IntelAvailable
Preserve confidence, source and relationships when intelligence enters operations.
An intelligence feed for indicators, enrichment, feed provenance, campaigns and platform correlation.
CONCEPT / INTEL WORKFLOW
IndicatorEnrich
Campaign relationContextualise
Platform matchAct
Illustrative interface · not live customer dataIndicators without source, time, confidence or relationship context produce noisy blocking and weak investigations.
Capability map
Built around a complete working loop.
Availability will be documented capability by capability; this list describes the intended module boundary.
Enrichment and provenance
Feed management
Confidence and expiry
Actor/campaign relationships
Platform correlation
Workflow
Evidence moves forward without losing its source.
- 1Ingest with source
- 2Enrich
- 3Score confidence
- 4Relate entities
- 5Use with guardrails
Use cases
Indicator triage
Campaign context
Exposure correlation
Role-based value
Intel analyst — provenance
SOC — investigation context
Leader — relevant threat narrative
Deployment and integration
Connect deliberately.
Feed licensing, provider coverage and update frequency will be explicit; no proprietary global collection claim is made.
Security and data handling
State the boundary.
Source terms, redistribution rights and confidence decay are part of the governance model.
Direct answers
Questions before commitment.
Are commercial feeds included?
No feed entitlement is claimed. Integrations depend on customer/provider licensing.
Does a match prove compromise?
No. Matches are evidence for investigation, not automatic proof.