Silent Push 6.1 Platform Detects Attacker Infrastructure Earlier for Preemptive Action

news, platform

Latest enhancements include an updated brand and infrastructure impersonation engine, a platform that makes investigations even faster, new integrations, and expanded global support.

Reston, VA – Sept. 9, 2026 — Silent Push, the leading preemptive cyber defense company, today announced enhancements to its preemptive cyber defense platform with Silent Push 6.1. The latest version features a complete rebuild of its Brand and Infrastructure Impersonation capabilities, now fully automated so the platform continuously hunts for imposters and keeps customers informed of what it finds on their behalf, and enhanced extensibility to enable analysts to seamlessly integrate into security telemetry and AI tools for faster pivots and controlled intelligence delivery.

Brand and infrastructure impersonation is now a formal intelligence requirement, not just a marketing concern. In its April 2026 research note, Align Cyberthreat Intelligence to Business Priorities for Stronger SecOps, Gartner® identifies “Brand Abuse and Phishing Infrastructure” as an example intelligence requirement and frames the question security operations teams must answer as: “What malicious domains, phishing assets, or impersonation campaigns are leveraging our brand, and what actions are needed to disrupt them before they scale?”

Silent Push 6.1 is built to answer that question before the first phishing email is sent. Set it once, and the platform keeps finding new look-alike domains and reporting them to your team on an ongoing basis.

“Signal is essential for weeding out noise against today’s attack environment, and time is the biggest disadvantage defenders have,” said Vladimir Krupnov, Threat Intelligence Lead, Revolut. “Silent Push helps isolate impersonated domains, delivering a detection that is months ahead of other tools. This provides the early-action intelligence to inform critical workflows to protect the business.”


“Disrupting impersonation before it scales means finding it before it is used,” said Ken Bagnall, Co-Founder & CEO, Silent Push. “The new Brand and Infrastructure Impersonation engine turns our data on attackers’ own infrastructure against them. We find the imposters targeting our customers before look-alike domains are ever used against them.”

Silent Push 6.1 centers on protecting what matters to organizations and accelerating everything analysts do next. The platform meets analysts where they already work: SOAR platforms, browsers, AI tools, and threat-intel feeds, further shortening the distance between finding threats and acting on them.

The Silent Push Platform 6.1 launch includes a powerful next-gen brand and infrastructure impersonation engine with a new My Assets feature
The Silent Push Platform 6.1 launch includes a powerful next-gen brand and infrastructure impersonation engine with a new My Assets feature

New capabilities include:

  • Next-Gen Brand and Infrastructure Impersonation: Gartner describes the brand-abuse requirement as: “Continuously discover and score look-alike domains, subdomains, and mobile app listings using brand and keyword monitoring, and provide registrar and hosting details for takedown.” The rebuilt 6.1 engine does exactly that for the infrastructure you own: look-alike domains scored by risk, enriched with registrar and hosting context, clustered by threat actor, and exported as takedown evidence.
  • Advanced Pivot Control: Displays existing Silent Push data and lets you move into WHOIS or open-directory lookups without losing your place in the investigation. Insight Search now understands domains, IPs, ASNs, subnets, and HTML titles in a single query. Total View adds a PADNS timeline, IP certificates, one-click PDF export, and date filtering for screenshots.
  • Ecosystem Reach: With 6.1, the My Assets feature lets you build a reusable list of the infrastructure you own (domains, IP ranges, ASNs, and TLDs), tag it, and reuse it as a one-click input everywhere in the platform.
  • Integrations:
    • Palo Alto Cortex XSOAR: Silent Push intelligence is available inside XSOAR for automated playbooks and response workflows.
    • Chrome Extension: Investigate domains and indicators directly from the browser, without leaving the page you are on.
    • MCP Server: Exposes Silent Push data to AI assistants and agentic workflows over the Model Context Protocol (MCP).
    • Updated TAXII Server: Now supports bidirectional sharing, enabling two-way threat-intelligence exchange over STIX/TAXII.
  • TLP Amber Reports: Custom Silent Push analyst reports now support TLP: AMBER+STRICT, so exclusive, subscription-based intelligence reaches only the organizations and individuals meant to receive them.
  • Internationalization: The interface is now available in Korean and Spanish alongside English, with navigation and guidance fully localized per user, while the underlying data stays the same. Japanese will be available shortly, with additional languages available on customer request.
Screenshot of the Silent Push platform using the Korean language interface
Screenshot of the Silent Push 6.1 Platform in the new Korean language interface

Gartner Disclaimer

Gartner, Align Cyberthreat Intelligence to Business Priorities for Stronger SecOps, Jonathan Nunez, 16 April 2026.

GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved. Gartner does not endorse any vendor, product, or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

About Silent Push

Silent Push is the preemptive cyber defense company. It is the first and only solution to provide a complete view of emerging threat infrastructure in real time, exposing malicious intent through its Indicators of Future Attack® (IOFA) data, enabling security teams to proactively block hidden threats and avoid loss. The Silent Push standalone platform is also available via API, integrating with various security tools, including SIEM & XDR, SOAR, TIP, and OSINT, providing automated enrichment and actionable intelligence. Customers include some of the world’s largest enterprises within the Fortune 500 as well as government agencies. 

A free Community Edition is available. For more information, visit www.silentpush.com or follow on LinkedIn and X.