threatER

The threatER platform is designed to reduce the volume of traffic reaching firewalls, decrease alert noise, and integrate with existing security stacks via APIs and connectors to SIEM, SOAR, and third-party threat intelligence sources. The platform centers on a decision engine that evaluates threat intelligence to block malicious traffic before it reaches a network or endpoint, and is offered through several component products

Key Features & Functions:

threatER Enforce
A threat enforcement solution that ingests and acts on up to 150 million threat indicators at line speed to block malicious traffic before it reaches a network. It deploys across on-premises, cloud and edge, Wi-Fi, and remote/hybrid environments, and includes a Verdict API for integrating real-time IP, domain, and threat-actor verdicts into other tools.

threatER EnforceDNS
A cloud-native protective DNS and content filtering service that inspects DNS transactions to stop phishing, ransomware, and command-and-control communications, incorporating the Protective DNS technology acquired from HYAS Protect. It supports configurable content filtering policies, agent and agentless deployment models, and policy enforcement tied to Microsoft Entra ID (Azure AD) groups.

threatER Marketplace
A hub for accessing premium threat intelligence feeds and specialized security integrations from providers such as DomainTools, Webroot, GreyNoise, Bitdefender, and Proofpoint, alongside cyber services including platinum support, threat hunting, firewall assessments, and hosted syslog.

threatER Collect
A free, centralized SaaS tool for aggregating threat intelligence feeds and lists from open-source, government, and private sources, creating custom lists, and exporting them to firewalls and other security tools.

API and Ecosystem Integrations
The platform connects with SIEM and SOAR tools, threat intelligence platforms (including Recorded Future, ThreatConnect, AlienVault, and Anomali), and information-sharing organizations such as E-ISAC, FS-ISAC, MS-ISAC, and Health-ISAC, along with free integrations with services such as DocuSign, GitHub, Google, and Microsoft.

Deployment Flexibility
The platform protects on-premises infrastructure, cloud and edge workloads, Wi-Fi networks, and remote or hybrid workforces from a single solution, without requiring agents on every device.