Know what kind of site is at the other end of the tunnel.
Your virtual private network (VPN) encrypts the path. It doesn't tell your users what kind of site is at the other end, or whether it's safe. License our category and threat data, keep a local copy, and look up the rest.
VPN threat intelligence is content categories for domains, URLs and millions of IPs, plus risk scores for domains, URLs and IPs, that a VPN service checks against the places its users connect to. alphaMountain licenses it as URL Classification (92 content categories), Threat Feed (a 1.0 to 10.0 risk score) and Domain/IP reputation factors. Available as OEM, white label or co-branded. See how OEM licensing works.
Check domains and IPs inside the tunnel.
Your servers see where traffic is headed:
- Domains: if your service answers DNS lookups for users, check the domain first. You get a risk score and a content category.
- IP addresses: for traffic that goes straight to an address, check the IP's risk score, plus a content category for a subset of IPs.
- Reputation factors: registration records, popularity and DNS history, so your support team can explain a block.
A score of 1.0 is very safe and 10.0 is known malicious. Your product decides what to block or warn on. Filtering DNS without a VPN is covered on our protective DNS page.
Turn categories into features users switch on.
With 92 content categories, you can offer controls such as blocking phishing sites, as a default or a plan option. With Category Feed, you receive only the categories you choose.
Keep lookups next to your servers.
A check that waits on a remote service can add delay to connections. Your local database (DB) copy holds the full database, and the Batch API sends batch updates to your local DB copy every hour, delivered as Category Batch or Threat Batch. You decide where it lives and how to cache results. The Query API covers anything your copy hasn't seen.
Count connections, not users.
Each user opens many connections a day, so lookups add up fast.
- Up to about 100,000 lookups a day: the Query API alone fits.
- Above that: we recommend batch. The Query API handles up to 300,000 a day, but your local DB copy keeps response time under your control.
License it to match how you price your service.
Licensing runs on royalty or consumption. Buy the threat and category databases separately, or together as a bundle.
Prove it on your own network first.
Ask for a free trial, and we'll help with your proof of value. You can look up a domain in threatYeti right now. We score domains, URLs and IPs, not files.
FAQ
How is this different from a secure web gateway?
A secure web gateway filters a company's web traffic. VPN threat intelligence checks the domains and IPs users reach inside a VPN service. See secure gateways.
Can we score IP addresses?
Yes. Risk scores cover domains, URLs and IPs. Content categories cover domains and URLs, plus a subset of IPs.
How often does our copy refresh?
Hourly, through batch updates to your local DB copy.
Bring your connection volume.
Tell us how many users you serve and how many lookups they make a day. We'll match the products, delivery and licensing to it.