01
Dark web, forums and Telegram
Underground forums, Telegram channels and markets where access to organisations like yours is discussed or sold.
Digital Risk Protection: what circulates about you outside the perimeter, seen before the attackers see it
Digital Risk Protection (DRP) monitors what concerns your organisation outside your perimeter: dark web, forums, Telegram, leak sites, imitated brands, domains registered to defraud your customers, leaked credentials and data. The Milan CTI team runs it and findings arrive in the Fortgale Defence Platform portal.
Sources
Dark web
Forums
Telegram
Leak sites
Scope
Brand
Domains
Credentials
Social
What it covers
The sources outside your perimeter.
DRP looks where an attacker prepares the attack before touching your systems. Three families of sources, one place where findings land.
02
Leak sites, pastes and credential marketplaces
Ransomware group leak sites, public pastes and markets for stolen credentials and data.
03
Brand, social, app stores and domains
Social profiles and apps imitating your brand, and look-alike domain registrations used for phishing and fraud.
How it works
From signal to defence.
Four steps, from detection to the link with the defence cycle.
- 01From signal to dashboard
Finding in the portal
Every relevant finding appears in the Fortgale Defence Platform portal, with source and context, so you do not have to hunt for it.
- 02An analyst looks before you do
CTI team triage
The Milan CTI team checks the finding, discards false positives and ties it to independent research on threat actors, today 287 profiles.
- 03When something must come down
Takedown on request
If a domain, a profile or an app must be removed, the team prepares and forwards the request through the relevant provider's channels, with no guarantee of the outcome.
- 04From signal to defence
Link to the MDR cycle
With an MDR domain in place the signal enters the defence cycle: a leaked identity becomes one more element to read alerts and order the response.
The two detail capabilities
Two ways of looking outward.
Digital Risk Protection is the umbrella. Two CTI capabilities go deeper into its sources.
In the portal
The deliverable is the dashboard.
Findings live in the Fortgale Defence Platform portal, next to the other modules.
01
Dashboard
A single view of the findings, with source, date and context.
02
Classification
Every finding is open, handled or a false positive: you know what is in progress and what is closed.
03
No periodic report
The service does not include periodic reports: check the dashboard in the portal.
Technical honesty
What DRP does not do.
It does not run automatic takedowns and does not guarantee removal: the request goes through provider channels, and the provider decides.
It does not publish numbers of sources or leaks monitored: a big figure says nothing about quality. What matters is that the finding is real, arrives in time and that you know what to do.
It does not replace an MDR: it tells you what circulates outside, it does not detect what happens inside your systems.
Questions? Let us talk. If you do not need it, we will say so.
Who it is for
Who has most to lose outside the perimeter.
Banks and financial institutions, where leaked credentials and fake domains turn into fraud: read the page dedicated to banking and finance. Alongside them, any organisation with an exposed brand: e-commerce, consumer services, companies with a strong social presence.
FAQ
Frequently asked questions about Digital Risk Protection.
What is Digital Risk Protection?
Digital Risk Protection is the monitoring of what concerns an organisation outside its perimeter: deep and dark web, forums, Telegram, leak sites, imitated brands and domains, leaked credentials and data. Findings arrive in the Fortgale Defence Platform portal and are checked by the Milan CTI team.
How is it different from dark web monitoring?
Digital Risk Protection is the umbrella, dark web monitoring is one of the sources. DRP also covers brand, social media, app stores and domains registered to imitate the brand.
Do you do takedowns?
On request, through the channels of the providers concerned. We cannot guarantee removal, because the decision belongs to the provider.
Do I need an MDR?
No, DRP can be activated on its own. With an MDR domain in place, though, the signal enters the defence cycle and helps read alerts and decide the response.
Start with DRP
What circulates about you outside the perimeter today?
Talk to the Milan CTI team: we will see together which sources make sense for your organisation and how they connect to the defence you already have.