Integration
Populate your OpenCTI graph with linked entities, not loose indicators
Every indicator arrives linked to the malware and campaign it belongs to, with stable STIX IDs so it merges into your existing entities instead of piling up duplicates.
Relationships arrive with the data
PrecisionSec intelligence arrives in OpenCTI as STIX 2.1 objects with the relationships already built: each indicator tied to the malware it detects and the campaign it belongs to, with phishing and C2 observables linked into the same clusters.
Your analysts open an entity and see its connections straight away, ready to pivot across the related malware, campaigns and indicators without rebuilding the links by hand.
Native OpenCTI streaming over TAXII
Connect PrecisionSec as a TAXII2 collection or an OpenCTI live stream, and new STIX 2.1 objects flow in continuously as we publish them. No batch imports, no scheduled jobs to babysit.
Because objects carry stable STIX IDs, each update merges into the entities you already have, keeping relationships intact instead of spawning duplicates on every refresh.
Tune what you ingest, at any volume
Pull the full stream or filter it down by malware family and confidence, so your graph stays focused on what your team acts on rather than everything we publish.
As your deployment grows, the stream keeps pace: new objects arrive with their relationships intact, without you re-tuning the pipeline.
What you get with the OpenCTI integration
Relationships, not just indicators
Each indicator ships linked to the malware and campaign it belongs to, so your graph fills with connected entities instead of orphaned observables.
Merges, doesn't duplicate
Stable STIX IDs mean every update resolves against your existing entities, keeping relationships intact across refreshes.
Setup help from our team
We work with you to connect the TAXII2 collection or live stream, set your ingestion filters and confirm objects resolve cleanly in your graph.
The same curated, connected intelligence is available over STIX/TAXII, so it flows into OpenCTI and any other TAXII-compatible tool without losing its relationships.
Get started
Start a OpenCTI evaluation
Tell us about your OpenCTI deployment and ingestion requirements. We'll help you evaluate PrecisionSec intelligence delivered as continuously updated STIX 2.1 bundles over TAXII2 or OpenCTI Live Streams.