Prophet Security
Prophet Security declares 23 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and OpenAI. No published changes since we first read it on Nov 6, 2026.
Not listed by any tracked vendor.
Not loaded by any published homepage.
Subprocessors CSV of Prophet Security's subprocessors · Atom feed of Prophet Security's subprocessors DORA draft CSV of Prophet Security's subprocessors as declared by Prophet Security what's this? ·
23 third parties.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services AI | Cloud provider; AI Service; Current – authorized as of September 10, 2026. Infrastructure - Securely host our infrastructure, ensuring reliable data storage, processing, and availability. Processed in United States, Germany, Switzerland or Japan. Generative AI (Amazon Bedrock) - Third Party Generative AI Service - access and utilize hosted AI models. Global processing. Location optional - Customer may elect to disable Global Processing. | United States, Germany, Switzerland or Japan; Global | |
| Anthropic AI | AI Service; Current – authorized as of September 10, 2026. Third Party Generative AI Service, used for access and use of hosted AI models. | United States | |
| Datadog | Cloud monitoring; Current – authorized as of September 10, 2026. Used to aggregate, search and analyze logs. | United States | |
| DNSlytics | Current – authorized as of September 10, 2026. Gather domain and IP address intelligence for security analysis.; Data analytics | United States | |
| Google Cloud Platform | AI Service; Current – authorized as of September 10, 2026. Third Party Generative AI Service - access and utilize hosted AI models. | United States | |
| Greynoise | Advance notice – expected effective October 10, 2026. Identify IP addresses associated with internet-wide scanning and automated activity. Optional - Customer may elect to disable the applicable Service feature(s).; Security | United States | |
| Have I Been Pwned | Current – authorized as of September 10, 2026. Used to assess if credentials for users being investigated have been compromised. Optional - Customer may elect to disable the applicable Service feature(s).; Data Breach Analysis | United States | |
| IPInfo | Current – authorized as of September 10, 2026. Obtain geolocation and IP address based information. Optional - Customer may elect to disable the applicable Service feature(s).; Data analytics | United States | |
| Mailgun | Advance notice – expected effective October 10, 2026. Used to deliver investigation notifications and platform alerts by email. Optional - engaged only if Customer elects the applicable Service feature(s).; Email delivery | United States | |
| Microsoft Azure AI | AI Services; Current – authorized as of September 10, 2026. Third Party Generative AI Service - access and utilize hosted AI models. Location optional - Customer may elect to disable Global Processing. | Global | |
| OpenAI AI | AI Service; Advance notice – expected effective October 10, 2026. Third Party Generative AI Service, used for access and use of hosted AI models. | United States | |
| Parallel | Current – authorized as of September 10, 2026. Providing web intelligence and search infrastructure specifically engineered for AI agents. This capability allows our AI-driven security systems to perform high-accuracy, real-time web research. Optional - Customer may elect to disable the applicable Service feature(s).; Web Intelligence | United States | |
| Posthog | Current – authorized as of September 10, 2026. Product and usage analytics services.; Data analytics | United States | |
| Pylon | Current – authorized as of September 10, 2026. Used to create, process and manage support tickets.; Support Ticket Management | United States | |
| ReversingLabs | Current – authorized as of September 10, 2026. File hash values and domain names are shared to perform threat intelligence and malware analysis for detecting and preventing malicious activities. Optional - Customer may elect to disable the applicable Service feature(s).; Security | United States | |
| Scrapfly | Current – authorized as of September 10, 2026. Web scraping and screenshot capture of webpages for the analysis of phishing emails and associated links.; Security | United States | |
| SerpApi | Current – authorized as of September 10, 2026. Retrieve real-time search engine results, enhancing the accuracy and relevance of our services. Optional - Customer may elect to disable the applicable Service feature(s).; Engineering | United States | |
| Slack | Collaboration; Current – authorized as of September 10, 2026. Secure team communication and collaboration for support and operational purposes. | United States | |
| Snowflake | Current – authorized as of September 10, 2026. Used for ad hoc analytics and generating internal operational reports.; Data analytics | United States or Germany | |
| Spur | Current – authorized as of September 10, 2026. Identify and analyze VPNs, proxies, Tor nodes, and other anonymizing infrastructure. Optional - Customer may elect to disable the applicable Service feature(s).; Data analytics | United States | |
| TypeSafe AI | AI Service; Advance notice – expected effective October 31, 2026. Third Party AI Service, used for access and use of hosted classification models. | United States | |
| URLScan | Current – authorized as of September 10, 2026. Used for scanning URLs for malicious content. This enhances our ability to analyze and neutralize web-based threats found within emails and other data streams. Optional - Customer may elect to disable the applicable Service feature(s).; URL Analysis | United States | |
| VMRay | Advanced Threat Analysis; Current – authorized as of September 10, 2026. Providing an advanced malware sandbox and phishing threat analysis. This includes automated malware triage and analysis of samples. Optional - Customer may elect to disable the applicable Service feature(s). | United States |
Web TechnologiesCSV of Prophet Security's web technologies · Atom feed of Prophet Security's web technologies
Prophet Security's homepage made 163 requests to 23 domains, 12 services controlled by another company, and 3 domains not identified.
12 third parties by category: Analytics 6Advertising 2Marketing automation 1A/B Testing 1Cookie compliance 1CDN 1
Third parties 12 · 157 requests
GetVector, Inc. Vector 11
CookieScript Cookie Script 2
Reddit, Inc. Reddit Ads 2
Unknown 3 · 3 requests
sequel.iosequelvideo.comusbrowserspeed.com
First party 1 · 3 requests
Prophet Security Cloudflare Finsweet GSAP 3.14.2 HSTS HTTP/3 Microsoft Clarity Open Graph Priority Hints Webpack core-js 3.49.0 3
7 tracked companies loaded by the homepage are not in Prophet Security's subprocessor list. A website can use a service without it processing customer data.
ComplianceCSV of Prophet Security's compliance · Atom feed of Prophet Security's compliance
- Certified
- Says it complies with
Certifications as Prophet Security's trust center lists them; reports are usually shared on request (evidence)
Incidents reported by Prophet Security's subprocessorsCSV of incidents reported by vendors Prophet Security lists · Atom feed of incidents reported by vendors Prophet Security lists
83 reported incidents in the last 30 days, by 11 of the vendors Prophet Security lists as subprocessors.
A subprocessor list names a company, not the service an incident touched. This does not show that Prophet Security was involved.
And 58 more. All of them: CSV · Who is around them.
ChangesCSV of Prophet Security's changes · Atom feed of Prophet Security's changes
See the list as we read it on any date: Time machine
None since tracking began.
Rating badge for Prophet Security's site
It updates with the rating.
<a href="https://thirdpartyindex.com/vendors/prophet-security"><img src="https://thirdpartyindex.com/badge/prophet-security.svg" alt="Prophet Security transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/prophet-security)