DNS Footprint
Complete DNS visibility: domains, every resolving subdomain, the full record inventory, and change tracking between assessments.
The platform behind Digital Governance Intelligence.
Namespace Command is an enterprise External Attack Surface Management and security-operations platform. It continuously discovers, monitors, analyses, and governs your entire internet-facing estate, from an external attacker's perspective, with nothing to install and no access to your environment.
It closes the four gaps every estate carries: assets nobody knew existed, findings nobody owns, evidence nobody is continuously collecting, and incidents that should have been prevented.
Illustrative render of the Klarvant Namespace Command experience. Klarvant does not publish screenshots of the live platform; this visualisation conveys the structure of the interface without exposing customer data or production UI.
By role
The platform, framed for the people answering for it.
Five seats, one digital estate. Pick yours.
CISO / Head of Security
A continuous external-posture programme, without a longer alert backlog.
Klarvant turns the discoverable external estate into a governed asset list with owners, an A to F posture rating across six categories, and clear remediation paths. Risk concentration is explained by root cause, not just ranked by severity, so you can show the board where the systemic gaps are and where the next pound of investment belongs. Findings that matter, finished, and a posture trend you can defend quarter on quarter.
See it in a demoGRC / Compliance
Audit-ready evidence, collected continuously.
Controls are evaluated automatically against your real asset data, not a questionnaire, and scored pass, fail, or warning. The same control satisfies requirements across NIST CSF, ISO 27001, SOC 2, CIS Controls, HIPAA, and GDPR, so evidence is collected once. Thirty-day drift analysis surfaces regression before the auditor does.
See it in a demoSecOps / IT Operations
One inventory across DNS, certificates, IPs, web, and suppliers.
Discovery starts at onboarding with zero integration. Each finding carries severity, root cause, and the asset it belongs to. Less time hunting for what is yours, more time fixing what is broken.
See it in a demoBrand / Legal Counsel
Visibility into lookalike domains, impersonation, and content drift.
The brand surface is part of the asset graph, not a separate tool. Trademark and impersonation findings sit alongside certificate and DNS issues, governed under the same ownership model and resolved through the same workflow.
See it in a demoM&A / Corporate Development
Pre-deal digital due diligence in days, not weeks.
Klarvant maps a target's external footprint without engaging them, including third-party dependencies and supplier chains. Better-informed transactions, fewer post-close surprises, a defensible record of what was assessed at signing.
See it in a demoDiscover
Nine discovery surfaces. One external estate.
Discovery is fully external and needs nothing installed. Every surface is monitored continuously, with historical comparison between assessments, so you see exactly what changed.
Crypto & Certificates
The whole certificate estate, every TLS endpoint, expiry forecasting, and post-quantum readiness, including certificates issued but not yet deployed.
Email Security
Sender-authentication posture across SPF, DMARC, and DKIM, plus mail-server transport security per host.
IP Intelligence
Complete IP inventory with geolocation, network-operator distribution, and an interactive endpoint map.
Web Surface
Page inventory with security-header analysis, look-alike grouping, third-party script checks, and technology detection.
External Discovery
Brand-threat intelligence: shadow assets, impersonation and phishing, a claim-and-approve workflow, and professional takedown support.
Third-Party Suppliers
Supplier inventory and dependency graph with concentration analysis and change-impact monitoring.
Digital Sovereignty
Data-residency mapping: jurisdiction, endpoint geography, cloud-region usage, and cross-border data flows.
Technologies
Detected-technology inventory with version tracking for vulnerability assessment and change monitoring over time.
Digital twin
Your digital infrastructure, visualised.
The digital twin shows interconnected assets, dependency chains, and blast radius, making invisible risk visible.
Interactive visualisation
Drag to rotate · Scroll to zoom
13
Organisation domains
.com, .uk, .de, .jp, .cn, .au, .sg, .za, .eg, .co, .br, .in, .ca
14
Supplier dependencies
AWS, Azure, GCP, Cloudflare, Akamai, Oracle, and more
3
Suppliers in simulated outage
AWS US-East, Azure, OVH affected
Illustrative visualisation with example data.
Explore the digital twin simulationHow risk is scored
An A to F posture rating you can take to the board.
Every domain, organisational unit, and organisation gets a letter grade, rolled up from six categories so a parent domain reflects everything beneath it.
- DNS
- TLS
- Web
- Network
- Accountability
The posture rating in Klarvant Namespace Command.
Six categories
DNS, TLS, Email, Web, Network, and Accountability. Each yields a 0 to 100 score that rolls up into an A to F grade.
Severity-weighted
Open findings reduce the relevant scores in proportion to severity, and a serious condition, such as an expired certificate, caps the final grade.
Why it recurs
Findings map to seven strategic root causes, so the platform reports not just what is wrong but why a whole category keeps recurring.
See it in action
The findings, the risk, and the next move.
How findings trend over time, and how the platform turns them into a posture score and a prioritised queue.
Scale
Built for the scale modern estates actually run at.
7B+
Identifiers mapped across the corpus
180+
Defined finding types, each with remediation guidance
90+
Security metrics captured per assessment
249
Countries supported across data-residency regions US, EU, UK
Reference figures from the live Namespace Command V4 platform.
Continuous compliance
Six frameworks. One continuous evidence model.
Map the estate to the frameworks you answer to, and the platform keeps the evidence current between audits, not only at audit time.
- NIST CSF
- ISO 27001
- SOC 2
- CIS Controls
- HIPAA
- GDPR
- + Custom frameworks
Evaluated against real data
Controls are checked automatically against your actual asset data and scored pass, fail, or warning. No questionnaires, no self-attestation.
One control, many frameworks
The same control can satisfy requirements across several frameworks at once, so evidence is collected once and reused, not rebuilt for every audit.
Regression caught early
Every failure pinpoints the specific assets responsible, and 30-day drift analysis surfaces a slipping posture before an auditor would.
The five-pillar lifecycle
From discovery to proof, one continuous loop.
Complete visibility. Prioritised action. Continuous compliance. Namespace Command runs the same five-stage lifecycle across your entire external estate, governed under one model. See how each stage works in depth.
Discover
See everything
Zero-integration discovery across nine discovery surfaces, including domains, certificates, email, suppliers, and brand exposure. Results from day 1.
- Public data only: no agents, credentials, or API keys
- Assets you never registered, surfaced
- Historical comparison between every assessment
Identify
Find the gaps
Findings are detected and classified automatically after each assessment, then tracked through a full lifecycle with a complete audit trail.
- 180+ finding types across five severity levels
- Critical gaps: expired certs, dangling records, weak authentication
- Every finding opened, assigned, and resolved
Analyse
Understand risk
Thirteen specialist AI areas and the personal advisor, Nora, turn findings into plain-language briefings and root-cause insight.
- Root cause, not just symptoms
- Dependency graphs and impact simulation
- Executive synthesis for the board
Govern
Create accountability
Assign verified owners to every zone, set standards and thresholds, and drive remediation, so nothing sits unowned.
- Email-verified zone ownership, not spreadsheets
- Standards and pass thresholds you set
- Post-quantum migration tracked to deadlines
Comply
Prove it
Controls are evaluated continuously against real asset data across six frameworks plus custom, with audit-ready evidence.
- Failures pinpoint the responsible assets
- One control satisfies many frameworks
- 30-day drift analysis catches regression early
FAQ
Questions, answered.
What does zero-integration mean?
Nothing to install: no agents, no API keys, no privileged access. Discovery works entirely from publicly observable data, such as DNS, certificate transparency, WHOIS, and web content, so there is no integration overhead and no access into your environment.
How quickly do we see results?
Discovery begins immediately at onboarding, with results from day 1. Time to a first complete snapshot scales with the size of your namespace, not the complexity of setup: no configuration, no vendor participation, no setup delay.
What does the platform discover?
Nine discovery surfaces: DNS, certificates, email security, IP intelligence, web surface, external discovery (brand), third-party suppliers, digital sovereignty, and technologies.
Which compliance frameworks are supported?
NIST CSF, ISO 27001, SOC 2, CIS Controls, HIPAA, and GDPR, plus customer-defined custom frameworks. Controls are evaluated automatically against your real asset data.
Who uses Namespace Command?
CISOs and security leadership, GRC and compliance teams, SecOps and IT operations, brand and legal counsel, and M&A teams running pre-deal due diligence.
Where is our data held?
Data-residency options are available for the US, EU, and UK to meet regulatory and sovereignty requirements.