Real-time DNS-based threat prediction, detection and blocking

Get a demoLearn more

NTX is Nominet’s threat monitoring and analytics platform, purpose built to analyse billions of DNS data packets in real time, pinpointing and eradicating malicious activity quickly and effortlessly.

An Introduction to The Nominet NTX Platform

Benefits of the NTX Platform

  1. Proactive real-time threat blocking designed to cut malicious activity off instantly.
  2. Rich APIs which allow DNS threat intelligence to be integrated into existing SIEM and management reporting systems, speeding up response times and providing intelligence for post-breach forensics.
  3. NTX gives you visibility and actionable threat intelligence, highlighting suspicious events and giving you the ability to respond.
Real-time-Intelligence_1.svg
  1. Delivered either in-cloud or on-premise, NTX cloud environments can be deployed in a matter of minutes.
  2. The NTX platform is built to detect malicious activity in seconds so that you can start protecting your business straight away.
  3. Ground-breaking technology uses unique compression, analysis and machine learning algorithms to instantly detect single malicious packets hidden in vast quantities of legitimate enterprise data, before they harm your business.
Action-Performance.svg
  1. Custom dashboards tailored to your business needs and an intuitive web control panel give you unprecedented visibility of your DNS traffic and any associated threats.
  2. Daily logs of blocked domains associated with threats such as malware, phishing, and data exfiltration.
  3. Periodic analysis of service usage and regular service management reports including identification and prioritisation of risks and vulnerabilities.
Custom-Reporting.svg
  1. World renowned DNS analysts with over 20 years’ experience running the .UK namespace, now a part of Critical National Infrastructure.
  2. Award-winning service delivery teams offering around the clock access to online documentation, expert support and dedicated account management.
  3. Chosen by UK Government to run DNS analytics services across the UK public sector, we are proud to be part of the Active Defence Programme run by the National Cyber Security Centre.
Expert-Team.svg

How it Works

how_it_works_1.png

It takes just minutes to install one of our NTX Collector components on your network. This gives us visibility of your DNS traffic for real-time monitoring and action.

how_it_works_2.png

Threats are found and instantly blocked by our unique algorithms, giving your organisation immediate protection from known and unknown threats.

how_it_works_3.png

All captured threats are visually displayed by attack type, category and IP address. This intelligence is easily integrated into your SIEM platform to enrich data and speed up response time.

NTX uses threat intelligence to identify the “known bad” before applying our machine learning derived algorithms to identify the “unknown bad”, immediately cutting the window of compromise on your network.

A “heat map” of all the malicious or suspicious activity on your network at any given point in time.

NTX orchestrates the security data into categories to enable policies to be automatically applied, and prioritises your action items for further investigation and threat hunting.

NTX detects and blocks malware, phishing, “command and control” and data loss activity in real time.

NTX predicts the newly observed domains that could cause harm and blocks them from your network.

explore-ntx-screen-1-new.jpg

Investigate packet information to understand more about the malicious domain.

Review actions for categories or per domain. Granular policy allows you to prevent attacks from subdomains, whilst maintaining legitimate workflows at the top level domain level.

Understand the traffic patterns of the malicious domain.

Understand which endpoints have attempted to connect with the malicious domain.

Export your IP list for correlation with your DHCP server information to pinpoint and isolate endpoints for further investigation.

explore-ntx-screen-2.jpg

See all your DNS traffic (not just the bad) in one place and understand what normal looks like on your network.

Produce PDF reports for executives, operations and analysts to a level of detail and date range that suit your requirements.

See what IPs are visiting websites.

Review deep packet information for threat hunting activity.

Understand what the “top” website destinations are from your network.

explore-ntx-screen-3.jpg
two people looking and pointing at computer screen

Events Dashboard

The NTX dashboard provides an at-a-glance overview of the DNS traffic in your organisation and any suspicious events hidden there.

Get straight to the issues that matter and fix them fast.

Close-up of report platform on computer screen

Events Browser

You can search and view recent and historic events detected by the system.

Get straight to the cause, in real time or historically, for a forensic investigation.

Report generation on NTX platform

Automated Reports

Reports detailed events detected by NTX, IP addresses of affected machines, risk profiles presented by the events and recommended remedial actions.

Take the hassle away from reporting. Board-ready reports at the click of a button.

Man pointing at graph on computer screen

Custom Views

Build your own customised dashboards or detailed views of events in your DNS infrastructure. For analysts and power users with a deep understanding of DNS protocol.

Work the way you want to, built around your workflow.

Close up of report on computer screen

Policy Management

Ability to customise policy beyond the defaults provided and apply these to your DNS server.

Find it, understand it, block it. All with a single click.

SIEM Integration

diagram of SIEM integration

DNS: The Best Kept Secret in Cyber Security?

Protect your users the way that best suits your business

NTX protect logo

NTXprotect is Nominet’s complete threat monitoring and analytics platform, run by your in-house security team, with optional help from our experts. The platform is compatible with the DNS service your organisation is using.

NTX secure logo

NTXsecure offers all the benefits of NTXprotect - full threat detection, analytics and proactive blocking – along with a fully-managed, secure DNS service. All this is run for you by our exceptional team of DNS experts and security analysts.

Latest Resources

Dark blue abstract background

Publication

Nominet NTX Platform

Discover More

iStock-915933572.jpg

Publication

NTX Platform Technical Data Sheet

Discover More

Get in Touch

For more information on how Nominet can help secure your business, please submit your details, or contact us on:

UK: +44 (0) 1865 332 255

US: +1 202 821 4256

Email: [email protected]

  • I agree that by supplying my contact information, I consent to Nominet and Nominet authorised third parties using these details to contact me further with relevant content and information on Nominet products and services. I may unsubscribe from these communications at any time. For more information, please read the Nominet Privacy Notice.
  • This field is for validation purposes and should be left unchanged.