Silent Push is a threat intelligence company that helps security teams find attacker infrastructure before it is used against them. Instead of waiting for a malicious domain or IP address to appear in an incident, it maps the servers, domains and certificates that threat actors are setting up during reconnaissance and weaponisation.
Its customers are security operations, threat intelligence and brand protection teams that want warning of an attack while it is still being prepared.
At A Glance
| Vendor | Silent Push Inc. |
|---|---|
| Category | Threat intelligence, preemptive cyber defence, attacker infrastructure discovery |
| Deployment | Web platform, API, intelligence feeds and a Chrome extension |
| Core concept | Indicators of Future Attack (IOFA) |
| Platform | Preemptive Cyber Defense Platform |
| Market classification | Security Operations; also Network Security |
What Silent Push Does
Most threat feeds describe infrastructure that has already been used in an attack, which leaves defenders reacting. Silent Push studies how attackers create, deploy and manage their infrastructure, including the patterns their DNS automation leaves behind, and uses those tactics, techniques and procedures to flag domains and IPs that are likely to be used next. The result is a set of Indicators of Future Attack (IOFA): assets that can be watched or blocked before they appear in an incident, each carrying risk and reputation scores to help with triage.
Products
Threat Hunting
Threat Hunting is the analyst workbench. Fingerprints built from more than 200 datapoints across DNS, WHOIS, certificates and web content let a hunter describe how a particular actor builds its infrastructure and find every matching asset. DNS and WHOIS lookups, website and URL scanning and threat intelligence management sit together in one platform, with pre-built and custom queries.
Brand Protection
Brand Protection helps organisations spot impersonation campaigns aimed at them, their supply chain and their customers. Because lookalike domains and cloned pages are built before a phishing campaign goes live, the same early view of attacker infrastructure gives brand and fraud teams time to have them taken down.
- Detection of typosquatting, favicon impersonation and copied digital assets
- Discovery of forgotten subdomains, shadow IT and unapproved third-party services
- Monitors for dangling DNS records that alert when a record becomes exploitable
Automated Intelligence
For teams that want the output without manual hunting, Automated Intelligence delivers curated IOFA feeds and tracks command-and-control infrastructure and APT activity. The feeds carry the same risk and reputation scores as the platform, so a SIEM or firewall can act on them directly.
How It Works
Silent Push builds its data set from billions of observable internet datapoints, collected across DNS, WHOIS, certificate and web content sources and analysed for how threat actors set up infrastructure before and after an attack. Users reach that data in several ways:
| Web platform | Users sign in for lookups, scans, queries and monitors. |
|---|---|
| API | An Enterprise subscription opens more than 100 domain, IPv4, IPv6 and URL endpoints. |
| Feeds | IOFA feeds, APT feeds and C2 infrastructure monitoring are pushed to other tools. |
| Chrome extension | Scans, extracts and saves DNS data from web pages, with one-click pivots into the platform. |
Integrations
Native connections cover SIEM, SOAR and TIP platforms, so IOFA data can drive detections and automated responses.
| Area | Integrations |
|---|---|
| SOAR | Torq, Tines, Swimlane, Palo Alto Networks Cortex, D3 Security, ServiceNow, Google SecOps, StrikeReady |
| SIEM | Splunk, Abstract Security, Sumo Logic |
| TIP | ThreatConnect, ThreatQ, OpenCTI, Analyst1, Cyware, Outcome Security |
| Other | CrowdStrike, Maltego, Polarity, Databricks |
Company Background
| Leadership | Ken Bagnall, Founder and Chief Executive Officer; John Jensen, Founder and Chief Technology Officer; Nicola Walsh, Chief Financial Officer. |
|---|---|
| Programmes | A member of Singapore’s IMDA Spark Programme. |
| Research | A Preemptive Cyber Defense Team publishes threat research, such as guidance for financial institutions on North Korean remote IT workers. |
| Recognition | Included in the 2026 Inc. 5000. |
Note: This overview is compiled from Silent Push’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.