Customize your security workflows

Custom Integration Scoping

Meet with our professional services team to determine the intended use case and explore possible integration points.

Use Case Development and Implementation

The use case development service includes multiple workshops consisting of initial scoping & discovery, review of existing use cases, and identifying new use cases needed for intelligence-led security strategy.

Integration Configuration

Work with our professional services team to ensure your integration is implemented correctly and assist with integration setup with tool administrator. Integration configuration is included with Premium or Integration Support.

CTI Design and Roadmap

Improve your security program through intelligence integration at a procedural level. Through multiple workshops, our team will gain a deep understanding of your organizational operations and strategies to identify where intelligence integration increases the value and performance of your security program to better protect the business.

Splunk

Leverage the power of intelligence to correlate against internal telemetry data to detect risky IOCs, triage alerts faster, and proactively block threats before they impact business.

LogRhythm

LogRhythm continuously correlates data collected from across the enterprise with actionable, real-time intelligence from Recorded Future for faster, confident threat detection and response.

Microsoft

Leverage the power of intelligence to correlate against internal telemetry data to detect risky IOCs, triage alerts faster, and proactively block threats before they impact business.

IBM Security

Provide real-time monitoring and correlation of the vast amount of security events and network traffic in your organization.

Elastic

Enable customers to stop advanced cyber threats with new prebuilt detections and data source integrations, and accelerate application development with deeper visibility into serverless architectures and continuous integration and continuous delivery (CI/CD) pipelines.

Graylog

Graylog is a leading centralized log management solution for capturing, storing, and enabling real-time analysis of terabytes of machine data.

McAfee

McAfee® Enterprise Security Manager (McAfee ESM) is a security information and event management (SIEM) solution that gives you real-time visibility to all activity on your systems, networks, databases, and applications.

OpenCTI

OpenCTI is a free, open-source threat intelligence platform based on the STIX2 data model. It provides a centralized point to collect, correlate, and export cyber threat intelligence

RSA Archer GRC

Archer Third Party Governance (GRC) enables analysts to automate and streamline oversight of vendor relationships, get an accurate picture of third-party risk factors, and prioritize them according to importance.

RSA Netwitness

RSA NetWitness Platform brings together evolved SIEM and threat defense solutions that deliver unsurpassed visibility, analytics, and automated response capabilities.

Slack

Use the simplicity of a chat command in Slack to get enriched details about a vulnerability.

TheHive

TheHive is a scalable, open source and free Security Incident Response Platform, tightly integrated with MISP (Malware Information Sharing Platform), designed to make life easier for SOCs, CSIRTs, CERTs and any information security practitioner

ThreatPinch

This highly adaptable Extension enables you to plug api queries directly into your browser via an on hover tooltip.