ThreatScore: a cyber threat scoring system

At Cyberprotect, we collect more than 500 millions of network events per day and we value those data by analyzed them with our analysis engines (behavioral analysis, sandboxes, threat feeds, etc.). Today, we let access to our scoring database to support the community to improve the cybersecurity for all. In order to easily integrate this…

At Cyberprotect, we collect more than 500 millions of network events per day and we value those data by analyzed them with our analysis engines (behavioral analysis, sandboxes, threat feeds, etc.).

Today, we let access to our scoring database to support the community to improve the cybersecurity for all. In order to easily integrate this scoring system in your security process a Cortex analyzers will be available soon.

You can access this service here : https://threatscore.cyberprotect.fr

The interface is quite simple, just fill the central input with an IP or a DOMAIN and you will get a threat score.

The score is represented as a percentage, the levels are defined below:

Also, you can access the API: https://threatscore.cyberprotect.fr/api/score/<IP/DOMAIN>

By replacing <IP/DOMAIN> with your artifact you will get a JSON response like this :

Rémi ALLAIN – Cyber Threat Intelligence Analyst – Cyberprotect

React