Incident emergency responseEmergency
Contact us
Download materialsQuick risk check

RiskSensor · Patent pending

Is your cybersecurity
stopping at the assessment?

RiskSensor makes external risk visible and keeps verifying and improving it.

Request a quick risk checkDownload materials

Today’s security checks aren’t working.

SMEs

Short on specialists and budget.

Large enterprises

Hard to see across all suppliers.

Service providers

Customer information is scattered.

The same checks are repeated from company to company.

Assessed once. Risk changes daily.

  1. Apr

    Assessment

    Report completed

  2. Jun

    External risk changes

    Situation changes

  3. Jul

    Re-check & improve

    Respond to change

Dates are illustrative.

From a one-off assessment to continuously catching change, verifying and improving.

Continuous Security Assurance

Check, act, then check again.

Don’t stop at a one-off assessment. Repeat external checks and assessment with evidence, catch change as it happens, and stay ready to explain where you stand.

What RiskSensor does

External risk and internal controls, in one place.

External Risk Intelligence

ERI

Starting from a domain, continuously check internet-facing assets, vulnerabilities, misconfigurations and signs of leaked data.

Supply Chain Security

SCS

Support for Japan’s SCS assessment scheme, from questionnaire answers and evidence review to gap identification and remediation tracking.

Threat intelligence

Vision Intelligence Data

Threats relevant to you as objective external intelligence, fed via API into DNS, firewalls, SIEM and your other defences.

Early Vulnerability Intelligence (roadmap)

EVI

Intelligence that catches early signs of vulnerabilities before they are exploited.

RiskSensor ERI

See what attackers see, first.

From a domain to its subdomains, public servers and open ports. We keep checking what is visible from outside and tell you when something is exposed.

RiskSensor ERI — External Risk Intelligence

Keep checking the risk visible from outside.

All you need is a domain. See yourself and your related companies the way attackers and customers do: from the outside.

What we check

  • Domains
  • IP addresses
  • Public-facing systems
  • Cloud and web applications
  • Unknown internet-facing assets (shadow IT)

Internet-facing assets

Discover assets linked to your domain, unnecessary ports and services, and exposed admin panels.

Vulnerabilities and misconfigurations

Known vulnerabilities (CVE), web application weaknesses and SSL/TLS settings, prioritised by risk.

Signs of leaked data

Check the dark web and public sources for credentials, email addresses and other data that may already be exposed.

  1. 01 DISCOVER

    Discover assets

    Map internet-facing assets from your domain.

  2. 02 VERIFY

    Verify risk

    Check vulnerabilities, misconfigurations and leaks.

  3. 03 MONITOR

    Monitor change

    Regular checks catch what changes.

  4. 04 IMPROVE

    Confirm improvement

    Re-check fixes and record progress.

RiskSensor SCS — Supply Chain Security

Don’t stop at submitting a report.

End-to-end support for Japan’s SCS assessment scheme, from answers and evidence to remediation.

  1. 01 01

    Answer

    Answer the questionnaire

  2. 02 02

    Evidence

    Organise and review supporting documents

  3. 03 03

    Gaps

    Identify gaps and items needing review

  4. 04 04

    Improve

    Track owners, deadlines and status

SCS: METI’s security assessment scheme for strengthening supply chains.

Beyond self-attestation: verify against evidence, then improve.

Vision Intelligence Data

Many sources, delivered into the defences you already run.

External threat intelligence narrowed to what matters to you, in a form your DNS, firewall, SIEM and other existing tools can use.

Vision Intelligence Data

Intelligence, built into your existing defences and services.

Threats relevant to your organisation, delivered as objective external intelligence and tied to detection, investigation, prioritisation and response. What you need isn’t more data — it’s knowing early what applies to you, inside the defences you already run.

Threat intelligence

Malicious domains, IP addresses, attack infrastructure and related threat information.

Data delivery and integration

Via API and data feeds into DNS, firewalls, SIEM, log platforms and security services.

Joint service development

With telecom, security, cloud and managed service providers, from service design through to operations.

  • API
  • Data feeds
  • DNS
  • SIEM and logs
  • Security services
  • Joint services

Alongside our own observations, we can combine data from Censys, Spamhaus, Team Cymru and SURBL, which we resell as an authorised partner.Intelligence partners →

RiskSensor EVI — Early Vulnerability Intelligence Roadmap

Know what attackers are exploiting in Japan — early.

Instead of treating every vulnerability the same, EVI prioritises what is actually being exploited in Japan, with evidence, so you know what to fix today.

Daily brief

Campaigns targeting Japan and actively exploited vulnerabilities, summarised daily in Japanese and English, each with evidence, applicability and fix.

Rapid alert

Notified the moment exploitation is confirmed in Japan, with a suggested deadline, how to check if it applies, and how to fix it.

Live feed

Delivered via API, webhook or STIX/TAXII 2.1, ready for your SIEM or threat intelligence platform.

How it differs from a generic CVE feed

Generic CVE feedRiskSensor EVI
Where it looksUS-centric listsJapan-first sources: JPCERT/CC, JVN, Japanese channels
What it tells youJust severity scoresWhat is really being exploited — dark web, live attacks
What it costs youEverything, noise and allOnly what applies to you

Your data never leaves. No CVE lists, asset data or queries are sent to Pipeline.

Roadmap: planned capabilities, subject to change.

External risk and internal controls, together.

See changes in external risk from ERI alongside SCS assessment and remediation status on one screen, and keep repeating “check risk → assess and act → re-check”.

RiskSensor dashboard showing active risks, critical alerts, monitored suppliers, external assets and SCS assessment progress (demo data)
RiskSensor notification panel listing a critical vulnerability, a supplier risk-level increase, a newly discovered public asset and a dark-web data mention (demo data)

Actual product screens (demo data).

No company can secure itself alone.

A shared workspace where companies, suppliers and experts check and improve together, sharing information safely according to permissions.

SMEs

Answers, evidence, improvement

Large enterprises

Supplier assessment and progress

Consultants

Evidence review and advice

MSPs

Ongoing operations

AI assists the review. People decide.

RiskSensor AI tailors its support to each user’s role.

General users

Help answering questions, organising evidence and checking what’s missing.

Experts and consultants

Help reviewing submissions, matching evidence against gaps and speeding up assessments.

Getting started

All you need is a domain. Minimal load on your systems and no prior setup.

  1. 01 STEP 1

    Choose domains

    Decide which domains (or global IPs) to check.

  2. 02 STEP 2

    Scan

    Run at a time that suits you. Scans finish in tens of minutes to a few hours.

  3. 03 STEP 3

    Report

    An executive summary plus a detailed practitioner report, delivered within days.

  4. 04 STEP 4

    Improve and keep checking

    We walk you through the results, then regular checks catch what changes.

INCIDENT RESPONSE

If something is found, we investigate.

When checks or monitoring surface warning signs, Pipeline analysts investigate logs and dark-web sources and set out confirmed facts and next steps, with evidence. Contracted customers get a first response within 4 business hours (weekdays 9:00–18:00 JST; 24/7 available under an agreed SLA).

Request an investigationAbout incident response

Frequently asked questions

What do I need to get started?

Just the domains you want checked. No software needs to be installed in your environment.

How long do the scan and report take?

Scans finish in tens of minutes to a few hours; the report arrives within days.

Can I use the report for internal reporting and as evidence?

Yes. It includes a summary written for non-technical executives plus practitioner detail, and can be used as evidence.

Does it help with the SCS assessment scheme?

RiskSensor SCS manages the whole flow, from questionnaire answers and evidence review to gap identification and remediation tracking.

Can I check my suppliers’ risk too?

Yes. Supplier and contractor risk and remediation progress are tracked per company in shared workspaces.

Try RiskSensor

Start by seeing what your organisation looks like from the outside.