DNSSense DDR 2.0

DNSSense DDR 2.0 (DNS Detection and Response) is a DNS-focused detection and response solution that combines three integrated products: DNSEye, DNSDome, and Cyber X-Ray. It uses AI and machine learning algorithms to detect and respond to DNS-based threats, including DNS tunneling, data exfiltration, and unknown/zero-day threats. Key capabilities include: - Traffic investigation to detect device-based anomalies in outbound DNS traffic and reveal paths to compromised websites - AI-based DNS tunneling detection, targeting ultra-slow and hard-to-detect tunneling attempts - Real-time automated incident response for both known and emerging threats - DNS log enrichment and correlation with XDR, SIEM, and IAM platforms for cross-layer visibility - Domain threat intelligence via Cyber X-Ray, which categorises internet domains in real-time - A "Positive Security" model that restricts access to only custom-defined permissions to reduce attack surface - Security gap reporting to identify blind spots in existing security stacks - Differentiation between voluntary and involuntary DNS requests by analysing unauthorised traffic redirections The solution claims to reduce dwell time by approximately 80%, cut SIEM log-processing costs by up to 99%, reduce XDR-SIEM log forwarding volume by approximately 60%, and deploy approximately 90 times faster than standard SIEMs. It targets SOC and MDR teams, supporting workflow automation and custom rule configuration for prioritising critical devices.