Skip to main content

Anomali Partner Directory

Explore our network of channel and technology alliance partners below.

Filter by Partner Category
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Threat Intelligence Feeds
Threat Analysis Tools & Enrichments
Partners

GreyNoise Intelligence

GreyNoise's integration with Anomali ThreatStream helps security analysts save time by revealing which events they can ignore. GreyNoise's data is a curation of IPs that saturate security tools with noise, like mass-internet scanners and harmless business services. This unique perspective helps analysts confidently ignore irrelevant or harmless activity, creating more time to uncover and investigate true threats.

Users can also enrich against GreyNoise to reduce observables created by mass-internet scanning and create more time to investigate targeted attacks. This enrichment provides context into IP behavior: intent, tags, first seen, last seen, geo-data, ports, OS and JA3. Advanced features showing timeline and similarity based information is available for users with those subscription features.

‍

Visit Website
Threat Intelligence Feeds
Partners

Group-IB

Group-IB is one of the global leaders in preventing and investigating high-tech crimes and online fraud. Since 2003, the company has been active in the field of computer forensics and information security, protecting the largest international companies against financial losses and reputation risks.
Visit Website
Channel Reseller
Partners

GuidePoint Security

At GuidePoint Security, we are proud to hire and keep the best and brightest in the cybersecurity industry. From emerging threats to regulatory mandates, our cyber engineers, consultants and architects work side-by-side with your organization to provide a complete understanding of your current threat landscape and to implement the best technical and procedural solutions to achieve business goals and objectives.
Visit Website
No items found.
Partners

H-ISAC

H-ISAC is a trusted community of critical infrastructure owners and operators within the Health Care and Public Health sector (HPH). The community is primarily focused on sharing timely, actionable and relevant information with each other including intelligence on threats, incidents and vulnerabilities that can include data such as indicators of compromise, tactics, techniques and procedures (TTPs) of threat actors, advice and best practices, mitigation strategies and other valuable material. Sharing can occur via machine to machine or human to human. H-ISAC also fosters the building of relationships and networking through a number of educational events in order to facilitate trust. Working groups and committees focus on topics and activities of importance to the sector and services such as CYBERFIT® offer enhanced services to leverage the H-ISAC community for the benefit of all.
Visit Website
Threat Analysis Tools & Enrichments
Partners

HYAS

HYAS Insight’s integration with Anomali ThreatStream helps security analysts increase accuracy and speed investigations. Using exclusive data sources and non-traditional mechanisms, HYAS Insight data connects observables to billions of indicators of compromise to understand and counter adversary infrastructure. Users can find an interesting match in ThreatStream and amplify it with HYAS Insight to expand their understanding of the adversary’s infrastructure.
Visit Website
Security System Partners
Partners

Hadoop

Hadoop is an open-source software framework for storing data and running applications on clusters of commodity hardware. It provides massive storage for any kind of data, enormous processing power and the ability to handle virtually limitless concurrent tasks or jobs.
Visit Website
No items found.
Partners

IA-Titan

The Investment Association (IA) of the UK is helping its members in the fight against cybercrime with IA-TITAN, a threat intelligence sharing community powered by Anomali that enables members to centralize a range of data and intelligence on UK-relevant cyber hazards and risks from their asset management industry peers, law enforcement, and government agencies.
Visit Website
Security System Partners
SIEM Integrations
Partners

IBM Qradar

IBM® QRadar® SIEM consolidates log events and network flow data from thousands of devices, endpoints and applications distributed throughout a network. It normalizes and correlates raw data to identify security offenses, and uses an advanced Sense Analytics engine to baseline normal behavior, detect anomalies, uncover advanced threats, and remove false positives. As an option, this software incorporates IBM X-Force® Threat Intelligence which supplies a list of potentially malicious IP addresses including malware hosts, spam sources and other threats. IBM QRadar SIEM can also correlate system vulnerabilities with event and network data, helping to prioritize security incidents.
Visit Website
Security System Partners
SOAR Integrations
Partners

IBM Resilient

IBM Resilient’s mission is to help organizations thrive in the face of any cyberattack or business crisis. The industry’s leading Incident Response Platform (IRP) empowers security teams to analyze, respond to, and mitigate incidents faster, more intelligently, and more efficiently. The Resilient IRP is the industry’s only complete IR orchestration and automation platform, enabling teams to integrate and align people, processes, and technologies into a single incident response hub. With Resilient, security teams can have best-in-class response capabilities. IBM Resilient has more than 200 global customers, including 50 of the Fortune 500, and hundreds of partners globally.
Visit Website
Threat Intelligence Feeds
Partners

IBM X-Force

X-Force Premier Threat Intelligence contains the latest threat information findings across X-Force investigations and research. You get OSINT Advisories, Malware Analysis reports, Threat Group profiles, and Threat Activity indicators.

Visit Website
Threat Analysis Tools & Enrichments
Partners

IPQualityScore

IPQualityScore (IPQS) provides Anomali ThreatStream users with enterprise-grade detection for sophisticated abuse. The IPQS Fraud and Risk Scoring Enrichment provides enterprise grade fraud prevention, risk analysis, and threat detection. Analyze IP addresses, email addresses, URLs, and domains to identify sophisticated bad actors and high risk behavior. IPQS uses a unique data set, gathered by our proprietary honeypot network that captures advanced abuse such as residential botnets, phishing, hijacked domains, and any IOC that's been associated with abusive behavior across our partner reporting network, which analyzes over 10,000 abuse reports per second.

Visit Website
Channel Reseller
Partners

ISSP

Founded in 2008 ISSP - Information Systems Security Partners is a full-cycle professional cybersecurity company. They provide compromise and vulnerability assessment, penetration and security testing, cybersecurity consulting and digital forensics, cyber and data technologies integration and support, managed detection and response services, and threat intelligence.
Visit Website