Log in Request a demo
In The Platform

Ask AI. Any Question, On Any Screen.

Ask AI sits on the screens of the Brandefense platform. Ask in plain words and get an answer from your own data, with links to the incidents, assets and reports behind it.

How many critical incidents are still open, and which are overdue?
Try
Open Critical Incidents Answer · Incidents

31 critical incidents are open. 9 are past due, most of them in Phishing Monitoring. The oldest has been open for 12 days.

Open
31
Overdue
9
Most overdue in
Phishing Monitoring
Read fromquery_incidents · 31 incidentsfilter · 9 overdue
Your Day Summary · Dashboard

318 new findings since your last login. Three need you today.

  • Lookalike domain serving a login page · Phishing Monitoring · 2h
  • Admin panel exposed on a staging host · Security Findings · 5h
  • Executive email in a new breach dump · Executive Monitoring · 1d
Read fromPhishing MonitoringSecurity FindingsExecutive Monitoring
Who Changed What · INC-2041 Timeline · Incident
09:12
Opened by Phishing Monitoring
09:40
Assigned to the brand team
11:05
Severity raised to critical
13:30
Takedown requested

Every change is taken from the incident’s activity log.

Read fromIncident activity log
Findings By Technology Table · Assets
Web CMS
42 findings
Web server
27 findings
Firewall
14 findings
Mail server
9 findings

Open any row to see the findings behind it.

Read fromAssets

Sample data · acme.com · illustrative

Request a demo See How It Answers
What You Can Ask

Questions For Every Screen.

What teams ask most, screen by screen.

Daily Triage
Exposure And Suppliers
Threats And Team
Summarize my day.
Your Day Summary · Dashboard

318 new findings since your last login. Three need you today.

  • Lookalike domain serving a login page · Phishing Monitoring · 2h
  • Admin panel exposed on a staging host · Security Findings · 5h
  • Executive email in a new breach dump · Executive Monitoring · 1d
Overdue
9
Open critical
31
New since login
318
Read fromPhishing MonitoringSecurity FindingsExecutive Monitoring
How many critical incidents are still open, and which are overdue?
Open Critical Incidents Answer · Incidents

31 critical incidents are open. 9 are past due, most of them in Phishing Monitoring. The oldest has been open for 12 days.

Open
31
Overdue
9
Most overdue in
Phishing Monitoring
Read fromquery_incidents · 31 incidentsfilter · 9 overdue
What changed on INC-2041?
Who Changed What · INC-2041 Timeline · Incident
09:12
Opened by Phishing Monitoring
09:40
Assigned to the brand team
11:05
Severity raised to critical
13:30
Takedown requested

Every change is taken from the incident’s activity log.

Read fromIncident activity log
Show my findings by technology.
Findings By Technology Table · Assets
Web CMS
42 findings
Web server
27 findings
Firewall
14 findings
Mail server
9 findings

Open any row to see the findings behind it.

Read fromAssets
Which certificates expire soon?
Asset listAnswer shape · Assets

Illustrative layout. The numbers come from your own workspace.

Read fromCertificatesDates
Which vendors dropped a grade?
Vendor listAnswer shape · Vendors

Illustrative layout. The numbers come from your own workspace.

Read fromGradesChanges
Any new mentions of our brand?
Mention listAnswer shape · Dark Web

Illustrative layout. The numbers come from your own workspace.

Read fromMentionsSources
Show workload balance.
Workload viewAnswer shape · Team

Illustrative layout. The numbers come from your own workspace.

Read fromPeopleOpen items

Sample output on acme.com.

Answer Anatomy

Answers In The Shape You Need.

A summary, a table or a timeline, each one linked to the records behind it.

You askedHow many critical incidents are still open, and which are overdue?
1

31 critical incidents are open. 9 are past due, most of them in Phishing Monitoring. The oldest has been open for 12 days.

2
query_incidents(severity: "critical", status: "open")31 incidents
filter(overdue: true)9 overdue
3
Open
31
Overdue
9
Most overdue in
Phishing Monitoring
4
Open the overdue incidents →Hand off to Odin · optional
  1. 1
    The answer

    A short answer in plain words. The same data the screen shows.

  2. 2
    The sources it used

    Every number opens the records behind it. The queries are shown, so you can see where each number came from.

  3. 3
    The related items

    The counts and groupings behind the answer, listed beside it and linked to the records.

  4. 4
    The next step

    Open the records, or when a question needs an investigation, Odin takes it from here.

One Question

From Question To Linked Answer.

Ask AI reads the screen you are on, runs the query and links every number.

  1. 00:00 Question You ask on the Incidents screen Ask AI knows which screen you are on.
  2. 00:01 Context Reads the screen Filters and selections on screen shape the answer. Incidents view
  3. 00:02 Query Runs the query The same data the screen shows. 9 incidents
  4. 00:03 Answer Answers with links Every number opens the records behind it. 31 open · 9 overdue
  5. 00:04 Hand Off Offers a deeper look When a question needs an investigation, Odin takes it from here. Optional

Sample run on acme.com. Times are illustrative.

Answers From The Whole Platform.

Ask from any screen. The answer can come from any module your role can see.

  • IncidentsEvery module, every status
  • Attack Surface ManagementAssets, services, exposures
  • Dark WebForums, markets, channels
  • Threat ActorsProfiles, tools and targets
  • Phishing And TakedownsLookalikes and case status
  • Third-Party RiskSupplier exposure, from External Attack Surface Management (EASM)
  • Cybercrime DatabaseThe Brandefense archive
  • ReportsResearch and past briefs
Compare

Many Filters. Or One Question.

Skip the query builder. Ask the way you would ask a colleague.

TaskBy handWith Ask AI
Find overdue critical incidents Several stepsOpen incidents, add filters, sort. One question, with links.
See who holds which incidents Extra toolsExport, then pivot in a spreadsheet. A workload view, by person.
Check what changed on an incident ManualRead the activity log line by line. A short history, in order.
List certificates expiring soon Several stepsAssets, filter by type, filter by date. One question, one list.
Ask AI Or Odin

When To Use Which.

Ask AI reads and answers. Actions go through the screen or through Odin.

Ask AI

A quick question.

  • You want one answer, fast, with links to the records.
  • You ask from the search bar or the Ask AI button, on the screen you are on.
  • It reads and answers. It does not act.
You are here
Odin

A whole case.

  • The question needs an investigation, in several steps.
  • Odin writes a report when it is done.
  • Actions go through Odin or through the screen.
Meet Odin

Prefer your own assistant? Brandefense is in the Claude directory and in ChatGPT.

FAQ

Questions About Ask AI.

  • Where can I use Ask AI?

    In the Brandefense platform, from the search bar or the Ask AI button.

  • What data does it use?

    Your own workspace: incidents, assets, threat intelligence and activity, limited to what your role can see.

  • How is it different from Odin?

    Ask AI answers a quick question. Odin runs a multi-step investigation and writes a report.

  • What can I ask?

    Plain-language questions about incidents, assets, vendors, dark web mentions, threat actors and reports, for example which critical incidents are overdue or which certificates expire soon.

  • What does an answer look like?

    A summary, a table or a timeline, each one linked to the records behind it. Every number opens the records it came from.

  • Can Ask AI change anything?

    No. Ask AI reads and answers. Actions go through the screen or through Odin.

  • Does it know which screen I am on?

    Yes. Ask AI reads the screen you are on, including the filters and selections, and runs the query on the same data the screen shows.

  • Will it show data I am not allowed to see?

    No. Answers are limited to what your role can see in your workspace.

  • What if my question needs a deeper look?

    Ask AI can hand the question to Odin, which takes it from there as a multi-step investigation. The hand-off is optional.

  • Can I use Brandefense from Claude or ChatGPT too?

    Yes. Brandefense is listed in the Claude directory as a connector and is available as an app in ChatGPT. See the Model Context Protocol (MCP) Server and ChatGPT app pages for details.

Ask Your Own Data A Question.

See Ask AI on your workspace in a live demo with a partner.

Talk To An Analyst