Lighthouse
Know what changes.
See what needs attention.
Lighthouse keeps watch on the threats, actors and activity your team defines, flags what changes and shows what is developing over time. Use its alerts and insight on their own, or take a lead into Vantage.
The situation keeps changing while your team works.
An investigation has a focus. The wider environment does not wait for it to finish. Relevant actors change their activity, new concerns emerge and a pattern can develop between the searches your team has time to run.
Lighthouse keeps watch across the priorities your organisation defines. It gives the team a continuing view of what matters to its remit, so awareness does not depend on someone repeatedly returning to the same manual searches.
Keep attention on the areas
your team is responsible for.
Define the priorities you need to keep in view.
Start with the threat areas, actors and activity relevant to your organisation. A financial crime team, a platform safety team and a law enforcement agency will need different views of the same wider environment. Lighthouse is focused around the questions and responsibilities that matter to your team.
Refine that focus as priorities change. New information from an investigation, a change in the organisation's remit or an emerging concern can inform what needs continued attention. Monitoring has a purpose defined by the team that uses it.
Maintain awareness alongside active work.
Ongoing monitoring continues while investigators concentrate on their cases. Rather than treating each search as an isolated snapshot, Lighthouse brings relevant developments into a continuing view that the team can return to as its work progresses.
That continuity helps distinguish an individual change from activity that is building over time. Your analysts can assess developments in context, decide where closer examination is needed and keep attention on the areas that remain important.
Different views for
different decisions.
Some activity needs immediate examination. Other developments make sense over time. Lighthouse provides alerts and ongoing insight to support both kinds of work, and early indicators your existing detection can use.
Illustrative example: a scam targeting an organisation's customers.
Alerts
Bring relevant changes to a person's attention.
Alerts surface activity that warrants a closer look. The context behind an alert gives the analyst something to assess: why it is relevant to the team's priorities and whether it changes what the organisation needs to do.
An alert is a starting point for a decision. The team may continue monitoring, seek further context or open an investigation. Lighthouse brings the activity into view. Your team decides what it means and how to respond.
The decision: does this need closer investigation?
Insights and periodic reporting
Understand what is developing over time.
Insights and periodic reporting give the team a broader picture than individual alerts alone. Related activity can be considered together, helping analysts understand what is emerging, what remains relevant and where a change in attention may be warranted.
Use that view to inform investigative priorities and discussions across the team. The purpose is to put developments into context, so ongoing awareness contributes to decisions rather than becoming another stream of information that somebody has to assemble by hand.
The decision: where should the team focus next?
Choose the next step with the context intact.
Use Lighthouse on its own when your team needs monitoring and insights to support its existing work. The alerts and broader view can help the organisation decide what deserves attention without requiring a Vantage investigation for every item.
When closer investigation is needed, take the lead into Vantage with the original context attached. The investigator can see why the lead surfaced and build on what is already known. Monitoring continues as the case progresses, and findings from the case can help refine what Lighthouse watches.
Lighthouse on its own
Maintain awareness of relevant activity and use alerts and insights to support the team’s existing investigation and response processes.
Lighthouse with Vantage
Carry a lead into a connected investigation, retain the context behind it and use findings to refine future monitoring priorities.
Focus the view around your remit.
For law enforcement and government, ongoing awareness can support the threat areas and actors within an agency's responsibility. For platforms and commercial organisations, it can inform work around fraud, abuse, impersonation and threats to people or operations.
The product serves the same purpose in each setting: keep relevant activity in view, give it context and help the team decide what warrants further work. The scope should reflect the organisation's authority, priorities and handling requirements.
Government and law enforcement
Support awareness of the threat areas and actors within your agency’s remit, alongside the investigations and responsibilities already held by the team.
Enterprise and platform teams
Keep relevant fraud, abuse, impersonation and threats to people or operations in view, with context to inform your next steps.
Establish the operating requirements together.
Your organisation sets the authority, policy and access under which Lighthouse operates. Discuss deployment in your own infrastructure or cloud environment, alongside the review and information-handling requirements that apply to your team.
A briefing starts with what you need to know and the decisions that information should support. We can then discuss the monitoring priorities, the insight your team needs and how the offering fits with current investigative workflows.
Putting Lighthouse
to work.
What does Lighthouse watch?
The areas your team is responsible for. Your team defines the watch rules, and we scope coverage with each customer. Lighthouse watches categories such as adverts and offers, group activity, websites and the open web.
Can we use Lighthouse without Vantage?
Yes. Lighthouse works on its own, with alerts and with insight and reporting over time. When a lead needs investigating, an alert can open or join a Vantage case with its context attached.
How do alerts reach our team?
In Lighthouse, or delivered into your existing systems. Each alert carries its source and context. Which systems receive alerts is agreed with each customer and set out in our agreement with them.
Who decides what happens with an alert?
Your team. An alert is a prompt for review, not a decision. Your analysts decide whether to keep watching, investigate or act, and nothing leaves unreviewed, including a takedown, block or referral.
Where does Lighthouse run, and who can see our data?
Lighthouse runs self-hosted in your infrastructure or in your own cloud environment. Access follows the roles your organisation sets. Hosting, region, retention and any access by Azonic are agreed with each customer and set out in our agreement with them.
What could your team do
with more capacity?
Tell us about your investigations and where the work slows down. We’ll discuss how Azonic could fit.