01
Enrichment with its confidence attached
Reputation, network, DNS, WHOIS and geolocation context is added to indicators, and each match shows the confidence behind it, so analysts weigh the source rather than trust the badge.
Enrich
Context on every indicator. Priority on every vulnerability.
Indicators are enriched with reputation, network and location context, and vulnerabilities from your own inventory are ranked by what is being exploited — not just by score.
How it works
Context on every indicator. Priority on every exposure.
- Enrichment: AbuseIPDB, GreyNoise, VirusTotal, Tor, DNSBL, BGP, DNS, WHOIS, GeoLite2.
- Built-in free feeds: Spamhaus DROP and EDROP, abuse.ch Feodo, URLhaus and SSLBL.
- Vulnerabilities from collector inventory matched to NVD, CISA KEV, EPSS and OSV, with a fix-today view.
02
Free feeds, built in
Spamhaus DROP and EDROP, abuse.ch Feodo, URLhaus and SSLBL ship with the platform. Bring commercial feeds if you have them; nothing depends on them.
03
Fix today, not fix everything
Vulnerabilities from collector inventory are matched to NVD, CISA KEV, EPSS and OSV, and ranked by what is being exploited, so the daily list is short enough to act on.
Specifications
| Feeds | Spamhaus DROP/EDROP · abuse.ch Feodo, URLhaus, SSLBL |
|---|---|
| Enrichment | Reputation, network, DNS, WHOIS, geolocation |
| Vulnerability sources | NVD · CISA KEV · EPSS · OSV |
| Indicator confidence | Shown with every match |