Full Report
Hello world! We’ve been busy squireling away on a much requested project – a commercial Snoopy offering. We’ve called it ShadowLightly, and we’d like to invite you to join the beta explorer program. We’re going to offer ten 3-month trials to the site (you’d need to buy sensors / build your own), and in return we’d ask that you help us debug any issues. To apply, please email [email protected] – introduce yourself, and tell us a little about why you’d like to join the program.
Analysis Summary
# Industry News: SensePost Launches Beta for Commercial Snoopy Offering, ShadowLightly
## Summary
SensePost has announced the launch of **ShadowLightly**, a commercialized, centralized offering based on their existing open-source "Snoopy" project—a distributed tracking and data interception framework. They are currently recruiting ten participants for a 3-month beta explorer program to debug the platform, which aggregates sensor data for analysis via a website and Maltego integration.
## Key Details
- **Date:** Published January 16, 2015
- **Companies Involved:** SensePost
- **Category:** Product Launch (Commercialization of Open Source Tool)
## The Story
SensePost is transitioning its open-source tracking and profiling framework, Snoopy, into a commercial service named ShadowLightly. Snoopy is described as a distributed infrastructure for tracking, profiling, and data interception. ShadowLightly will operate via a centralized server infrastructure where users register their purchased or self-built sensors, upload data, and analyze it either through the ShadowLightly website or through specialized Maltego transforms developed for querying the remote data. To jump-start development, SensePost is inviting ten parties to join a 3-month beta program, requiring participants to deploy hardware and actively report issues.
## Business Impact
### For the Companies Involved
- **SensePost:** This marks a significant move from pure consulting/tool development toward monetizing infrastructure, creating a recurring revenue opportunity around managed data interception and analysis services built on their established technology.
### For Competitors
- **Niche Security Tool Vendors:** Competitors offering similar outsourced infrastructure for network intelligence or penetration testing services incorporating passive monitoring may see increased pressure if ShadowLightly proves scalable and effective. The integration with Maltego could give it a competitive edge in visualization workflows.
### For Customers
- **Target Users (Pentesters/Security Teams):** Customers gain access to a managed service that abstracts away the complexity of maintaining a distributed data ingestion and correlation infrastructure for tracking/profiling activities, potentially improving operational efficiency. However, they must now rely on SensePost's SaaS platform rather than a purely self-hosted open-source deployment.
### For the Market
- **Growth of "Security-as-a-Service" for Specialized Intelligence:** This move indicates a trend where specialized, proprietary tools born from open-source success are being packaged into managed subscription services, lowering the barrier to entry for advanced network intelligence capabilities.
## Technical Implications
ShadowLightly introduces a centralized data management and analysis layer for the distributed Snoopy sensors. The key technical innovations mentioned are the **centralized server architecture** for data aggregation and the provision of **TDS (Transform Definition Services) transforms for Maltego**, enabling professional integration of ingested data directly into existing reconnaissance workflows.
## Strategic Analysis
- **Market Positioning:** SensePost is positioning ShadowLightly as a professionalized, scalable version of a trusted internal tool designed for detailed tracking and profiling—likely targeting advanced penetration testing firms, internal red teams, or managed security service providers (MSSPs).
- **Competitive Advantage:** Leveraging existing brand recognition from the open-source Snoopy project and deep integration capabilities with the highly popular Maltego visualization platform provides a strong initial advantage.
- **Challenges:** The primary challenge will be managing user concerns regarding data security and privacy given the nature of the tool (data interception framework) being centrally hosted. Additionally, hardware dependency (users must buy/build sensors) adds friction compared to fully cloud-native solutions.
## Industry Reactions
*(No specific analyst reactions are cited in the provided text, given the announcement is a beta launch invitation.)*
## Future Outlook
- **What to watch for:** The success of the beta program will dictate the immediate roadmap. If data quality and platform stability are confirmed, SensePost will likely move towards a broader commercial release with tiered subscription pricing based on data volume or required features.
## For Security Professionals
Security professionals interested in advanced network profiling and tracking will see ShadowLightly as an opportunity to utilize commercial-grade infrastructure for activities traditionally done manually or with custom-built open-source stacks. Practitioners using Maltego should monitor the specialized TDS transforms for new data correlation possibilities.