March 8, 2016

Anomali Joins Facebook ThreatExchange Community

Anomali Customers to Have Access to Facebook’s Threat-Sharing Community

Redwood City, Calif. – March 8, 2016 — Anomali, the provider of the market-leading ThreatStream threat intelligence and Harmony Breach Analytics platforms, today announced it has joined Facebook’s ThreatExchange, a community of leading organizations dedicated to sharing threat data. Anomali is now hosting a trusted community for the ThreatExchange community as a part of Anomali’s ThreatStream 6.0 Threat Intelligence Platform.

In joining Facebook’s ThreatExchange, Anomali is now part of a community comprised of more than 100 top companies, including Facebook, Dropbox, Pinterest, PayPal and Microsoft. As a way to give back to the Facebook ThreatExchange Community, Anomali will be publishing indicators of compromise collected by its extensive Modern Honey Net to Facebook ThreatExchange.

Starting today, Anomali customers may choose to join Anomali’s vetted Facebook ThreatExchange community and, optionally, integrate that intelligence into Anomali ThreatStream 6.0 and into their security and information management system (SIEM) if they have an integration enabled. When combined with Anomali’s curated threat intelligence information, Facebook’s ThreatExchange data further empowers security teams to improve detection capabilities and dramatically reduce incident false-positives and response times.

“Getting access to Facebook’s ThreatExchange grows and extends our knowledge of emerging threats,” said Hugh Njemanze, CEO, Anomali. “The Facebook ThreatExchange continues the industry movement toward information sharing, unified defense and unified response. Through sharing intelligence and other cyber-defense knowledge, especially through automated means, our community as a whole is much stronger and better able to protect vital information.”

ThreatStream 6.0’s seamless integration of the data from the ThreatExchange enables and supports the “Traffic Light Protocol White” (TLP White) for maintaining privacy controls. By extension, this functionality is supported in the Anomali ThreatStream 6.0 platform. TLP White threat indicators include domain names, IPs and hashes.
Anomali customers interested in gaining access to this additional threat intelligence are encouraged to apply for the Facebook ThreatExchange program. For more information on how to apply, click here.

About Anomali
Anomali delivers earlier detection and identification of adversaries in your organizations network by making it possible to correlate tens of millions of threat indicators against your real time network activity logs and up to a year or more of forensic log data. Anomali’s approach enables detection at every point along the kill chain, making it possible to mitigate threats before material damage to your organization has occurred. Headquartered in Redwood City, Calif., the company is privately held and has received venture capital backing from General Catalyst Partners, Google Ventures, Institutional Venture Partners, and Paladin Capital Group, as well as individual investors. To learn more, visit and follow us on Twitter @anomalidetect.

Media Contact:
Travis Anderson