Detect & Identify
Threat detection in the IT network is the practice of analysing the entirety of a security ecosystem to identify any malicious activity that could compromise the network.
If a threat is detected, then mitigation efforts must be
enacted to properly neutralise the threat before it can exploit any present vulnerabilities.
TianJi Partners — Digital Risk Protection (DRP) & Threat Intelligence
TianJi Partners provides advanced Digital Risk Protection (DRP) and global Threat Intelligence to help organisations identify, monitor, and eliminate external digital threats. The platform delivers high-accuracy detection, multilingual coverage, and industry-leading takedown capabilities, making it ideal for enterprises operating across complex international threat surfaces.
With automated monitoring, large-scale intelligence feeds, and a powerful analysis interface, TianJi Partners enables security teams to respond faster, protect brand reputation, and reduce digital risk across web, social media, mobile apps, and dark web environments.
Why Choose TianJi Partners?
- High-accuracy global monitoring across web, social media, mobile, and dark web
- Industry-leading takedown performance, especially in Chinese-language regions
- Large-scale threat intelligence feeds for investigation and enrichment
- SaaS platform with multi-language support and an intuitive UI
- Real-time alerts for phishing, brand abuse, rogue apps, and threat actor activity
- APAC-focused coverage for faster, regionally aligned response
Digital Risk Protection (DRP)
Key Highlights
- 24/7 global monitoring for phishing, fake websites, rogue apps, impersonation
- High-accuracy detection with multilingual coverage
- Fast takedown support, especially strong in Chinese-language regions
- Real-time alerts via SaaS dashboard
Core Features (Very Short)
- Monitors web, social media, app stores, dark web
- Automated detection + case tracking
- Easy-to-use platform with multi-language UI
Benefits
- Lower workload for security teams
- Protects brand safety & customer trust
- Reduces exposure time with fast takedown
Threat Intelligence Subscription (TI-Feed & TI-Lookup)
Key Highlights
- 100M+ threat indicators daily
- Plaintext feeds for easy SOC/SIEM integration
- On-demand threat lookup with context and reputation scoring
Core Features (Very Short)
- Bulk feeds: malicious IPs, domains, URLs, hashes
- Lookup provides: reputation, related infrastructure, timeline
Benefits
- Better visibility of active threats
- Faster investigations & response
- Improves SIEM/SOAR accuracy
Featured products:
Digital Risk Protection (DRP)
Threat Intelligence Subscription (TI-Feed & TI-Lookup)
Mandarin Tech is a China-born cybersecurity provider specializing in Digital Attack Surface (DAS) protection.
The company focuses on protecting enterprise brands from phishing, impersonation, infringement and online fraud.
Its key differentiation is deep visibility into the Chinese digital ecosystem, combined with global monitoring capabilities.
Mandarin Tech combines automated monitoring + native-speaking human analyst review + takedown capabilities.
This positions Mandarin Tech as a managed digital risk protection service, rather than simply a detection platform.
Why Choose Mandarin Tech?
Deep China Coverage
- Coverage of 30+ Chinese social platforms
- Chinese-language fraud pattern detection
- Mitigation of risks involving China-hosted infrastructure
- Strong understanding of the Chinese digital ecosystem
Global Visibility
- 7×24 global monitoring
- Coverage across 10+ digital attack scenarios
- Monitoring across hundreds of digital platforms worldwide
Rapid Takedown
- 90%+ of phishing incidents resolved within 24 hours
- 90%+ of infringement cases resolved within 72 hours
- Goes beyond detection to provide actual takedown and remediation support
Human-Expert Validation
- Findings are manually reviewed by native-speaking analysts
- Helps eliminate AI/automation false positives
- Combines automated detection with human expertise
Cross-Border Risk Protection
- Addresses threats involving China-hosted infrastructure
- Helps mitigate cross-border digital risks
- Provides visibility across both Chinese and global digital ecosystems
Managed Service Approach
- Continuous monitoring and takedown
- Dedicated Customer Success Managers
- Provides end-to-end managed support rather than simply delivering security alerts
One-Time DAS Assessment
A comprehensive one-time assessment of an organization’s external digital attack surface.
The assessment includes:
- Overview
- Executive Summary
- Detailed Risk Findings
- Mitigation Recommendations
- Appendix
- Takedown support for up to 2 high-risk targets
Any takedown or remediation activity requires the client’s explicit legal authorization.
Best suited for:
- Organizations looking for a one-time assessment
- Businesses that want to understand their external digital exposure
- Companies requiring a formal DAS assessment report
- Organizations evaluating whether to move toward continuous protection
Full-Lifecycle Protection
A managed subscription service providing continuous 7×24 monitoring, threat identification and takedown.
Key Capabilities
24×7 Global Monitoring
- Continuous monitoring across global digital platforms
- Coverage of 10+ digital attack scenarios
- Visibility across hundreds of digital platforms
Rapid Takedown
- 90%+ of phishing cases resolved within 24 hours
- 90%+ of infringement cases resolved within 72 hours
China-Focused Protection
- Monitoring across 30+ Chinese social platforms
- Chinese-language fraud pattern detection
- Mitigation of risks from China-hosted infrastructure
Human-Expert Review
- Findings manually reviewed by native-speaking analysts
- Designed to reduce false positives from automated detection
Customer Success Support
- Dedicated Customer Success Managers
- Personalized end-to-end support
- Managed service throughout the protection lifecycle
Protection Workflow
Monitor → Detect → Analyze → Human Validate → Respond → Takedown → Ongoing Protection
Featured products:
One-Time DAS Assessment
Full-Lifecycle Protection
TRS Topwalk is a China-based cybersecurity technology provider specializing in Security Isolation Gaps (GAPs) and Cross-Domain Solutions (CDS).
Founded in 2000, TRS Topwalk developed China’s first security isolation gap device and became the No.1 provider by sales volume for gap-type security products.
Since becoming a subsidiary of TRS Group in 2014, Topwalk has positioned itself as a leading force in the security isolation and data exchange market in China.
Its core technology is designed to sever direct TCP/IP connections between different network domains, allowing organizations to securely exchange data between isolated networks without exposing trusted internal networks to external cyber threats.
Topwalk focuses on high-assurance environments, including:
- Government
- Public Safety
- Military
- Critical Infrastructure
- Finance
- Energy
- Transportation
- Telecommunications
- Manufacturing
- Education
Topwalk products currently serve 100+ industries and sectors and approximately 10,000 clients.
Why Choose TRS Topwalk?
1. Pioneer in China’s Security Isolation Market
Topwalk has been developing security isolation technology since 2000 and developed China’s first security isolation gap device.
This gives the company significant experience in network isolation and secure cross-domain data exchange.
2. Non-Bypassable Network Isolation
Unlike conventional network security solutions that continue to rely on network connectivity, Topwalk’s architecture is designed to sever raw TCP/IP connections between network domains.
This creates a strong security boundary between:
External / Untrusted Network ↔ Trusted Internal Network
while still allowing authorized data exchange.
The key value proposition is:
Secure data exchange without exposing the internal network to direct external connectivity.
3. Secure Cross-Domain Data Exchange
Topwalk allows organizations to exchange different types of information across isolated networks, including:
- Files
- Databases
- Video data
- Application-related data
This makes it suitable for environments where network connectivity is restricted by security policies or regulations, but business operations still require controlled data exchange.
4. Strong Fit for Government & Critical Infrastructure
Topwalk is designed specifically for high-security and high-assurance environments.
Its solutions address organizations where direct network connectivity may be prohibited or considered too risky.
Key target sectors include:
Government, Public Safety, Military, Energy, Transportation, Finance, Aviation, Power and Telecommunications.
5. Large Market & Customer Base
Topwalk products are deployed across:
- 100+ industries and sectors
- Nearly 10,000 clients
This indicates broad adoption across government, enterprise and critical infrastructure environments.
6. Combines Isolation with Data Exchange
A major differentiator is that Topwalk is not simply an “air gap” / network isolation solution.
It addresses the practical problem:
How do you keep two networks isolated while still allowing necessary business data to move between them?
Topwalk’s answer is controlled, policy-driven cross-domain data exchange.
Topwalk-GAP / CDS
What is it?
Topwalk Industrial Security Isolation and Information Exchange System (GAP) is Topwalk’s flagship network isolation and cross-domain data exchange platform.
It uses a multi-host architecture to sever direct TCP/IP connections between isolated network domains while still enabling trusted data exchange.
The platform allows organizations to securely exchange:
- Files
- Database data
- Video data
- Application-related information
without creating direct network connectivity between the isolated environments.
Core Features
Security Isolation
Creates a strong boundary between different security domains by severing direct TCP/IP connections.
File Exchange
Enables controlled and secure transfer of files between isolated networks.
Database Exchange
Allows authorized database information to be exchanged across security domains.
Application Extension
Supports controlled extension of applications and business services across isolated environments.
Key Application Scenarios
1. Policy-Driven Scenarios
Some government agencies and large enterprises need to exchange data between internal and external networks, but regulations and security policies prohibit direct network connectivity.
Topwalk GAP provides a dedicated information exchange mechanism that enables:
Network Isolation + Controlled Data Exchange
instead of direct network connection.
2. Security-Driven Scenarios
Topwalk GAP is also suitable for environments where networks have different security classification levels or require strict separation.
Examples include:
Trusted Network ↔ Untrusted Network
High-Security Network ↔ Lower-Security Network
Internal Network ↔ External Network
The goal is to allow necessary information exchange while maintaining strict network isolation.
Topwalk Vulnerability Scanning System (Topwalk-VSS)
What is it?
Topwalk-VSS is an integrated vulnerability discovery and assessment platform developed by Topwalk.
Unlike GAP/CDS, which focuses primarily on network isolation and secure data exchange, VSS focuses on identifying vulnerabilities and security weaknesses across network assets.
It helps organizations:
Discover Assets → Scan → Identify Vulnerabilities → Assess Risk → Recommend Remediation
Core Components
Topwalk-VSS consists of five key scanning/assessment capabilities:
- Web Vulnerability Scanning
- System Vulnerability Scanning
- Weak Password Scanning
- Security Baseline Monitoring
- Database Vulnerability Scanning
Core Features
System & Web Scanning
Identifies vulnerabilities across systems, applications and web assets.
Weak Password Detection
Detects potential security risks associated with weak or vulnerable passwords.
Security Baseline Monitoring
Checks systems against defined security configuration baselines and identifies deviations.
Database Vulnerability Scanning
Assesses databases for potential security vulnerabilities.
Risk Assessment & Remediation Recommendations
Based on scan results, VSS provides security analysis and actionable remediation recommendations.
Featured products:
Topwalk-GAP / CDS – Security Isolation & Cross-Domain Data Exchange Platform
Topwalk Vulnerability Scanning System (Topwalk-VSS) – Vulnerability Discovery & Assessment Platform
Advanced Log Management for Enhanced Security and Compliance
As a leader in log management, syslog-ng Premium Edition and Syslog-ng Store Box (SSB) provide powerful solutions for collecting, filtering, transforming, enriching, and delivering logs. Designed for enterprises, syslog-ng ensures seamless log management, enhanced security, and compliance with audit and cyber threat detection requirements.
Why Choose Syslog-ng Premium Edition?
- Unmatched Log Management : The most widely adopted log management software globally, syslog-ng is built for enterprises handling large-scale data loads.
- Scalable Efficiency : Route logs to multiple destinations from a single instance with unparalleled efficiency and flexibility.
- Advanced Reliability : Ensure minimal log loss with Advanced Log Transport Protocol (ALTP) , disk-buffering , and flow control mechanisms.
- Enterprise-Grade Security : Enable full log encryption both in transit and at rest, protecting sensitive data from cyber threats.
- Seamless Integration : Compatible with hybrid environments, syslog-ng supports diverse infrastructure setups for both on-premises and cloud-based systems.
Syslog-ng Store Box (SSB) – Centralized Log Storage and Analysis
Syslog-ng Store Box complements the Premium Edition by providing a centralized log storage and monitoring solution:
- Secure Log Archiving : Efficiently store and archive logs with tamper-proof protection.
- Real-Time Monitoring : Gain visibility into log activities to detect threats and ensure continuous compliance.
- High Availability : Built with robust failover support, SSB guarantees reliable performance and minimal downtime.
- Audit-Ready Reporting : Generate compliance-ready reports for internal audits or regulatory requirements effortlessly.
- Simplified Management : Unified interface for easy access, search, and analysis of logs.
Key Benefits for Your Enterprise
- Cyber Threat Detection : Identify and mitigate threats faster with enriched and centralized log data.
- Compliance Simplified : Meet regulatory standards with robust logging, monitoring, and reporting tools.
- Cost and Resource Efficiency : Reduce errors, save time, and enhance productivity by consolidating log management and delivering actionable insights.
Contact us today to discover how syslog-ng can enhance your security operations and ensure compliance in a fast-evolving threat landscape.
Featured products:
syslog-ng Premium Edition
syslog-ng Store Box (SSB)
AXOFLOW — Security Log Classification, Curation & Data Routing
Axoflow delivers a fully intelligent security data pipeline platform that automatically classifies, curates, enriches, and routes log data across the enterprise. Designed to eliminate routine ingestion engineering, Axoflow reduces SIEM costs, improves investigation speed, and provides end-to-end visibility into the entire data flow.
Its zero-maintenance connectors, real-time observability, and policy-driven routing engine allow security teams to standardise, optimise, and control their log data at scale — across SaaS, cloud, on-premise, and air-gapped environments.
Why Choose Axoflow?
- Zero-maintenance connectors that auto-detect log sources
- Automatic classification with no parsers or regex
- Advanced data curation (filtering, parsing, enrichment, reduction)
- 50%+ SIEM cost reduction
- Up to 70% faster investigations
- Real-time pipeline metrics & full observability
- Policy-based routing for business, compliance, and cost rules
- Vendor-agnostic & scalable for enterprise SOC operations
Axoflow Collection Platform
1) Zero-Maintenance Connectors
Key Highlights:
- Automatically detect log source types
- Pre-configured logic for common security/network devices
- No manual parser creation required
- Instantly ready for ingestion pipelines
2) Automatic Classification & Source Detection
Key Highlights:
- Identifies the origin and category of each log
- Adds metadata & prepares logs for SIEM/SOAR/XDR
- Works across syslog, cloud logs, agent logs, proprietary formats
3) Data Curation & Reduction Engine
Key Highlights:
- Filters noise and redundant log lines
- Parses and enriches with contextual data
- Normalises logs for consistent schema
- Reduces raw data volume by 50%+
4) Policy-Based Routing (Smart Business Routing)
Key Highlights:
- Route logs to SIEM, data lake, archive, or storage tier
- Business-driven routing (cost, compliance, retention)
- No regex or scripting — visual rule builder
- Supports multi-destination fan-out delivery
5) Full Observability & Real-Time Metrics
Key Highlights:
- Dashboards for pipeline health, throughput, anomalies
- Monitor log volume spikes, ingestion failures, delays
- Full visibility even in on-prem or air-gapped deployments
6) Flexible Deployment Options
Key Highlights:
- SaaS hosted
- Self-managed on Kubernetes
- Private cloud / hybrid
- Fully air-gapped deployment for high-security environments
Featured products:
Axoflow Collection Platform
EmbedWay Technologies is an A-share publicly listed cybersecurity and network infrastructure provider specializing in carrier-grade network visibility, intelligent traffic processing, and AI-powered threat detection.
The company provides infrastructure designed for enterprise IT, telecommunications, financial institutions, and government agencies, with a strong focus on high-performance network traffic capture and intelligent security analysis.
EmbedWay combines lossless network traffic capture, packet brokerage, traffic orchestration, and localized AI detection to provide the data foundation required by modern security tools and fraud prevention systems.
Its solutions cover both network-level visibility and AI-driven digital identity and fraud protection, including deepfake detection and telecom scam prevention.
EmbedWay’s technology is trusted by Fortune Global 500 banks, telecommunications operators, and government agencies worldwide.
Core Positioning
Network Visibility + Intelligent Traffic Processing + AI Deepfake & Scam Detection
Why Choose EmbedWay Technologies?
1. Carrier-Grade Network Performance
EmbedWay provides lossless network traffic capture from 1G to 400G, enabling organizations to capture network traffic at line rate without packet loss.
This provides downstream security tools with a more complete view of network activity and helps eliminate monitoring blind spots.
2. Intelligent Traffic Processing
Rather than simply collecting network traffic, EmbedWay can process, filter, deduplicate, mask and orchestrate traffic before sending relevant data to security tools.
Key capabilities include:
- Line-rate packet deduplication
- Intelligent traffic filtering
- Data slicing
- PII and credit card data masking
- Traffic orchestration
- Multi-node clustering up to 26 nodes
This helps security teams focus on high-value and suspicious traffic instead of processing large volumes of irrelevant data.
3. Localized & Privacy-Compliant AI
EmbedWay provides on-premise AI deepfake detection, allowing sensitive biometric information to remain within the customer’s environment.
The platform can process:
- Faces
- Voices
- Documents
- Images
- Videos
The on-premise architecture supports data sovereignty and privacy compliance, making it particularly relevant for financial institutions and regulated industries.
4. Multimodal Deepfake Detection
EmbedWay’s AI engine combines multiple detection dimensions, including:
- Visual analysis
- Acoustic analysis
- Temporal consistency checks
This allows it to detect different forms of AI manipulation, including:
Face Swaps + Voice Clones + AI-Generated Content (AIGC)
5. Ultra-Low Latency Fraud Detection
EmbedWay’s solutions are designed for real-time or millisecond-level processing.
This is particularly important for:
- eKYC onboarding
- Login & step-up authentication
- High-value transactions
- Dormant account reactivation
- Telecom scam call blocking
The goal is to detect suspicious activity before the transaction or interaction is completed.
6. Closed-Loop Detection & Response
EmbedWay’s telecom scam prevention platform goes beyond detection.
The workflow can be:
Capture → Decode → Analyze → Detect → Score → Generate Intelligence → Apply Rules → Block
This creates a closed-loop fraud prevention system capable of automatically blocking suspicious calls within milliseconds.
EmbedWay On-Premise Deepfake Detection
What is it?
EmbedWay On-Premise Deepfake Detection is an AI-powered anti-impersonation and fraud detection platform designed primarily for financial institutions and regulated organizations.
The platform runs entirely within the customer’s private data center or private cloud, ensuring that sensitive biometric information does not leave the organization’s environment.
Key Features
100% On-Premise Data Sovereignty
The solution runs entirely within the customer’s infrastructure.
Sensitive data such as:
- Faces
- Voices
- Biometric information
remains inside the customer’s network.
This supports compliance requirements such as PDPA, GDPR and regional financial regulations.
Multimodal AI Detection Engine
The AI engine combines:
Visual + Acoustic + Temporal Analysis
to detect:
- Face swaps
- Voice clones
- AI-generated documents
- Synthetic or manipulated media
Ultra-Low Latency Verification
Provides millisecond-level verification for security-sensitive workflows without significantly impacting customer experience.
Key Use Cases
Banking / Digital Banks / eWallets
Threats:
- AI-generated synthetic identities
- Real-time deepfakes
- Identity impersonation
- Fraudulent account creation
- Account takeover
- Unauthorized high-value transactions
Best-Fit Scenarios:
- eKYC onboarding
- Login & step-up authentication
- High-value transaction verification
- Dormant account reactivation
- Remote customer service verification
Customer Value
Adds an additional anti-impersonation layer on top of existing facial recognition and eKYC systems.
The objective is to identify synthetic or manipulated media early, before it can be used to facilitate financial fraud.
EmbedWay Telecom Scam Prevention & AI Voice Interception Platform
What is it?
A carrier-grade telecom fraud prevention platform designed to detect and block scam calls using real-time voice analysis, speech-to-text and AI-based voice scoring.
The solution operates at the signaling/network layer and can process call audio at line rate.
Key Features
Signaling-Layer Call Interception
Extracts voice streams from telecom traffic and analyzes them for suspicious characteristics.
AI Voice Analysis
The system analyzes:
- Acoustic characteristics
- Synthetic voice indicators
- Deepfake confidence
- Conversation content
- Scam-related patterns
- Abnormal call behavior
Real-Time Intelligence
The system produces:
- Deepfake confidence scores
- Scam text risk
- Abnormal call intelligence
These insights can be delivered to existing anti-fraud platforms via APIs.
End-to-End Closed Loop
The platform follows a 7-step process:
1. Capture
Hardware performs line-rate traffic capture without sampling or data loss.
2. Reassemble
Reassembles media streams and extracts high-quality audio.
3. Analyze
Detects acoustic and synthetic voice features.
4. Transcribe
Converts voice into analyzable conversation text.
5. Generate Intelligence
Produces deepfake confidence, scam text risk and abnormal call intelligence.
6. Integrate
Connects with anti-fraud platforms through APIs.
7. Block
Applies rules within milliseconds to stop fraudulent calls.
Core Value
Detect → Analyze → Score → Integrate → Block
This allows telecommunications operators to move from passive monitoring to automated real-time fraud prevention.
EmbedWay Network Visibility Solution
What is it?
EmbedWay Network Visibility is a carrier-grade network traffic capture and intelligent packet processing platform.
Its purpose is to provide security and IT teams with complete, high-quality network traffic visibility while optimizing the data delivered to downstream security tools.
Key Features
Lossless Line-Rate Capture
Supports network traffic from:
1G → 10G → 40G → 100G → 400G
with 100% traffic capture without packet loss.
This helps eliminate monitoring blind spots for security technologies such as:
- IDS
- NDR
- DLP
- SIEM
Smart Packet Processing
The platform can perform:
- Packet deduplication
- Intelligent filtering
- Data slicing
- Traffic distribution
- PII masking
- Credit card data masking
This allows security tools to receive only relevant and high-value traffic.
Multi-Node Clustering
Supports clustering of up to 26 nodes, enabling the platform to scale for larger and more complex network environments.
Featured products:
EmbedWay On-Premise Deepfake Detection
EmbedWay Telecom Scam Prevention & AI Voice Interception Platform
EmbedWay Network Visibility Solution
Detect & Identify
