Security research, threat intelligence insights, and product updates.
SikkerGuard now supports user-managed blacklist files with CIDR range expansion, a persistent stats endpoint for dashboard integrations, and local SQLite tracking of blocked connections. Bring your own blocklists, monitor your firewall from any dashboard, and keep stats across restarts.
SikkerAPI's honeypot network now captures RDP attacks. Our sensors implement the full RDP negotiation stack — X.224, TLS, CredSSP with NTLM authentication — and accept credentials to extract client fingerprints from the MCS Connect Initial PDU. Every username, password, NTLM hash, client build, keyboard layout, and virtual channel request is recorded. 17 protocols, 44 sensors, all feeding into the same IP reputation engine.
We added three new alert types to the dashboard. Set up alerts for your IP addresses, service account usernames, or email addresses — get an hourly digest when they show up in attacks on our honeypot network.