Threat intelligence your tools can act on

A continuously updated stream of data about current threats: indicators of compromise such as malicious IP addresses, domains, URLs and file hashes, and in better feeds the context around them, such as which threat actor uses them and which industries are being targeted. Security tools use the feed to block known-bad infrastructure and to raise or enrich alerts.

Free feeds are useful, but they are mostly unvalidated indicators with little context, and many republish the same data. A commercial feed like Sekoia's is validated before publication, links each indicator to the threat behind it, and includes original research. Sekoia reports that more than half of its indicators come from its own investigations.

Anything that reads an API or a TAXII 2.1 server, which covers most SIEM, SOAR, EDR, firewall and threat intelligence platforms, in the cloud or on premises. Sekoia also has native connectors for common platforms. We confirm compatibility with your tools before you buy.

No. Sekoia's Threat Detection and Research team produces it. BlueRadius is a Sekoia Intelligence partner: we help you choose a plan, connect it to your tools, tune it, and turn it into decisions for your security program.

It depends on the plan and how you use it. An indicator-only feed costs far less than the full feed with platform access. We quote after a short call about your tools and team.

Yes. ISO 27001:2022 added threat intelligence as Annex A control 5.7, and SOC 2, NIST CSF and PCI DSS expect you to understand relevant threats when you assess risk and monitor for attacks. A documented feed connected to your monitoring is clear evidence.