Resources

Read, learn, build with us.

Threat research, deployment guides, the API, what shipped last week — all the materials your security team will actually use.

Changelog

What shipped, when. Subscribe to changelog · RSS

May 22, 2026
v4.2.1

Phishing lookalike model · v4.2

  • Trained on 18M new labeled samples; precision lift +1.4pp, FP reduction 36%.
  • Added structural similarity scoring for Punycode & homoglyph domains.
  • Per-tenant brand lists — bring your own logos & we’ll watch for lookalikes.
  • The model now writes a short rationale in each detection for analyst review.
May 14, 2026
v4.1.4

Terraform provider v1.0 (GA)

  • Manage policies, sites, lists, integrations, and identity mappings as code.
  • Drift detection on every plan; safe-mode for production policies.
  • Examples for AWS, GCP, Azure, and on-prem deploys in the registry.
May 6, 2026
v4.1.2

Faster query-log search

  • Hot search p99 went from 1.4s → 380ms across 4B events.
  • Regex queries now supported on domain & user fields.
  • Saved searches with per-team sharing; alert when a saved search matches.
April 28, 2026
v4.0

Microsoft Sentinel native connector

  • One-click connector in the Sentinel content hub.
  • Auto-mapped ASIM DNS schema, with built-in analytic rules & workbooks.
  • Backfill up to 30 days of historical events on first connection.

Trust & Security

We host the most sensitive layer of your network. Here’s how we earn it.

SOC 2 Type II

Audited annually by an AICPA-accredited firm. Report available under NDA.

ISO 27001:2022

Certified, scope: all services and supporting systems.

HIPAA

BAA included on Enterprise. PHI never logged or transmitted to third parties.

Encryption in transit

DoH and DoT on every resolver. TLS 1.3 minimum, automatic cert rotation.

Data residency

US-only, EU-only, or APAC-only resolver regions available on Business+.

Bug bounty

Public program on HackerOne. Average payout: $1,400. Hall of fame: 184 researchers.

Have a question about a specific topic?

Our engineering team answers technical questions directly. No SDRs in the middle.