Threat intelligence triage platform for SOC analysts
Account-takeover alarm for Google Workspace and Microsoft 365
Stage
Not given
Not given
Founded
Not given
Not given
Based in
Not given
US
Pricing model
Free
Paid
Pricing
Not given
$2 per active user per month or $20 per user per year (2 months free). No minimum seat count, no setup fee. Optional $199 flat-fee remediation service.
Key features
Multi-source intelligence aggregation from VirusTotal, AbuseIPDB, ThreatFox, and ipinfo.io
Support for IPv4, IPv6, domains, URLs, and file hashes
AI-generated case reports
Threat scoring and verdicts
Indicator collections and team collaboration
Automatic indicator type detection
Privacy-focused querying without identity exposure
Read-only audit log access
Plain-English alerts for account-takeover signals
Works on standard Microsoft 365 and Google Workspace plans
No mailbox content access
User directory fields for posture checks
What makes it different
Combines results from four threat intelligence sources in a single search
Built by SOC analysts for SOC analysts to eliminate repetitive triage work
Cylist
InboxGuards