents
• Take down dangerous endpoints
Data for Detecting Malicious Content:
• Identify likely dangerous URIs that could negatively impact networks or
endanger users
• Identify new malware threats based on file attachment analysis to
protect your users
ThreatWave
908 Main Street #310, Louisville, Colorado 80027
Contact us at [email protected]
Learn more at threatwave.com
Detect faster, detect better
Identify Security Threats Faster with ThreatWave Data
How it works
ThreatWave manages the MX records for 25 million parked and TLD domains, resulting
in billions of monthly messages in our email sensor network. Our threat network is not
your average honeypot - due to our scale, our partners gain access to a comprehensive
cross-section of traffic across the internet.
3+ MILLION
50 to 100+ MILLION
MALICIOUS ATTACHMENTS
POTENTIALLY MALICIOUS LINKS
Data Insights
Origination Data:
Key sender identifiers, such as connecting IP addresses, IP country, Sender From
Insights and many more.
Authenticity Elements:
Identifiers such as SPF results, DKIM results, full DKIM signature and many more.
Message Disposition:
Identifier for messages that are commercial mail and open relay abuse. Also includes
Spam Assassin Score.
Payload Metadata:
Identifiers such as full message bodies, message subject, message body URIs, message
image URLs, message file attachment name/disposition and more.
ThreatWave
908 Main Street #310, Louisville, Colorado 80027
Contact us at [email protected]
Learn more at threatwave.com