Threat Intelligence Integrations

Get the most out of your security investments by integrating Flashpoint into your workflow where it matters most.

Threat Intelligence Platforms (TIP)

  • TIP Anomali | ThreatStream Supported Datasets: Alerting, Compromised Credentials, Intelligence Reports, Technical Indicators, Vulnerabilities

    Connect Anomali | ThreatStream with Flashpoint intelligence to enrich investigations and response workflows.

  • TIP ThreatConnect Supported Datasets: Intelligence Reports, Technical Indicators, Vulnerabilities

    Connect ThreatConnect with Flashpoint intelligence to enrich investigations and response workflows.

  • TIP ThreatQuotient | ThreatQ Supported Datasets: Alerting, Card Fraud, Communities, Compromised Credentials, Intelligence Reports, Marketplaces, Media, Technical Indicators, Vulnerabilities

    Connect ThreatQuotient | ThreatQ with Flashpoint intelligence to enrich investigations and response workflows.

  • TIP EclecticIQ Supported Datasets: Communities, Intelligence Reports, Marketplaces, Technical Indicators

    Connect EclecticIQ with Flashpoint intelligence to enrich investigations and response workflows.

  • TIP Cyware CTIX Supported Datasets: Intelligence Reports, Technical Indicators, Vulnerabilities

    Connect Cyware CTIX with Flashpoint intelligence to enrich investigations and response workflows.

  • TIP Analyst1 Supported Datasets: Intelligence Reports

    Connect Analyst1 with Flashpoint intelligence to enrich investigations and response workflows.

  • TIP Filigran OpenCTI Supported Datasets: Alerting, Communities, Compromised Credentials, Intelligence Reports, Technical Indicators

    Connect Filigran OpenCTI with Flashpoint intelligence to enrich investigations and response workflows.

Security Orchestration, Automation, and Response (SOAR)

  • SOAR Cortex XSOAR Supported Datasets: Alerting, Communities, Compromised Credentials, Intelligence Reports, Marketplaces, Technical Indicators, Vulnerabilities

    Connect Cortex XSOAR with Flashpoint intelligence to enrich investigations and response workflows.

  • SOAR Cyware Orchestrate Supported Datasets: Alerting, Technical Indicators, Vulnerabilities

    Connect Cyware Orchestrate with Flashpoint intelligence to enrich investigations and response workflows.

  • SOAR ServiceNow TI Supported Datasets: Intelligence Reports, Technical Indicators

    Connect ServiceNow TI with Flashpoint intelligence to enrich investigations and response workflows.

  • SOAR ServiceNow SIR Supported Datasets: Alerting, Compromised Credentials

    Connect ServiceNow SIR with Flashpoint intelligence to enrich investigations and response workflows.

  • SOAR ServiceNow VR Supported Datasets: Communities, Marketplace, Vulnerabilities

    Connect ServiceNow VR with Flashpoint intelligence to enrich investigations and response workflows.

  • SOAR Splunk | Phantom Supported Datasets: Alerting, Communities, Compromised Credentials, Intelligence Reports, Marketplaces, Technical Indicators

    Connect Splunk | Phantom with Flashpoint intelligence to enrich investigations and response workflows.

Security Information and Event Management (SIEM)

  • SIEM IBM QRadar Supported Datasets: Intelligence Reports, Technical Indicators

    Connect IBM QRadar with Flashpoint intelligence to enrich investigations and response workflows.

  • SIEM Splunk Supported Datasets: Alerting, Communities, Compromised Credentials, Intelligence Reports, Marketplaces, Technical Indicators, Vulnerabilities

    Connect Splunk with Flashpoint intelligence to enrich investigations and response workflows.

Analysis and Investigations

  • Analysis & Investigations Silobreaker Supported Datasets: Card Fraud, Communities, Compromised Credentials, Intelligence Reports, Marketplaces

    Connect Silobreaker with Flashpoint intelligence to enrich investigations and response workflows.

  • Analysis & Investigations Maltego Supported Datasets: Alerting, Communities, Compromised Credentials, Intelligence Reports, Marketplaces, Technical Indicators

    Connect Maltego with Flashpoint intelligence to enrich investigations and response workflows.

  • Analysis & Investigations Polarity Supported Datasets: Intelligence Reports, Technical Indicators, Vulnerabilities

    Connect Polarity with Flashpoint intelligence to enrich investigations and response workflows.

  • Analysis & Investigations Vertex Project | Synapse Enterprise Supported Datasets: Communities, Marketplaces, Technical Indicators

    Connect Vertex Project | Synapse Enterprise with Flashpoint intelligence to enrich investigations and response workflows.

  • Analysis & Investigations Ontic Supported Datasets: Alerting

    Connect Ontic with Flashpoint intelligence to enrich investigations and response workflows.

  • Analysis & Investigations TRM Labs Supported Datasets: Communities, Marketplaces

    Connect TRM Labs with Flashpoint intelligence to enrich investigations and response workflows.

  • Analysis & Investigations Command Zero Supported Datasets: Compromised Credentials

    Connect Command Zero with Flashpoint intelligence to enrich investigations and response workflows.

Product Integrations

  • Product Integrations Slack

    Connect Slack with Flashpoint intelligence to enrich investigations and response workflows.

  • Product Integrations MISP

    Connect MISP with Flashpoint intelligence to enrich investigations and response workflows.

  • Product Integrations STIX TAXII

    Connect STIX TAXII with Flashpoint intelligence to enrich investigations and response workflows.

Dataset Descriptions

Alerting

Email alerts that match a user area of concern such as leaked assets, organizational risks, or industry-related threats.

Card Fraud

Visibility into exposed card data within illicit card shops and threat actor communities provides insight into cybercriminal tactics so organizations can detect, prevent, and respond to fraud-related threats.

Communities

Discussions from illicit threat actor communities operating in chat services, forums, blogs, and social media networks provide early warning signals to help organizations stay ahead of attacks.

Compromised Credentials

Database of over 48 billion stolen and leaked credentials from open sources, illicit communities, marketplaces, and infostealer malware logs.

Marketplaces

Access to deep and dark web marketplaces helps users understand cyber threats, assess exposure, and potentially recover stolen data.

Intelligence Reports

Finished intelligence reports written by seasoned analysts provide expert insight into a broad spectrum of current and emerging threats, including fraud, malware, ransomware, violent extremism, and physical threats.

Technical Indicators

Indicators of compromise and technical data across Flashpoint datasets and those included in finished intelligence reports.

Vulnerabilities

Access to Flashpoint extensive vulnerability data enables effective prioritization to prevent or mitigate exposure.

  • Flashpoint vs other threat intelligence platforms – which one gives the most value for a mid-size security team?

  • Flashpoint vs other threat intelligence platforms – which one gives the most value for a mid-size security team?

  • Flashpoint vs other threat intelligence platforms – which one gives the most value for a mid-size security team?

See Flashpoint in Action