For teams without a SOC
The first pass on brand threats, done for you.
Averrow triages findings by rule so your queue holds what needs a decision. If you'd rather not work the queue yourself, our analysts can handle your alerts as a service.
acme.example Set aside Your own domain, set aside with the reason recorded
acme-secure-login.example High Serving a login page. Assigned to Averrow SOC.
Takedown draft Awaiting approval Evidence summary attached
Nothing is filed without your approval or your signed rules
Automated triage
A queue of decisions, not raw alerts.
Automatic triage runs on most finding types before you see them: threats, social, app-store, executive and look-alike alerts.
- Noise is dismissed for you. Low-value noise is dismissed automatically, with the reason recorded, so your queue holds what needs a decision.
- Your own domains are set aside. Your official domains are recognised automatically. Tell us your CDNs and partners and we exclude them too.
- Findings arrive with their evidence. Each alert in your console says what was found and why it was flagged, so a decision doesn't start with research.
- Nothing is filed on its own. A takedown is drafted and waits for your approval, or is filed under rules you've signed.
acme.example Set aside Your official domain. Reason recorded.
acme-pay.example Low Parked, re-checked
acme-secure-login.example High Serving a login page
Averrow SOC
Or let our analysts work your alerts.
Our analysts can triage and act on alerts for you. Status changes show in your console, and alerts they hold are assigned to Averrow SOC.
- Acknowledge and triage. Our analysts work your alerts from the Averrow console: they acknowledge them, change their status and take them on.
- You see the work. The status changes show in your console, and an alert they hold is assigned to Averrow SOC. Staff are never named, and their working notes stay internal.
- Takedowns stay yours. Our analysts never submit a takedown without your authorization: your approval, or rules you've signed. They can't sign or revoke the authorization.
- Your cases stay yours. Analysts can't create or edit your investigations.
acme-secure-login.example Acknowledged Assigned to Averrow SOC
acme-pay.example Triaged Status changed to Triaged
Takedown draft Awaiting approval Waiting for your approval
Alerts our analysts hold are assigned to Averrow SOC
Managed handling is arranged with our team. Book a demo and ask for it, or see how takedowns stay under your control.
Scope
What's covered, and what isn't.
Every claim on this page has a limit. These are the limits.
| Area | Covered | Not covered |
|---|---|---|
| Automated triage | Rule-based. Low-value noise is dismissed automatically with the reason recorded, and your official domains are set aside. | Rules you write yourself, and a published list of the rules. |
| Averrow SOC | Our analysts acknowledge and triage your alerts. Status changes show in your console, and alerts they hold are assigned to Averrow SOC. | Named analysts, visible working notes, and promised response or resolution times. |
| Takedowns | Drafted with an evidence summary, and filed only with your approval or under your signed rules. | Anything filed without your authorization, and a promise that a provider will remove a site. |
| Your records | Your investigations and your takedown authorization stay in your hands. Our analysts may draft takedowns; nothing is filed without your approval or signed rules. | Our analysts creating or editing your investigations, or signing and revoking your authorization. |
| Setup | Our team sets up managed handling with you when you book a demo. | A switch in the console. It's arranged with us. |
Automated triage
- Covered
- Rule-based. Low-value noise is dismissed automatically with the reason recorded, and your official domains are set aside.
- Not covered
- Rules you write yourself, and a published list of the rules.
Averrow SOC
- Covered
- Our analysts acknowledge and triage your alerts. Status changes show in your console, and alerts they hold are assigned to Averrow SOC.
- Not covered
- Named analysts, visible working notes, and promised response or resolution times.
Takedowns
- Covered
- Drafted with an evidence summary, and filed only with your approval or under your signed rules.
- Not covered
- Anything filed without your authorization, and a promise that a provider will remove a site.
Your records
- Covered
- Your investigations and your takedown authorization stay in your hands. Our analysts may draft takedowns; nothing is filed without your approval or signed rules.
- Not covered
- Our analysts creating or editing your investigations, or signing and revoking your authorization.
Setup
- Covered
- Our team sets up managed handling with you when you book a demo.
- Not covered
- A switch in the console. It's arranged with us.
Related
The platform behind this role
Other roles
If you do have analysts
Hand over the first pass.
Run a free domain scan, no signup. Or book a demo and we'll walk through the queue, the triage and managed handling.