Digital Risk Protection

Unrivaled Digital Risk Protection Overview

Kroll’s Digital Risk Protection services provide a holistic understanding of what information is available about your organization in all corners of the internet. This can range from monitoring brand reputation to assessing the extent of leaked data from a past incident. Powered by key partnerships and elite threat intelligence analysts, Kroll’s cyber threat intelligence team leverages frontline expertise to monitor both surface and deep and dark web for deeper insight into any exposure.

As the world’s #1 incident response provider, we deliver frontline-informed dark web monitoring, brand monitoring and domain protection, and threat monitoring for social media, chat platforms and repositories. Drawing on experience in the U.S. Secret Service, the FBI and Fortune 100, Kroll’s analysts manage and minimize your organization’s exposure to risk in an increasingly complex threat landscape.

Talk to an Expert

Reduce your Attack Surface

The continually evolving attack surface demands constant vigilance. Attack surface management or external attack surface management (EASM) enables organizations to monitor for and manage these types of threats more easily and effectively.  Kroll’s digital risk protection service enables you to gain comprehensive insight into your external attack surface and continuously reduce your exposure across the surface, deep and dark web. 

Account takeover is one of the most common ways in which threat actors gain access to accounts, typically by using previously compromised or stolen credentials sold on the dark web to automate login attempts. By monitoring comprehensively for compromised credentials, digital risk protection minimizes the risks created by account takeover.

How It Works

Our threat intelligence analysts use a combination of automated and manual data collection methods to monitor for any exposures across the surface, deep and dark web sources, including ransomware shaming sites, criminal marketplaces, private forums, closed and private bin/paste sites and Tor chat platforms.

Our analysts then filter out false positives and duplicates to deliver an early warning of targeted malicious activity in the form of alerts via our client portal, Redscan, that could be indicative of an impending, targeted attack campaign on your organization.

Kroll’s Digital Risk Protection Services

Supplement Your MDR Service with Digital Risk Protection

Customers who choose to bundle our Responder MDR service with our Digital Risk Protection services see added benefits:

• Alerting of Both Internal and External Threat Activity in One Portal

  By having alerts from your internal controls and from the dark web in one interface, you can maintain visibility of both threats in the wild and in your network. This also gives you the opportunity to immediately get more context behind a threat in your environment such as previously leaked or stolen information.

• Extended Visibility of Threat Activity Across the Attack Chain, From Pre-, During and Post-compromise

  Supplementing your MDR service with dark web monitoring gives you extended visibility across the entire attacker lifecycle, which gives you additional layers of defense: 1) the opportunity to stop a planned attack in its tracks before it hits your network 2) if it does enter your network you have visibility but also can respond to contain it and 3) if the attack is successful or if it has compromised a previously unmonitored endpoint, you can identify early what data has been leaked.

• Use Intel From Surface, Deep and Dark Web to Supplement New Detection Use Cases

  This intelligence gives your security operations teams additional IOCs to monitor, which, in turn, can be a new source for creating adversary-driven detection rules and playbooks. Armed with this additional intel can refocus your security controls but also proactively indicate new security policies and hardening priorities.

• Extend Response, Not Just Detection

  Some providers such as Kroll can include takedown services so organizations can respond to any signs of brand impersonations such as typosquatting or phishing campaigns. This adds an additional string to your bow in terms of response options that go beyond your internal controls to more external threats.