LastLine, Inc. offers a wide variety of products and services that protect your organization from cyber criminals and other attackers.

Cybercrime Intelligence

We provide access to the list of IP addresses, domains, and URLs that we identify to be associated with malicious activity on the Internet. Customers can obtain continuously-updated intelligence, which can be leveraged internally to identify compromised hosts or configure network access control mechanisms. This data stream can be also integrated in third-party products. If you are interested in purchasing this product, please contact sales@tllod.com.

llweb: Web Site Analysis Tool

LastLine's llweb is a tool that analyzes web sites for the presence of malicious code, such as drive-by download exploits. When malicious code is identified, the tool provides detailed forensic analysis results, such as a de-obfuscated version of the attacker's code and information about the malware binaries downloaded as part of the exploit.

llweb uses a unique set of anomaly detection technologies to analyze the content and behavior of web pages. This allows the detection of threats that were never seen before (zero-day exploits). llweb was developed by the creators of Wepawet. If you are interested in purchasing this tool, please contact sales@tllod.com. More details about llweb can be found here.

llmon: Security Health Monitoring

LastLine's llmon is a service that helps organizations to monitor the health of their network infrastructure. Many malware distribution and control points are hosted on machines that belong to legitimate networks. When these hosts become part of a malware infrastructure, the reputation of the compromised company is heavily affected.

llmon is a service that helps organizations to determine if their hosts are used to deliver or control malware. We continuously monitor whether a customer's assets participate in malicious activities, and if so, we provide detailed and early warning so that proper mitigation steps can be initiated. This service is particularly useful for ISPs and hosting providers who offer infrastructure for a large number of clients. llmon was developed by some of the creators of FIRE. If you are interested in purchasing this service, please contact sales@tllod.com.

More information about our current work is availble at our blog: http://blog.tllod.com.