RiskProfiler Threat Intelligence

What do you like best about the product?

The vendor risk scoring helps us monitor and identify security lapses in our supply chain in real time, helping us take action before things escalate. I also find it useful to see how those findings relate to other exposures we are investigating, providing better context and prioritization logic.

What do you dislike about the product?

It takes time to understand the scoring logic and questionnaire distributing logics initially.

What problems is the product solving and how is that benefiting you?

It helps us understand third-party security concerns as they happen instead of waiting for pre-scheduled risk assessments. We can follow up with evidence and specific questions instead of starting with a general request for an update.

What do you like best about the product?

I can review an exposed asset and the related threat information together. That helps me decide whether a finding needs immediate attention or further investigation.

What do you dislike about the product?

Getting familiar with the findings took some time initially.

What problems is the product solving and how is that benefiting you?

We previously had to piece together asset information and threat alerts before deciding what to fix. Having that context together makes our external exposure reviews easier to work through.

What do you like best about the product?

The adaptive TPRM process is the strongest area for our use case. Questionnaires can be distributed automatically, follow-up questions can adjust to previous answers, compliance controls are mapped, and risk assessments update when vendor posture or supporting evidence changes.

What do you dislike about the product?

Understanding the logistics behind vendor scoring and benchmarking takes some time.

What problems is the product solving and how is that benefiting you?

RiskProfiler has streamlined vendor onboarding and periodic reassessment with its AI agents, improving the workflows from a simple static checklist. The combination of questionnaire evidence, external exposure, and attack-path context gives us a more current view of third-party risk.

What do you like best about the product?

The connection between identity exposure and EASM is what I value most. Exposed credentials can be evaluated alongside internet-facing services and potential attack paths into sensitive applications.

What do you dislike about the product?

The platform offers services for different threat modules, making initial onboarding and understanding a bit complex.

What problems is the product solving and how is that benefiting you?

The platform's agentic AI engine helps us understand how an external leak or exposed service might be used as the first step in a broader compromise. That context improves decisions around authentication controls and unnecessary access.

What do you like best about the product?

A major strength is the ability to examine a threat across several dimensions from one platform. RiskProfiler can link suspicious domains and impersonation activity with hosting infrastructure, internet-facing assets, vulnerabilities, compromised identities, third parties, and potential attack routes. AI-assisted data collection and analysis expose these connections while reducing manual investigation.

What do you dislike about the product?

The breadth of available information can feel extensive for a new user, so saved views and role-specific dashboards are helpful.

What problems is the product solving and how is that benefiting you?

RiskProfiler gives us a consolidated perspective across external attack-surface management, third-party risk, brand and domain protection, phishing, vulnerability intelligence, identity exposure, and cyber threat intelligence. Analyst review remains important, but the connected evidence helps our team investigate threats and set priorities more quickly.

Recommendations to others considering the product:

To enhance user experience, consider offering guided tutorials and interactive demos to help new users navigate the platform effectively.

What do you like best about the product?

The threat-intelligence capability brings together signals related to our assets, suppliers, domains, identities, and known vulnerabilities. AI-supported analysis highlights meaningful connections and provides useful context, reducing the need to investigate each indicator individually.

What do you dislike about the product?

Wide-ranging intelligence feeds may initially generate lower-priority findings. Refining relevance criteria, alert thresholds, and notification preferences helps ensure the most important activity receives attention.

What problems is the product solving and how is that benefiting you?

RiskProfiler has made threat intelligence more actionable by identifying activity with a direct relationship to our organisation. Built-in enrichment and relationship mapping give analysts a stronger starting point, allowing investigations to progress more efficiently.

What do you like best about the product?

Combining phishing detection with external attack-surface monitoring and attack-path insights gives us valuable context. When the platform identifies an impersonation site or suspicious domain, we can examine associated infrastructure, certificates, identities, and any potential links to our organization.

What do you dislike about the product?

Notification settings can take some refinement during high-activity campaigns so that relevant alerts are routed to the correct response teams.

What problems is the product solving and how is that benefiting you?

The solution has simplified phishing investigations by bringing previously fragmented capabilities into one place. We can assess a campaign, determine which identities may be exposed, and organize remediation efforts with greater speed.

What do you like best about the product?

I like that EASM, TPRM, vulnerability intelligence, phishing, brand and domain protection, identity risk, and CTI can be reviewed together. An exposed asset can be connected to a CVE, vendor, leaked identity, malicious campaign, and possible organizational attack path.

What do you dislike about the product?

The platform covers several risk areas, so role-specific dashboards and saved views are important for keeping each team focused.

What problems is the product solving and how is that benefiting you?

It solves the problem of exposure information being spread across separate tools and teams. The correlated view reduces duplicate investigation work and helps us prioritize responses according to exposure and potential business impact.

What do you like best about the product?

RiskProfiler's dark web and identity-risk monitoring solutions are useful because leaked credentials, tokens, session cookies, PII, and employee or customer records are linked to roles, access privileges, related assets, and asset criticality. The reporting system is autonomous, with traceable audit and action details.

What do you dislike about the product?

Some leaked records often get duplicated, so we still verify whether the account, session, or token remains active.

What problems is the product solving and how is that benefiting you?

RiskProfiler helps us distinguish a low-impact historical leak from an active privileged identity that could enable lateral movement. This supports faster credential rotation, token revocation, and access review.

What do you like best about the product?

Domain protection is useful for detecting typosquatting, homoglyphs, counterfeit domains, and look-alike login pages. The supporting WHOIS, DNS, hosting, certificate, and registrar information helps with validation. It also offers a takedown workflow that brings together technical evidence and information about the host, registrar, and domain owner. This supports collaboration with providers and helps organize appropriate UDRP- or DMCA-based action when applicable.

What do you dislike about the product?

Completion times still depend on the registrar, hosting provider, marketplace, or social platform involved.

What problems is the product solving and how is that benefiting you?

It is helping us move from identifying a malicious domain or impersonation account to preparing evidence and tracking external communication. This reduces internal coordination effort, even when the final action depends on a third party.