All Vendors
deanon

Knock2

Signature-only detection. No behavioral threat indicators observed. De-anonymization vendors are critical-priority for runtime analysis — their core function is identity resolution.

4 IOCs
0
Vendor Risk Score

How This Briefing Works

This report opens with key findings, then maps the gaps between what Knock2 discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.

Key Findings

Analysis pending. Findings will appear here once intelligence collection is complete.

Disclosure Gaps

Claims vs. Observed Behavior

1 gaps

Pending Analysis

UNKNOWN
They Claim

“Claims extraction pending”

Observed Behavior

CDT analysis critical — deanon vendors core function is identity resolution (BTI-C14)

Customer Impact

What This Means For You

No measurable behavioral risk from current detection data. However, de-anonymization vendors are the highest-risk category in the BLACKOUT taxonomy — their core function is resolving anonymous visitors to PII. Runtime recon is critical before any risk assessment can be considered reliable.
Recommended Actions

What To Do About It

Role-specific actions based on observed behavior

If You Use Knock2

  • →do not deploy without full behavioral audit
  • →review consent mechanisms for identity resolution

If You're Evaluating Knock2

  • →critical-priority recon investigation — deanon vendors require immediate behavioral analysis

Negotiation Leverage

  • →Baseline detection only — behavioral analysis is critical for deanon vendors
  • →Identity resolution vendors operate at the intersection of privacy law and surveillance
  • →Require complete data flow documentation including identity graph sources and retention policies
IOC Manifest

IOC Manifest

4 INDICATORS

Indicators of compromise across 3 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.

No indicators in this category

Ecosystem

Ecosystem & Supply Chain

Knock2 operates in the visitor de-anonymization market, converting anonymous website traffic into identifiable leads. This category represents the highest inherent privacy risk in the GTM vendor ecosystem.
Evidence

Evidence Artifacts

Artifacts collected during analysis, available with evidence-tier access.

HAR Capture

Complete network capture with all requests and responses

IOC Manifest

4 detection signatures across scripts, domains, cookies, and network endpoints

Vendor Details