Landing Page
The landing page is now a true launchpad. Instantly surfacing core use cases, personalized insights, recent updates, and direct paths to Recon, Defend, and Getting Started workflows.
RECON: Enter an indicator to instantly see organized, data-source-specific actions with clear use-case explanations. Routes to Total View tabs (highlights collapsed) or the Search module for SPQL queries.
DEFEND: IOFA & ThreatCheck:
Live totals: Total IOFA, new today, feed count, trend line
Threat Check (Enterprise): Org-level stats (detections, avg lead time) or clear CTA to request access
Community: Showcase value with recent 30-day examples of IOFA detections observed in the wild, including top feed, totals, and lead-time metrics
GETTING STARTED: Personalized quick actions tailored to your tier.
UPDATES: Real-time feed powered by the notification center:
Categories: IOFA (Enterprise), TLP (Enterprise), Releases, Integrations, Monitor Updates
Keeps you informed without leaving the landing page
This refresh delivers:
Immediate access to powerful Recon and Defend functionality
Clear onboarding paths for core use cases (Search, Threat Check, IOFA, Live Scan, TLP)
Always-up-to-date visibility into product releases and important notifications
A faster, more intuitive entry point for Enterprise, Professional, and Community users
Unified Search and Saved Queries
Domain Search – Fully Integrated into SPQL
Domain Search is now natively built into Silent Push Query Language (SPQL), replacing the older, often confusing Advanced Query Builder interface. By aligning Domain Search with the same SPQL experience used throughout the rest of the platform, we’ve created a consistent, predictable way to query domain-related data.
This change brings powerful new capabilities: users can now save, monitor, tag, and share Domain Search queries just as they can any other SPQL query. It also opens the door to automation and reusable workflows, allowing customers to build recurring domain-intelligence processes that run reliably and are easily maintained or handed off to team members.
Total View Enhancements
IP Whois data is now enabled by default for every user and every enterprise account—no manual activation required. This brings IP Total View into closer parity with Domain Total View and provides a consistent experience when investigating either IP addresses or domains.
WHOIS information now appears in a clean, dedicated “WHOIS” tab within the IP TotalView interface.
Integrations
Google Sec Ops
Google Security Operations is a cloud-based SOAR platform that helps organizations detect, investigate, and respond to security threats in their Google Cloud environment. By integrating with Silent Push, users can leverage its threat intelligence within Google SecOps to enrich alerts with contextual data, automate investigations, and streamline detection and response workflows.
The Google SecOps (formerly Chronicle) integration is now complete and fully approved. This marks our first major security-focused integration into a Google environment and has already proven valuable in real-world use cases. All necessary Calibre and Google SecOps approvals have been finalized.
We’ve also delivered the long-requested Mimecast integration, providing customers with additional visibility into email security. On the partnership front, Google has officially signed as a customer, perfect timing given the newly available SecOps integration.
ServiceNow
Silent Push integrates with ServiceNow to provide preemptive threat intelligence, enriching security alerts and incidents with insights into malicious domains, IPs, and attacker infrastructure, accelerating investigation and response.
Maltego
Maltego is an analysis and investigation platform that allows analysts to visualize relationships between domains, IPs, people, organizations, and infrastructure to investigate cyber threats. With this Silent Push integration, analysts gain enriched threat intelligence directly within Maltego, enhancing investigations and decision-making.
Legion Security
Legion Security offers a browser-based tool that tracks real analyst investigations and leverages artificial intelligence to create automated workflows. With Silent Push integration, analysts can quickly gather additional enriched data on potential malicious domains and IPs, improving threat detection and response.
Cyware Orchestrate
Cyware Orchestrate now supports two new Silent Push connectors: Silent Push for full threat enrichment, Reputation scoring, DNS intelligence, live scanning, and Feed Management; and Silent Push Threat Check for Indicators of Future Attack (IOFA) checking and traffic origin analysis. These integrations deliver high-fidelity, proactive visibility into attacker infrastructure before active campaigns.