Cyble, Dataminr, Filigran and Intel 471

About Dataminr

Dataminr sells real-time, AI-powered alerts on high-impact events and critical information, delivered via a web application, mobile application, API and email. Dataminr describes its platform as using Multi-Modal Fusion AI for discovery, Generative AI for description and Agentic AI for context. Dataminr operates more than 60 purpose-built, specialized LLMs, trained on a proprietary 10+ year archive of historical event data. Dataminr synthesizes text in 150 languages, image, video, audio and sensor signals across 1M+ public data sources.^[1][5]

Dataminr for Cyber Defense is an intel-driven threat and exposure solution suite that assembles and operationalizes real-time, client-tailored intelligence. CTTI maps fast-breaking threats to the customer's assets and exposure automatically. Dataminr surfaces intelligence via Investigation Insights over existing workflows. Agentic TI Ops builds on Client-Tailored Threat Intelligence and adds an operational layer. Dataminr Intel Agents collect, enrich, correlate and structure intelligence, then route it into detection, prevention and response across 200+ integrations. Dataminr Intel Agents process 43+ TB daily across 1M+ sources.^[1][7][8]

CCM ingests real-time signals from endpoint, network, identity and cloud controls to measure enforcement across critical assets. Dataminr's AI quantifies probable financial loss by mapping MITRE ATT&CK TTPs to control effectiveness and asset criticality. CCM w/ RQ produces Findings, which are evidence-backed control gaps tied to specific assets, mapped to attacker behavior and ranked by financial impact. RQ integrates with the tools a customer already uses to assess control effectiveness, identify coverage gaps and quantify risk, and it has more than 100 integrations across the security stack. Dataminr provides real-time risk views designed for CISOs, CFOs and board reporting.^[1][9]

Dataminr Advanced for Corporate Security can be deployed from headquarters to the field via web, mobile and email applications. Dataminr's AI models predict potential evolutions of how an event may unfold over the coming hours, based on historical event patterns in Dataminr's 10+ year event archive. Dataminr offers Agentic Search, Real-Time Brief Builder, Watchlist Agent, ReGenAI Tailored Live Briefs and Advanced Custom Alerts as Agentic AI capabilities.

First Alert can be deployed via web, mobile and email applications, and directly into government internal applications. Dataminr's AI models continuously describe an event's evolution and its potential impact on a customer's organization. Dataminr Pulse gives indications of high-impact events along with visual context. Dataminr delivers real-time hyperlocal alerts in 195+ countries across 1+ million public data sources. Dataminr lets customers monitor events close to employees' work locations and residences by integrating employee data from HR systems.^[11][12]

Dataminr Pulse for Cyber Risk gives visibility into the full lifecycle of vulnerabilities to support patch prioritization. Dataminr tells customers when exploits that could impact their tech stack are advertised or posted. Dataminr shows which vulnerabilities are widely discussed and when scanners are pointed at vulnerabilities that concern an organization. Journalists in over 1,500 newsrooms around the world use Dataminr for News to discover indications of breaking news. Dataminr for News detects global events by processing billions of public data inputs per day in a wide range of formats. Dataminr delivers real-time alerts through a web-based dashboard, email, mobile app, Slack and TweetDeck.^[5][13]

Dataminr embeds Security by Design, Privacy by Design and Responsible AI throughout its Systems and Software Development Life Cycle (SDLC). Dataminr supports SAML 2.0 for customers to integrate their preferred Single Sign-On solution. Dataminr encrypts customer data at rest using AES-256 and in motion using TLS 1.2 or higher.^[5][12]

About Filigran

Filigran sells the XTM Platform, an eXtended Threat Management suite in which threat intelligence, adversarial exposure validation and agentic AI orchestration work together in one threat-informed defense loop, open source at the core.^[1][4][5]

Filigran describes the XTM Platform as making continuous threat exposure management (CTEM) agentic. The suite is made up of OpenCTI, OpenAEV and XTM One, which work as one continuous loop, from anticipation to response. OpenCTI and OpenAEV are developed in the open with a 7,000+ member community.^[4]

OpenCTI is an open-source platform to organize, analyze and operationalize cyber threat intelligence. OpenCTI offers 400+ one-click integrations and standardizes threat intelligence using a consistent STIX 2.1 data model. It includes case management for incident-related data.^[4][8]

OpenAEV covers adversarial exposure validation: real attack simulation, autonomous pentesting and tabletop exercises. OpenAEV maps breach and attack simulation scenarios to MITRE ATT&CK and ATLAS. It can be deployed with or without an endpoint agent, across cloud, on-prem or multi-tenant setups.^[9]

XTM One is the agentic AI layer that consolidates and orchestrates all assistive and agentic AI capabilities across the XTM platform. Customers can build their own agents and bring their own LLMs. CTEM Assistant is the primary entry point of the XTM Platform, with direct access to both OpenCTI and OpenAEV. OpenCRQ is described as coming soon, as the third open-source module of the XTM Platform, and it runs on a customer's own security data to quantify cyber risk.^[1][10][11]

Filigran also sells services around the suite. Filigran provides fully managed cloud private instances for every product in the XTM suite, with each SaaS instance running in its own infrastructure tenant. SaaS pricing is based only on the resources available for the tenant, not on the number of users or integrations. Standard and premium support carry a guaranteed time frame for requests, and the customer success team is 100% in-house. Filigran Academy offers training paths for OpenCTI and OpenAEV, and a partner network of certified MSSPs, solutions providers and technology alliances deploys and operates Filigran platforms in a customer's region.^{[4][5][7][8][9][11][12][14][15]}

About Intel 471

Intel 471 sells Verity471, a platform that enables security teams to find the exposures attackers are targeting right now, know the actors and campaigns behind them, and hunt those adversaries in their environment.^[3]

Verity471 synthesizes and centralizes intelligence, and puts AI to work helping analysts access and operationalize it faster. Intel 471 says the platform pushes intelligence directly into existing automated systems and AI workflows. The platform connects adversary intelligence across three solution portfolios: Cyber Threat Exposure, Cyber Threat Intelligence, and Cyber Threat Hunting.^[1][3]

Cyber Threat Exposure finds the exposures attackers are already circling across a customer's attack surface, vendors, and brand. Intel 471 says its Cyber Threat Exposure solutions provide a CTI-driven view of an organization's attack surface and its third parties'. Intel 471 identifies exposures such as internet-exposed assets, misconfigurations and critical CVEs and maps them to real-world CTI driven insights. Security teams can prioritize exposures based on real-world threat activity, remediating high-risk exposures in their own attack surface and monitoring those in their third parties.^[3][4][8]

Attack Surface Exposure is aimed at identifying, managing and protecting internet-facing assets hosted on-premises, externally and across multiple clouds. Brand Exposure detects malicious impersonation and rogue threats, including phishing and scam domains, logos, images, mentions and social media account impersonations.^[4][8]

Cyber Threat Intelligence gives visibility into the conversations where attacks are planned. Intel 471 says it goes into the criminal underground and extracts adversary tradecraft at the source. Intel 471 says its global analyst network has spent over a decade operating inside the same closed communities where adversaries plan their next move.^[3][4][7]

Cyber Threat Hunting provides a library of 700+ ready-built hunt packages tied to the actors actively coming after a customer's sector. Intel 471 says teams can hunt threats in their environment in minutes, not months.^[3][4]

Intel 471 also publishes threat research, including a report on the underground insider ecosystem that draws on 85 insider-related leads linked to 80 actor handles collected between August 2025 and August 2026. The legal entity behind the company's services is Intel 471 Inc^{[3][4][5][6][7][8][13][14]}