A professional graph is a searchable map of people, job titles, employers, connections, and interaction signals. It turns public profile data and relationship metadata into a structure that can be queried to find who reports to whom, who knows whom, and who is likely to influence a decision.
In cyber security, this matters because attackers use the same graph for reconnaissance and social engineering. By reviewing titles, seniority, recent job changes, and mutual connections, an adversary can choose a convincing impersonation target, time a lure, and write a message that matches the victim’s work context. Defenders also use professional graphs to support vendor due diligence, insider-risk reviews, and threat hunting for fake accounts or unusual contact patterns. Limiting profile visibility, verifying requests through separate channels, and using phishing-resistant MFA reduce the value of this data to attackers.