ThreatConnect Intelligence

ThreatConnect Intelligence refers to the threat intelligence capabilities of the ThreatConnect platform, which help security teams collect, enrich, analyze and act on threat data. ThreatConnect is headquartered in Arlington, Virginia, and was acquired by Dataminr in 2025.

The platform aggregates commercial, open source and internal intelligence feeds into a single repository, normalizes indicators and adversary data, and scores them with ThreatAssess and the Collective Analytics Layer (CAL), which uses anonymized insights from across the ThreatConnect community to reduce false positives. Analysts can map threats to MITRE ATT&CK, track threat actors and campaigns, run AI-assisted enrichment and create finished intelligence reports. Relevant intelligence is then pushed automatically to SIEM, EDR, firewall and SOAR tools so detection and response teams can use it.

Organizations use ThreatConnect Intelligence to centralize threat intelligence operations, prioritize the threats that matter to their business and measure how intelligence improves security outcomes.