Know what each link in a message points to.
Your secure email gateway already reads each message. The question is what kind of site each link and sender leads to, and how risky it is. License our category and threat data, keep a local copy, and look up the rest.
Secure email gateway threat intelligence is content categories for domains, URLs and millions of IPs, plus risk scores for domains, URLs and IPs, that email security products check against the links, sender domains and sending servers in each message. alphaMountain licenses it as URL Classification (92 content categories), Threat Feed (a 1.0 to 10.0 risk score) and Domain/IP reputation factors. Available as OEM, white label or co-branded. See how OEM licensing works.
Score what a message points to.
- Links: a risk score and a content category for each URL and its domain.
- Sender domains: a risk score, plus reputation factors (registration records, popularity and DNS history) that show why.
- Sending IPs: a risk score for the server that delivered the message, plus a content category for a subset of IPs.
A score of 1.0 is very safe and 10.0 is known malicious. We don't analyze attachments or other files, so pair our scores with your own attachment scanning.
Risk and category answer different questions.
A risk score says how dangerous a link is. A category says what kind of site it is, so your rules can act on both. With Category Feed, you pick the categories you receive, such as phishing.
Keep mail moving with a local copy.
You hold the full database as your local database (DB) copy. The Batch API sends batch updates to your local DB copy every hour, delivered as Category Batch or Threat Batch. Checks run on your own systems, and you decide how to cache them.
If you check links again when a user clicks, the Query API covers any URL your copy hasn't seen.
Count links, not messages.
One message can carry several links, so lookups add up fast.
- Up to about 100,000 lookups a day: the Query API alone fits.
- Above that: we recommend batch. The Query API handles up to 300,000 a day, but your local DB copy keeps response time under your control.
If you buy batch, there are no email scoring limits. If you use only the API, the normal API limits apply.
Licensing built around your business model.
Pricing is royalty-based or consumption-based. License the threat and category databases one at a time, or bundle them.
Try it on your own mail first.
Free trials are available, and we support your proof of value. To spot-check a link now, look it up in threatYeti. If a verdict looks wrong, site owners can report a false positive.
FAQ
Do you scan email attachments?
No. We score the URLs, domains and IPs in a message, not files.
Can we check a link when the user clicks it?
Yes. Look it up with the Query API at click time, and use your local DB copy for everything it already holds.
How current are the scores in our copy?
Batch updates arrive every hour.
Bring your mail volume.
Tell us how many messages you filter and how many links they carry. We'll match the products, delivery and licensing to it.