Automated Threat-Actor Profiling is in active development and will be available soon. It's not quite ready for prime time — but here's exactly what we're building, where we are, and how you can get early access.
You're on the early-notify list
We'll email you the moment this feature ships. No spam, ever.
64% complete. We've shipped research, design, and the core profiling engine — now hardening, integrating, and polishing.
Interviewed 30+ SOC teams, mapped MITRE ATT&CK to actor profiles, defined the data schema.
Profile cards, timeline view, relationship graph, and export formats finalized and tested.
Actor clustering, TTP extraction, and confidence scoring are working in staging. Tuning precision now.
Wire into the main TIP, run security review, complete docs and onboarding guides.
Some features will be Launched in Closed beta with early-access partners, then general availability in Q4 2026.
Automatically turn scattered threat-actor intel into living profiles your team can act on.
Cluster IOCs, campaigns, and TTPs into a single living profile per threat actor — updated continuously as new intel arrives.
Every actor is mapped to techniques and sub-techniques out of the box, with heatmaps showing their preferred playbook.
Visualize how actors, campaigns, malware families, and victims connect — and pivot from any node in one click along with latest Industry Insights and updates.
Every attribution comes with a transparent confidence score and source provenance — so you know what to trust.
These related capabilities are production-ready today — and your early access rolls over when this feature launches.
Browse 1,200+ curated actor profiles with TTPs, targets, and indicators — manually curated today, auto-enriched tomorrow.
The full TIP is live now — 200+ feeds, enrichment, scoring, and 60+ detection templates ready to deploy.
See the platform live, tell us your priorities, and get on the early-access list for this feature the moment it ships.
Tell us what you'd do with automated threat-actor profiling. We'll prioritize the scenarios our early-access partners need most.