Surface & infrastructure
Ransomware & supply-chain exposure
We detect the listing of your organisation or your suppliers on ransomware groups’ leak sites, together with the files exposed there. Ransomware and supplier monitoring detects the listing of your organisation or your suppliers on ransomware groups’ leak sites, together with the files exposed there.
The problem
When a supplier is hit, your data can be published without you being attacked. Groups announce their victims on leak sites, often before any contractual notification. Knowing the same day changes the response: contracts, notifications, replacing shared access. Leak sites are collected continuously and the groups’ channels followed by specialised analysts, ahead of any notification.
Client area preview
What you see
Fictional data, for illustration only: no client, no real data.
What you get: this screen in your client area, refreshed at every synchronisation, with CSV and JSON export.
- 01
The listings concerning your organisation or your suppliers, with the group and the date
- 02
The announced file list when it is published, to judge what concerns you
- 03
A notification letter template and the follow-up of your exchanges with the supplier
How it works
Our answer in three steps
VesperID watches ransomware groups’ leak sites for your organisation and the suppliers you declare, and reports the listing, the group, the date and the announced file list.
- 01
You declare your domains and your critical suppliers as keywords.
- 02
The groups’ leak sites are collected continuously and their channels followed by our partners’ analysts; the platform matches every listing to your name and your suppliers.
- 03
An analyst confirms the victim, assesses the exposure for you and writes the first actions.
Where this data comes from
Listings come from the groups’ leak and claim sites, collected continuously, and from the channels where our partners’ analysts follow those groups; VesperID matches them to your name and your declared suppliers.
Our sources in detailCross analyses
What the platform computes on top
This service’s data is crossed with the others’: here are the analyses that come out of it, all visible in the client area.
Discover the platform- 01
Ransomware exposure index
Per supplier and across the portfolio, from leak-site listings and the accounts exposed on their side.
- 02
Supplier chain
A supplier breach exposing your accounts forms a chain with a “supplier compromise” origin, with the supplier questionnaire as playbook.
What you receive
Ransomware & supply-chain exposure
- 01
Alert on the day of the listing
- 02
Record per victim: group, dates, announced files
- 03
Notification template and list of shared access to replace
- 04
Monthly review of the monitored supplier chain
Frequently asked questions
Do you download the published files?
No. We record the file lists and the announced metadata; we do not retrieve the stolen data.
How many suppliers can we follow?
The number of keywords is set at scoping; it grows during the year if your chain changes.
What if we are the ones listed?
The alert is immediate and an analyst calls you: what is announced, what can be verified, what must be notified and to whom.
Request an exposure assessment.
One hour with an analyst, not a demo: what already circulates about your organisation, what to monitor, what is better left alone. Reply within one working day.
No public price list: bespoke offering, written proposal after scoping.