Intake · The Table Events

01

Legal name and short code

Legal company name required Short code for reports required 1–16 letters or digits. Used in finding IDs, for example SGNA.

Tenant id Leave blank to use the short code in lowercase. Lowercase letters, digits, and hyphens. Engagement Billing is invoiced by The Table Events. This records the tier you bought.

02

Industry

Sector required Plain-language label Required if you chose Other. Example: solar inverter and energy-storage manufacturing.

Peer-group label How reports should name the comparison set. Default is “sector peers”. Sector keywords One per line. Words that mean “this industry” on leak sites. Optional.

03

Parent company and scope

Parent or group name Parent domain

This engagement covers only our region, not the parent’s global assets. Scope note

04

Primary domain

Primary website or email domain required Bare domain only, such as sungrow-na.com. This is the domain you will prove with DNS. If the public website uses a different host, add that host in question 9.

05

Other domains you own

Brands, regions, campaigns One bare domain per line. Leave blank if there are none.

06

Public IP ranges and ASNs

Outside-in only sees public space. Leave this empty if you don’t know — we will not guess.

We don’t know our public ranges or ASNs yet.

CIDR ranges ASNs

07

Brand words and abbreviations

Words attackers might use required One per line. Company name, product names, short forms.

08

Lookalike domains you already know

Known typos, homoglyphs, or impersonation domains One per line. The engine also discovers candidates. Do not list domains you own.

09

Official cloud and SaaS hostnames

Microsoft 365, SharePoint, customer portals One host per line, such as contoso.sharepoint.com.

10

Software and SaaS inventory

Inventory file CSV or XLSX, 8 MB or smaller. Optional. You can send it later; advisories wait until it is here. Workbook sheet Leave blank to use the first sheet.

Column for publisher Column for product Column for version Column for owner Column for category Column for sso Column for notes

11

Internet-facing technology

Firewall, VPN, email gateway, identity provider, OT remote access One product per line. This is recorded with the inventory. It does not by itself authorize a scan.

Vendor advisory feeds to prefer. The engine still only matches what is in the inventory.

Microsoft Palo Alto Networks Fortinet Cisco Google Chrome WordPress Red Hat

Other vendor feeds One name per line, if it is not in the list.

12

Products you ship

We ship products with software or firmware that should be watched for CVEs and exploit chatter.

Product 1

Name What it is

CVE vendor string, if you know it

Product 2

Name What it is

CVE vendor string, if you know it

Product 3

Name What it is

CVE vendor string, if you know it

Product 4

Name What it is

CVE vendor string, if you know it

Watch CISA ICS advisories for these products. Regulatory or narrative topics One per line. Optional. Example: a public rulemaking that affects the product line.

13

Executives to monitor

Leave every row blank and nobody is monitored. A person is watched only when you check “Approved” and name the approver. The watch uses the official email and public sources. It does not guess personal addresses.