SightLabs DNS Ninja


Blue divider

DNS Ninja analyzes your internal DNS traffic and provides insight into potentially malicious nodes in your infrastructure using anomaly detection algorithms.

Globe 1
Globe 2

Full insight into your organization’s DNS traffic


Advanced machine learning algorithms for detecting generated domain names


High-fidelity alerts based on deviations and periodicity of classified DNS requests

Your DNS monitoring tool

Your DNS monitoring tool

Blue divider

DNS Ninja analyzes all DNS traffic in your organization. Each DNS request/response pair is analyzed and classified into a number of categories, such as internal, computer-generated, invalid. For each client from your DNS server, a statistical model is constructed that describes the normal behaviour of the client for each of the DNS categories. Deviations from the normal behaviour are detected and reported. Additionally, the repetitive nature of requests is detected and reported in order to detect automated malicious behaviour. This makes DNS Ninja very well suited for detecting command and control, and exfiltration techniques.

Use existing network devices as data source

Detect the undetected

Highly scalable and cost-effective cyber security solution

Monitoring DNS traffic, use our whole platform

Blue divider

DNS NInja uses a specific data source, your DNS traffic, to detect potentially malicious behaviour. This forms part of our overall platform strategy: using existing data sources to detect adversary behaviour. By using existing data sources, a holistic view is obtained. No more blindspots in your IT landscape! This strongly improves the chance of detecting the undetected; the advanced hacks that have passed your defences and are preparing to severely impact your organization. Do not allow hackers to hide within your own network! 

Monitoring DNS traffic, use our whole platform

Talk to one of SightLabs’ trusted experts!

"*" indicates required fields

This field is for validation purposes and should be left unchanged.