ThreatQuotient selected by Sysdig to scale cloud threat detection and response

On the heels of a strong 2022 that resulted in multiple company growth records, ThreatQuotient™ is pleased to announce that the ThreatQ Platform was selected by Sysdig to help improve the Sysdig Threat Research Team’s detection rules and reporting as the volume of threat data and several sources continue to grow. 

Real-time threat detection

As a cloud and container security company with customers in more than 40 countries, Sysdig stops attacks with no wasted time. With Sysdig, teams can detect threats in real-time using machine learning, curated rules, and policies implemented by the Sysdig Threat Research Team.

Sysdig’s deep runtime insight helps companies improve their security posture by focusing on the vulnerabilities, misconfigurations, and compliance gaps that create the greatest risk.

ThreatQ Platform

ThreatQ delivers effective threat intelligence management with support for different feeds

After evaluating multiple security operations platform providers, Sysdig determined that the ThreatQ Platform with the DataLinq Engine met key criteria.

It also delivered additional valuable capabilities, including effective threat intelligence management with support for different feeds, expiration of threat data, prioritisation of indicators, API-based integration, ease of export, and flexibility to adapt to the unique requirements of the cloud.

Use-case-driven approach

“Our use-case-driven approach to the evaluation process pointed us to the ThreatQ Platform to help us achieve our goals and demonstrate value back to the organisation quickly,” said Michael Clark, Director of Threat Research at Sysdig.

“With the ThreatQ Platform, we can scale our threat research capabilities now and in the future. Whether that’s bringing in additional sources of intelligence, adding rules, or the addition of ThreatQ Data Exchange to share data across different teams.”

Benefits

As a result of using the ThreatQ Platform, Sysdig’s threat research team gains the following benefits:

• Additional context-rich detection rules

Threat detection rules can be created and fine-tuned faster with data from an expanded number of sources enriched with more context, resulting in better detections for customers. This is particularly important given the current geopolitical climate and rapidly evolving threat landscape.

• Time saved for the Threat Research Team

The ThreatQ Platform automates tasks including data aggregation, deduplication, and normalisation. Additionally, based on parameters set by Sysdig Threat Research Team, the platform also automates enrichment, scoring, prioritisation, and expiration, which saves time and reduces noise.

• Simplified and enhanced threat intelligence reporting

Visualisations make it easier for the team to analyse and report on what they see and share their intelligence with the broader security community with compelling graphics.

Flexible and extensible architecture

ThreatQ Platform’s extensible architecture stands out for facilitating maximum control, efficiency, and speed"

“Technology vendors and experienced software developers naturally consider build versus buy when exploring solutions for their security operations needs. Time and time again, we see the ThreatQ Platform’s flexible and extensible architecture stand out as an important factor for facilitating maximum control, efficiency, and speed,” said John Czupak, President and CEO, ThreatQuotient.

“I am also proud that the expertise and responsiveness of ThreatQuotient’s team shine through during evaluation periods and beyond as a significant factor for selection. As a business, we have our sights set on new goals for 2023 after a successful 2022, which included the largest deals in company history and a variety of industry award wins that reinforce ThreatQuotient’s position as a market leader in security operations.”

ThreatQuotient

ThreatQuotient performed extremely well in 2022, delivering the largest bookings year in company history, highlighted by 100% growth in the MENA region and customer expansion to a total of 34 countries. ThreatQuotient further delivered on its platform vision to include the ThreatQ TDR Orchestrator module. This resulted in record sales in just two-quarters of general availability.

ThreatQuotient was also recognised for a company culture of excellence as a 2022 Top Place to Work by the Washington Post, as well as for technology innovation as a finalist in the 2022 CRN Tech Innovators programme and Expert Insights’ 100 Innovative Cybersecurity Companies list.