en.Wedoany.com Reported - Dutch cybersecurity company Modat has introduced native Passive DNS intelligence capabilities in its internet intelligence platform Magnify, unifying IP, device fingerprinting, certificates, and passive DNS into a single pivot-based investigation workflow. This feature aims to address the long-standing challenge faced by threat intelligence, threat hunting, exposure management, and fraud teams in piecing together evidence across multiple tools and data points.
Most internet intelligence platforms are built around a single primary signal, with other data types serving only as supplementary lookups. What sets Magnify apart is that every signal serves as a primary pivot point. With passive DNS becoming a native platform capability, investigators can start from a single domain to discover all IPs hosting that domain; start from a TLS certificate to find all domains it protects; or start from clustered device fingerprints to identify all hosts running the same software stack—all within the same query path. This design generates an attacker infrastructure map that updates as the internet changes, replacing the isolated lookup lists that analysts previously had to manually piece together.
Key features of the passive DNS platform include: infrastructure pivot analysis, allowing movement between IPs, domains, TLS certificates, and clustered device fingerprints within a single graph, with relationships preserved rather than rebuilt across tools; real-time threat correlation, automatically linking newly observed domains and IPs to known indicators of compromise (IOCs), threat actor TTPs, and malware families; retrospective infrastructure analysis, leveraging queryable passive DNS alongside Magnify's IP, device, and certificate timelines to enable analysts to reconstruct the full infrastructure lifecycle of both benign and attacker assets; and API-first integration, enabling seamless connectivity with mainstream SIEM, SOAR, and threat intelligence platforms via REST API.
Soufian El Yadmani, CEO and founder of Modat, stated that from its inception, Magnify was designed to ensure every signal—IP, device, certificate, and now passive DNS—serves as a pivot point within the same graph. Passive DNS is not an add-on feature but the fourth pillar completing the picture.
Founded in 2024 and headquartered in The Hague, Netherlands, Modat is the only European internet intelligence company. Its flagship platform, Modat Magnify, continuously scans the entire internet, profiling every connected device using deep fingerprinting and providing contextual intelligence across more than 50 categories. The company serves national CERTs, critical infrastructure operators, security firms, and large enterprises, with its intelligence used daily by security operations, cyber threat intelligence, threat hunting, and exposure management teams across multiple continents. Modat's passive DNS intelligence capabilities are now available to enterprise customers and MSSP partners.
This article is compiled by Wedoany. All AI citations must indicate the source as "Wedoany". If there is any infringement or other issues, please notify us promptly, and we will modify or delete it accordingly. Email: news@wedoany.com
