• Skip to primary navigation
  • Skip to main content
  • Skip to footer

Cisco Umbrella

Enterprise network security

  • Contact Sales
  • Login
    • Umbrella Login
    • Cloudlock Login
  • Search
Search
  • Why Us
    • Why Cisco Umbrella
      • Why Try Umbrella
      • Why DNS Security
      • Why Umbrella SASE
      • Our Customers
      • Customer Stories
      • Why Cisco Security
    • Fast Reliable Cloud
      • Global Cloud Architecture
      • Cloud Network Status
      • Global Cloud Network Activity
    • Unmatched Intelligence
      • A New Approach to Cybersecurity
      • Interactive Intelligence
      • Cyber Attack Prevention
      • Umbrella and Cisco Talos Threat Intelligence
    • Extensive Integrations
      • IT Security Integrations
      • Hardware Integrations
      • Meraki Integration
      • Cisco Security for Chromebook
  • Products
    • Cisco Umbrella Products
      • Cisco Umbrella Cloud Security Service
      • Recursive DNS Services
      • Cisco Umbrella SIG
      • Umbrella Investigate
      • What’s New
    • Product Packages
      • Cisco Umbrella and Cisco Secure Access Packages
      • – DNS Security Essentials Package
      • – DNS Security Advantage Package
      • – SIG Essentials Package
      • – SIG Advantage Package
      • Umbrella Support Packages
      • Cisco Umbrella for Government Packages
    • Functionality
      • DNS-Layer Security
      • Secure Web Gateway
      • Cloud Access Security Broker (CASB)
      • Cloud Data Loss Prevention (DLP)
      • Cloud-Delivered Firewall
      • Cloud Malware Protection
      • Remote Browser Isolation (RBI)
    • Man on a laptop with headphones on. He is attending a Cisco Umbrella Live Demo
  • Solutions
    • SASE & SSE Solutions
      • Your SSE journey with Cisco
      • Cisco Umbrella SASE
      • Secure Access Service Edge (SASE)
      • What is SASE
    • Functionality Solutions
      • Web Content Filtering
      • Secure Direct Internet Access
      • Shadow IT Discovery & App Blocking
      • Fast Incident Response
      • Unified Threat Management
      • Protect Mobile Users
      • Securing Remote and Roaming Users
      • Umbrella and Duo Layered Protection
    • Network Solutions
      • Guest Wi-Fi Security
      • SD-WAN Security
      • Off-Network Endpoint Security
    • Industry Solutions
      • Government and Public Sector Cybersecurity
      • Financial Services Security
        • – FTC Safeguards Rule Compliance 2023
      • Cybersecurity for Manufacturing
      • Higher Education Security
      • K-12 Schools Security
      • Healthcare, Retail and Hospitality Security
      • Enterprise Cloud Security
      • Small Business Cybersecurity
  • Resources
    • Content Library
      • Top Resources
      • Research Reports
      • Case Studies
      • Videos
      • Datasheets
      • eBooks
      • Solution Briefs
      • Cybersecurity Webinars
    • International Documents
      • Deutsch/German
      • Español/Spanish
      • Français/French
      • Italiano/Italian
      • 日本語/Japanese
    • Security Definitions
      • What is DNS Security
      • What is a Secure Web Gateway
      • What is a Cloud Access Security Broker (CASB)
      • What is Security Service Edge (SSE)
      • What is Secure Access Service Edge (SASE)
      • Cyber Threat Categories and Definitions
    • For Customers
      • Support
      • Customer Success Webinars
      • Free Trial Quick Start Guide
      • Free Trial Help and Tips
  • Trends & Threats
    • Market Trends
      • Generative AI Cybersecurity Risks and Rewards
      • Hybrid Workforce
      • Rise of Remote Workers
      • Secure Internet Gateway (SIG)
    • Security Threats
      • How to Stop Phishing Attacks
      • Malware Detection and Protection
      • Ransomware is on the Rise
      • Cryptomining Malware Protection
      • Cybersecurity Threat Landscape
      • Global Cyber Threat Intelligence
    •  
    • Woman connecting confidently to any device anywhere
  • Partners
    • Channel Partners
      • Partner Program
      • Become a Partner
    • Service Providers
      • Secure Connectivity
      • Managed Security for MSSPs
      • Managed IT for MSPs
    •  
    • Person looking down at laptop. They are connecting and working securely
  • Blog
    • News & Product Posts
      • Latest Posts
      • Products & Services
      • Customer Focus
      • Feature Spotlight
    • Cybersecurity Posts
      • Security
      • Threats
      • Cybersecurity Threat Spotlight
      • Research
    •  
    • Register for a webinar - with illustration of connecting securely to the cloud
  • Contact Us
  • Umbrella Login
  • Cloudlock Login
  • Free Trial
Clearing search keywords

Fast incident response

Predictive intelligence so your teams can research a given incident and can stay ahead of future attacks

Request a quote

Predicting attacks with big data analytics

From NGFW and SIEM products to behavioral network analysis and endpoint forensics, you have already deployed many security solutions, which all claimed to provide unique visibility. You are thinking, “Why do I really need one more thing to manage?”

Umbrella Investigate is different because we see millions of security events happening in real-time across our 100 million daily-active users. We use big data analytics and machine learning to predict where related attacks will emerge on the Internet. We provide our customers access to this threat intelligence so that they can get more out of their existing network security investments, and also become more proactive at combating the next cyber attack.

A single, correlated source of intelligence about domains, IPs, and malware files

Join our webcast to learn how Umbrella Investigate provides the most complete view of the infrastructure used in attacks.

Watch webcast now

Investigate threats like you have never done before

Everyone is talking about big data these days. Umbrella has a massive data set with an unconventional perspective because our global network is integrated at the internet’s underlying DNS and BGP layers. We take our internet-scale flood of raw data, process it, and make it accessible via easy-to-use global patterns and correlations.

This exclusive intelligence helps your security teams make better decisions faster. For example, it would help your security team respond appropriately if you are investigating a threat that calls home to a Russian server known to be associated with a targeted attack. We take a mathematical approach, using machine learning to train algorithms to automatically identify and block malicious domains.

Learn more

All you need is a Web browser

Running a security program requires collaboration between several teams of network and system admins. With Umbrella Investigate, there is nothing to deploy, nothing to set up, and nothing to maintain. It functions simply as a search engine to search our intelligence on domains, IPs, ASNs, and file hashes.

Intelligence in context

Which security event should your team respond to first? How does your team know which events are serious or minor? You need intelligence that provides insight into ongoing attacks, and you need the ability to investigate possible future attacks.

That is the context we offer — Umbrella can show you whether an attack targeted your organization and what to look out for to keep it from happening again. Investigate delivers threat visibility beyond your local Internet activity, at a global level, which lets you to identify attacks targeting your company. We surface the information in real-time, so you can search dynamically, with up-to-the-minute data.

Get more out of your security stack

By adding Umbrella’s global threat intelligence data as a layer in your security stack, you can be more proactive in your approach to security. Using the Umbrella Investigate API, you can view real-time data and predictive models alongside data from your other security appliances or services. We do not promise to be the end-all and be-all, but we do deliver value by finding attacks that slip through the cracks of other security solutions.

About Investigate

Additional resources

Datasheet

Investigate from Cisco Umbrella

The most complete view of the relationships and evolution of Internet domains, IP…

Webcast

Threat Intelligence: The New Driver for Incident Response

Find out how you can shorten your response time, and garner the information you need…

Blog

New Passive DNS Enhancements for Cisco Umbrella Investigate

It’s no secret that security professionals today face mounting challenges…

Follow Us

Facebook X LinkedIn Youtube

Footer Sections

What we make

  • Cloud Security Service
  • DNS-Layer Network Security
  • Secure Web Gateway
  • Security Packages

Who we are

  • Global Cloud Architecture
  • Cloud Network Status
  • Cloud Network Activity
  • OpenDNS is now Umbrella
  • Cisco Umbrella Blog

Learn more

  • Webinars
  • Careers
  • Support
  • Cisco Umbrella Live Demo
  • Contact Sales
Umbrella by Cisco
208.67.222.222+208.67.220.220
2620:119:35::35+2620:119:53::53
Sign up for a Free Trial
  • Cisco Online Privacy Statement
  • Terms of Service
  • Sitemap

© 2025 Cisco Umbrella