Gartner Report: 
Applying Thermodynamic Principles to Threat Intelligence
ThreatConnect Dashboards allows you to easily visualize data that shows the impact of your security efforts and gain a better understanding of the threats your organization faces. Automatically monitor your security operations and intelligence in a way that is actionable and meaningful for you and your team.
ThreatConnect Dashboards
ThreatConnect Dashboards allows you to easily visualize data that shows the impact of your security efforts and gain a better understanding of the threats your organization faces. Automatically monitor your security operations and intelligence in a way that is actionable and meaningful for you and your team.
ThreatConnect Platform Overview
Our products are designed to make threat intelligence accessible and usable. Whether your security team is large or small, advanced or just getting started with threat intelligence there is a ThreatConnect product that fits your specific needs and use cases.
TC Complete
TC Complete ® includes all of the features ThreatConnect® has to offer – allowing for informed decision-making based on the power of your organization’s threat intelligence. For the first time, you can orchestrate your security processes, analyze your data, and proactively hunt threats in one central place
TC Analyze
TC Analyze ® was built for analysts, by analysts. Easily enrich threat data and create intelligence to give your team insights and prioritize their efforts. TC Analyze is built on the ThreatConnect Platform, providing a central place to see your team’s tasks, analyze your data, and use all of your security tools.
TC Manage
TC Manage ® unlike typical orchestration tools, is built on the ThreatConnect Platform – giving you not only the ability to orchestrate your security functions, but also the confidence that you are basing your tasks and decisions on vetted, relevant threat intelligence.
TC Identify
TC Identify ® provides vetted, actionable threat intelligence compiled from our own ThreatConnect Research Team, more than 100 open source feeds, crowdsourced intelligence from within our dozens of communities, and the option to add intelligence from any of our TC Exchange™ partners
ThreatConnect App for Splunk Enterprise
ThreatConnect provides the ability to aggregate threat intelligence from multiple sources (i.e., open source, commercial, communities, and internally created), analyze and track identified adversary infrastructure and capabilities, and put that refined knowledge to work in Splunk, identifying threats targeting organizations.
ThreatConnect Intelligence Source
ThreatConnect Intelligence is a premium intelligence source focused on criminal and nation-state threats. Our in-house Research Team curates context around indicators and memorializes that knowledge over time. You can finally understand a threat actor’s capabilities and attack patterns by seeing how a piece of information relates to a malicious campaign.
Multi-Environment Orchestration
Run Any Playbook Across Any Environment, In Real-Time
ThreatConnect’s Multi-Environment Orchestration expands the capabilities of Playbooks, which allows you to automate almost any cybersecurity task. ThreatConnect’s Multi-Environment Orchestration expands the capabilities of Playbooks, which allows you to automate almost any cybersecurity task.
ThreatConnect Intelligence-Driven Orchestration
ThreatConnect’s Playbooks feature automates almost any cybersecurity task using an easy drag-and-drop interface - no coding needed. ThreatConnect uses Triggers to pass data to apps, which perform a variety of functions, including: data enrichment, malware analysis, and blocking actions. Once enabled, Playbooks run in real time and provide you with detailed information.
ThreatConnect CAL™ (Collective Analytics Layer)
CAL ® (Collective Analytics Layer), ThreatConnect provides an anonymous way to learn how many times potential threats were identified across all participating platform instances. By distilling millions of data points, this innovative feature offers immediate insight into how widespread and relevant the threat is, providing global context that has never before been available.
ThreatConnect’s Customer Success Team
Our Customer Success team is dedicated to ensuring that you can articulate, progress towards, and
ultimately achieve your threat intelligence and security program goals. Each customer is assigned a
dedicated Customer Success Manager and a Customer Success Engineer who leverages proactive collaboration,
resources within ThreatConnect, and their experience as an intelligence analysts to ensure your organization is
moving in the right direction.
ThreatConnect Powered by SAP HANA
The latest edition of the ThreatConnect platform is built on SAP’s ground-breaking in-memory computing technology to enable you to move at the same speed as your adversary. It has the same robust features analysts, SOCs, and IR teams depend on, only accelerated: delivering actionable insight from massive volumes of threat data faster, more comprehensively, and more precisely than ever before. With ThreatConnect Powered by SAP HANA, you’re able to move as quickly as you’re being attacked.
ThreatConnect LogRhythm Integration
ThreatConnect® and LogRhythm® have partnered to enable users to detect and act on ThreatConnect intelligence in LogRhythm SIEM. With this integration, users are able to aggregate their internal logs and combine them with validated threat intelligence. This allows them to easily spot trends or patterns that are out of the ordinary and act on them efficiently.
ThreatConnect & Deloitte: Gaining Situational Awareness
Why Choose Deloitte Advisory's Threat Intelligence Services Powered By ThreatConnect? Together, our combined offerings help clients build an intelligence-driven threat defense, delivering strategic, operational and tactical intelligence to all major stakeholders.
Fidelis Cybersecurity Joint Solution Brief
ThreatConnect® and Fidelis Cybersecurity have partnered to provide users with ThreatConnect intelligence for use within Fidelis Network™. This integration allows automatic synchronization of ThreatConnect indicators to Fidelis Network, enabling users to easily – and quickly – investigate current and historic network activity for the latest threats.
ThreatConnect McAfee Enterprise Security Manager Integration
ThreatConnect® and Intel Security have partnered to enable users to detect and act on ThreatConnect intelligence in McAfee Enterprise Security Manager™. With this integration, users can aggregate their internal logs and combine them with validated threat intelligence, to easily spot trends or patterns that are out of the ordinary and act on them efficiently.
ThreatConnect and Symantec DeepSight Intelligence
The new ThreatConnect® and Symantec integration enables users to collect and act on Symantec™ Cyber Security Services: DeepSight Intelligence in the ThreatConnect platform. This partnership allows users to ingest DeepSight Intelligence Advanced IP and URL Reputation feeds into ThreatConnect, so they can act on this intelligence in their network.
ThreatConnect and Arcsight Joint Solution Brief
ThreatConnect® and Hewlett Packard Enterprise Security have partnered to enable users to detect and act on ThreatConnect intelligence in ArcSight Enterprise Security Management (ESM)™.With this integration, users can aggregate their internal logs and combine them with validated threat intelligence, look up and create indicators in ThreatConnect, report false positives, and record how often particular indicators are observed.
ThreatConnect For Incident Response
Worldwide, cybersecurity incidents are growing in frequency and sophistication at an exponential rate. With ThreatConnect, you can unite all of the people and systems across your security team, and leverage internal, and externally gathered data. You’ll understand the full context behind and incident, and be able to act rapidly and precisely to keep your data secure.
ThreatConnect For Managed Security Service Providers
MSSPs offer protection that many businesses simply can’t live without. With ThreatConnect, you can deliver even more value. ThreatConnect partners with MSSPs worldwide to use threat intelligence to improve and enhance the security and quality of service that providers offer to their clients. Many MSSPs integrate the ThreatConnect platform into their organization’s operations and into their managed security services to unite people, processes, and technologies internally, and implement an intelligence-driven defense.
ThreatConnect and PhishMe Intelligence
PhishMe Intelligence and ThreatConnect deliver the ability to acquire, aggregate and take action from phishing-specific machine-readable threat intelligence (MRTI). Using high fidelity phishing intelligence means that analysts can prioritize and decisively respond to alerts from intelligence consumed via PhishMe’s API. With ThreatConnect, security teams are able to take action based on PhishMe Intelligence indicators through their existing infrastructure to alert or block ingress or egress traffic.
ThreatConnect For Security Operations Centers
As an analyst or director in your organization’s Security Operations Center (SOC), it’s your job to stay one step ahead of threats to your network, and have a solid plan of action to respond. ThreatConnect helps you broaden and deepen your threat intelligence, validate it, prioritize it, and act on it.
ThreatConnect For Federal, State, and Local Government
The ThreatConnect platform offers agencies of all sizes a place to start, with room to grow. Whether you’re running a mature threat intelligence program, or working as a team of one, ThreatConnect will scale to meet your needs. Join more than 30 United States government departments, agencies, and branches in taking a proactive posture against cyber threats.
ThreatConnect and Crowdstrike Falcon Host
Through an expanded partnership with CrowdStrike, ThreatConnect® users can now act on intelligence in CrowdStrike Falcon Host. This integration allows users to discover and investigate both current and historic endpoint activity within seconds of ThreatConnect sending an indicator to CrowdStrike Falcon Host.
ThreatConnect OpenDNS Integration
For the first time, you can prevent — not only detect — threats both on and off the corporate network using APIs with a cloud-delivered network security service. Together, OpenDNS and ThreatConnect give you the power to curate, correlate, and take immediate action on your threat intelligence.
ThreatConnect and Qualys Vulnerability Management Solution
The ThreatConnect and Qualys Vulnerability Management (VM) integration allows users to query Qualys scan results from within the ThreatConnect platform. Creates tasks, indicators, and attributes in ThreatConnect based on matching results automatically. Shows which machines are vulnerable to specific indicators, so one can pinpoint exactly where to take action. Together, ThreatConnect® and Qualys enable data-driven patching prioritization for the risk management and SOC teams.
ThreatConnect VMRay Integration
ThreatConnect's VMRay Integration gives VMRay Analyzer customers the ability to seamlessly integrate with ThreatConnect to automatically parse and analyze VMRay results. Users can now instantly correlate analysis results with data found in other ThreatConnect communities.
ThreatConnect Palo Alto Networks Integration
ThreatConnect and Palo Alto Networks® have established a partnership to deliver validated threat intelligence to Palo Alto Networks next-generation firewalls, enabling security operations (SOC) teams to proactively protect their network from today’s sophisticated attacks. The joint solution ensures that customers can prioritize which threats are relevant to their organization. ThreatConnect threat intelligence provides the relevant context about the type and level of threat to Palo Alto Networks firewalls to automatically alert or block.
