The partnership will help organisations worldwide extract more value out of their threat data to turn it into actionable threat intelligence, improving risk mitigation
ThreatQuotient™, a trusted threat intelligence platform innovator, have announced a strategic partnership with Flashpoint to enable customers to draw correlations across several data types including actors, campaigns, and malware. As a global leader in Business Risk Intelligence, Flashpoint empowers the business units across organisations with a decision advantage over potential cybersecurity, fraud, insider, and M&A threats by leveraging insights from the Deep & Dark Web (DDW). The custom integration of the ThreatQ™ threat intelligence platform with Flashpoint API v4 will provide incident responders and defenders with a central repository for combining external threat data with internal threat data and events, and foster the collaboration needed for increased security effectiveness and efficient threat operations and management.
By leveraging Flashpoint’s updated API, which includes direct access to their Finished Intelligence and Risk Intelligence Observables (RIOs) datasets across the security operations center, the integration with ThreatQ yields threat intelligence that is accurate, relevant, and timely to each unique business so organisations get more out of their true security resources: people and infrastructure. Together, ThreatQuotient and Flashpoint unite an organisation’s security solutions to accelerate the transformation of threat data from the DDW into actionable threat intelligence, and bring the most important part of an organisation’s threat operations and management framework all together in one platform.
“We are thrilled to expand our partner network with Flashpoint, which will enable customers to further enrich and enhance the context behind their intelligence,” said Haig Colter, Director of Alliances, ThreatQuotient. “Business Risk Intelligence is a huge advantage for customers, and the human-powered analysis provided by Flashpoint will play a key role in a successful threat intelligence program.”
Flashpoint’s Finished Intelligence dataset provides access to analytical reports produced by Flashpoint subject matter experts. These human-digestible intelligence reports cover a wide spectrum of illicit, underground activity, from cybercrime and hacking, to emergent malware, DDoS intelligence, hacktivism, and physical threats. ThreatQ equips users with a Threat Library™ that automatically scores and prioritises this intelligence based on customer-defined parameters. With Flashpoint’s high-fidelity feed of RIOs integrated with existing security operations, ThreatQ users gather contextual understanding beyond traditional indicator-based datasets, removing noise, reducing the risk of false positives, identifying correlated events on their network and improving risk mitigation.
“ThreatQuotient has a proven track record of innovation and dedication to their customers, which is well-aligned with the objectives of Flashpoint’s best-in-class partner network,” said Josh Lefkowitz, CEO and co-founder, Flashpoint. “We are excited to offer our partners and customers the ability to leverage the ThreatQ platform for Business Risk Intelligence, thereby improving threat operations and collaboration, and overall cybersecurity posture.”
This integration benefits a number of use cases, such as threat data aggregation and operational intelligence; breach investigation; and insider misuse. Flashpoint’s finished intelligence offers a “state of the threat” landscape to assist security personnel using ThreatQ to develop and prioritise intelligence on emerging threats facing their organisation. A law firm, for example, creates alerts about cybercriminals targeting documents held by law firms, allowing them to mitigate risk of exposure and enhance their security protocols. This up to date, strategic level awareness helps create a “what should I care about today” intelligence feed for users.
