About Sig Pulse

We built Sig Pulse because we kept doing the same thing by hand. On incident response jobs, someone on the team would end up keeping a spreadsheet of domains, IPs and hashes, with a column for “where did this come from” that was never filled in. Two weeks later, a new alert would contain a domain from that spreadsheet and nobody would notice.

A graph fixes most of that, as long as the data going in is clean and every edge can be traced back to its source. Most of our work goes into those two things. The model that suggests links is useful, but only because it sits on top of data an analyst can check.

We’re a small team of former incident responders and data engineers. We run Sig Pulse on our own research every day.

How we work with customers

Every new customer starts with a pilot. We connect your real sources, and you decide after 30 days whether it saved your team time. Tell us what you’d need to see during that time and we’ll set the pilot up around it.