AnubisNetworks, formally known as AnubisNetworks - Informática e Comunicações, S.A., is a high-technology cybersecurity firm headquartered in Lisbon, Portugal. Founded in 2006 by a group of experts in the field of electronic messaging and network security, the company established itself as a pioneer in the European threat intelligence landscape. In 2014, AnubisNetworks was acquired by BitSight, a leader in security ratings, though it continues to operate as a critical technological backbone and a specialized entity within the broader BitSight ecosystem.
The companyâ??s primary mission is to provide real-time visibility into the global threat landscape. By leveraging a massive infrastructure of sensors and sinkholes, AnubisNetworks monitors malicious activity across the internet, translating raw data into actionable intelligence for telecommunications companies, Internet Service Providers (ISPs), financial institutions, and large-scale enterprises.
Core Technological Specialization
AnubisNetworks operates at the intersection of big data analytics and cybersecurity. Their technical architecture is designed to handle the ingestion and processing of billions of events daily. Unlike traditional security firms that focus solely on perimeter defense, AnubisNetworks focuses on "outside-in" intelligence. This involves tracking the behavior of botnets, malware distribution networks, and compromised assets at a global scale.
The company is particularly renowned for its sinkholing capabilities. By intercepting communications between infected devices (bots) and their command-and-control (C&C) servers, AnubisNetworks is able to identify compromised IP addresses in real-time. This methodology provides a unique vantage point for observing the spread of malware and the evolution of cyber threats without requiring an agent to be installed on the victim's device.
Product Portfolio: Cyberfeed
The flagship product of AnubisNetworks is Cyberfeed, a high-performance threat intelligence platform. Cyberfeed is designed to provide organizations with a real-time stream of security events related to their specific network footprint or their customer base.
Key Components of Cyberfeed:
1. Real-Time Infection Tracking
Cyberfeed provides granular data on compromised systems, including the specific malware family (e.g., banking trojans, ransomware, or IoT-specific malware) affecting an IP address. This allows ISPs and enterprises to notify their customers or internal departments about infections before they lead to data breaches or significant operational downtime.
2. Botnet Monitoring
The platform monitors hundreds of active botnets. By analyzing the communication protocols used by these networks, AnubisNetworks can provide early warnings about new attack vectors, including Distributed Denial of Service (DDoS) campaigns and large-scale credential harvesting.
3. Data Integration and APIs
Cyberfeed is built for integration. The data is delivered via high-speed APIs or STIX/TAXII feeds, allowing it to be ingested directly into Security Information and Event Management (SIEM) systems, Security Orchestration, Automation, and Response (SOAR) platforms, or custom-built security dashboards.
4. Global Footprint Mapping
The service allows users to visualize threats on a geographical basis, helping national CERTs (Computer Emergency Response Teams) and global organizations understand the regional prevalence of certain threats.
Email and Messaging Security: Mail-GPS
AnubisNetworks originally gained prominence through its expertise in electronic messaging. While threat intelligence is now its primary focus, its legacy and ongoing innovation in email security remain a core part of its value proposition, particularly for Service Providers.
Mail-GPS Capabilities:
1. Carrier-Grade Anti-Spam and Anti-Malware
Mail-GPS is a managed email security solution designed to handle the high volumes of traffic associated with ISPs and large corporations. It utilizes a multi-layered filtering approach to intercept spam, phishing attempts, and virus-laden attachments before they reach the end-userâ??s inbox.
2. Outbound Filtering
A critical feature for service providers is the ability to monitor outbound email. Mail-GPS identifies compromised accounts within a provider's network that are being used to send spam or malicious content. By blocking this traffic at the source, the platform protects the reputation of the providerâ??s IP space and prevents blacklisting by global RBLs (Real-time Blackhole Lists).
3. Infrastructure Protection
Beyond simple filtering, the service provides protection against Directory Harvest Attacks (DHA) and Mail-Bombs, ensuring that the underlying messaging infrastructure remains resilient and available.
Managed Security Services and Consultancy
AnubisNetworks extends its technological offerings through a suite of professional services aimed at organizations that require specialized security expertise.
Threat Landscape Reporting: The company provides bespoke reports that analyze specific industry sectors or geographic regions. These reports help C-level executives and security directors make informed decisions regarding their long-term security investments.
Incident Response Support: Leveraging their real-time data feeds, AnubisNetworks assists organizations in identifying the scope of a breach. When a company discovers a compromised asset, AnubisNetworks can provide historical data to determine how long the asset has been communicating with malicious infrastructure.
Custom Data Feeds: For organizations with unique requirements, AnubisNetworks develops custom sensors and crawlers to monitor specific threats or data leaks that may not be covered by standard intelligence feeds.
Market Position and Client Verticals
AnubisNetworks occupies a niche but vital position in the cybersecurity market. Its primary clients include:
- Telecommunications and ISPs: These entities use AnubisNetworks to clean their networks, reduce bandwidth waste caused by botnet traffic, and offer "Clean Pipe" value-added services to their subscribers.
- Financial Institutions: Banks utilize the platform to detect banking trojans and phishing campaigns targeting their customers, allowing them to proactively disable fraudulent sites and protect user accounts.
- Government and National CERTs: National-level security organizations use the data to monitor the overall health of their countryâ??s internet space and coordinate large-scale remediation efforts.
By integrating its deep threat intelligence into the BitSight Security Ratings platform, AnubisNetworks also contributes significantly to the world of cyber insurance and third-party risk management. The data gathered from their sinkholes serves as a factual basis for assessing the security posture of hundreds of thousands of companies worldwide, making AnubisNetworks a foundational player in the modern digital risk ecosystem.
