Incident, Investigation, and Intelligence (I3)

Service Description

In addition to our product suite, RiskIQ offers a range of services provided by our Incident, Investigation, and Intelligence (i3) team. These services combine best-in-class technology with expert human analysis from former national security and intelligence officers and trained analysts, acting a force-multiplier to maximize the value customers can gain from their investment in RiskIQ.

Advanced Investigations

RiskIQ knows its data best, but RiskIQ customers know which investigations are most impactful to them. Advanced Investigations allows customers to submit requests for information (RFIs), tasking RiskIQ analysts to undertake a deeper investigation in efforts to uncover threats and threat actors using RiskIQ data in combination with OSINT and/or hand-selected third party platforms, depending on the requested topic. In some cases, these investigations can be anonymized and leveraged to educate on a variety of threats or analytical methodologies. 

A yearly Advanced Investigations subscription provides an organization 1 RFI "Token" per calendar month. Each “Token” represents up to 4.5 hours of i3 Advanced Investigation Services devoted to specific projects they request. To redeem a Token, the customer and RiskIQ shall agree in writing on what the deliverable and completion of the services performed for each Token will be.

Analyst On-Demand

Analyst On-Demand provides the same service as Advanced Investigations, but on an as-needed basis rather than an annual subscription. Purchasing an Analyst On-Demand "Token" entitles customers to immediate support (up to 4.5 hours of i3 Advanced Investigation Services Per Token) from RiskIQ's team to solve an urgent case or respond to a breach or other event. 

Tokens may be purchased a la carte at any time. To redeem a Token, the customer and RiskIQ shall agree in writing on what the deliverable and completion of the services performed for each Token will be.

Managed Intelligence Services (MIS)

With a subscription to Managed Intelligence Services (MIS), RiskIQ analysts operate purchased RiskIQ SaaS products on a customer's behalf, acting as an extension of the customer's security organization with deep knowledge of the RiskIQ platform and domain expertise in incident response and mitigation so that they can manage their headcount and resources most efficiently. 

Managed Intelligence Services are included at no additional cost in RiskIQ's External Threats and Executive Guardian products to provide event triage and mitigation services as applicable, but MIS can also be optionally added to Digital Footprint, JavaScript Threats, Tailored Intelligence, and/or other RiskIQ SaaS products as needed.