Spamhaus
Consultancy
With one of the largest databases of SMTP events, Spamhaus has a unique perspective on email sending practices; every day, we analyze 7.5 billion IPs and over 3 million domains.
By utilizing our internal databases against specific behavior patterns, we provide tailored, data-driven reports and 1:1 advice to help ensure your critical communication channel remains operational.
Evidence-based consulting
Our Consultancy offering is 100% backed by data; we will share the facts, provide clarity on what that means, and make recommendations to take action based on the evidence shared.
Tailored, in-Haus expertise
Spamhaus has a team of highly-skilled experts with decades of email-specific experience and knowledge. Gain access to this expertise, tailored to your business’s specific needs.
Identification of unknowns
Our Consultancy offering can raise data points concerning unknown challenges, including shadow IT, missed IPs in records, brand impersonation, misconfiguration, fraudulent and/or compromised accounts.
Use case for Spamhaus Consultancy
Our data-driven consultancy service is designed specifically to help networks prevent and resolve email-related challenges, based on our unique email traffic intelligence.

Prevent and resolve email-related challenges
Through this service, we will provide you with new insights into your IPs, which you provide to us. It will also highlight unique data points of other assets that are not associated with the IPs provided. Where present, this signals possible shadow IT, missed IPs in records, brand impersonation, misconfiguration, etc.
Where these patterns show up, they indicate areas that need attention, as explained in detail through reporting and 1:1 sessions, framed by actionable advice.
Together, we define KPIs to ensure your business goals are achieved.
We can also facilitate 1:many meetings, including inviting clients to participate.
Our reporting removes technical jargon with clear, practical and bespoke insights.
How and when we communicate will be tailored to your needs and capacity.
The details
How it works
Our Consultancy offering begins with a kick-off meeting to understand the key challenge areas, agree KPIs to ensure goals are met, and to determine cadence of communications – both reporting and meetings.
To achieve the best outcome, customers are also asked at the outset to direct Spamhaus to the IPs and/or domains to investigate, ensuring findings are focused and relevant. After we have run an initial report on the provided resources, we’ll assess and share the suitability of this service to your network.
What you’ll gain
This service will provide new insights covering your IPs and/or domains provided to Spamhaus. We will also highlight unique data points related to assets belonging to you that are not directly associated with the IPs provided. This may signal possible shadow IT, missed IPs in records, brand impersonation, misconfiguration, fraudulent and/or compromised accounts.
These are Spamhaus’ observations, determined by querying our internal databases against specific behavior patterns. Where these patterns show up, it indicates clear areas for action to remedy current challenges, and prevent ongoing issues – all explained in detail through meetings and reporting.
Reporting topics covered
Who is Spamhaus Consultancy relevant for?
Interested in
Spamhaus Consultancy?
If you’re interested or would like to learn more, fill out our form and a member of our team will be in contact with you to share more about this service and next steps.

We’ve worked side by side with Spamhaus over the years to detect, identify, and remediate suspicious activities – and now under the umbrella of the Spamhaus Technology’s Consultancy offering the two companies will be working even more closely together on our shared goal of an Internet that is safe and productive for all users.
Paul Vixie
VP & Deputy CISO, AWS

Explore our data
Data Access
Query real-time DNS blocklists, covering IPs, domains and hashes (including malware files, cryptowallets, email addresses and URLs) to protect your email infrastructure, wider network and users.
Data Access
Incremental synchronization of binary and contextual datasets to local servers, including access to our entire binary DNS blocklist data. Efficiently transfer data by only copying changes between the source and destination.
Data Access
Integrate context-rich metadata relating to IP and domain reputation to enhance existing data feeds, or consume as an independent data source. Gain additional intelligence to monitor, assess and remediate as required.