ThreatQuotient selected by Sysdig to scale cloud threat detection

Author: Beatrice

On the heels of a strong 2022 that resulted in multiple company growth records, ThreatQuotient has announced that the ThreatQ platform was selected by Sysdig to help improve the Sysdig threat research team’s detection rules and reporting, as the volume of threat data and number of sources continue to grow.

With Sysdig, teams can detect threats in real-time using machine learning, curated rules and policies implemented by the Sysdig threat research team. Sysdig’s deep runtime insight helps companies improve their security posture by focusing on the vulnerabilities, misconfigurations, and compliance gaps that create the greatest risk.

After evaluating multiple security operations platform providers, Sysdig determined that the ThreatQ platform with the DataLinq Engine met key criteria and delivered additional valuable capabilities, including effective threat intelligence management with support for different feeds, expiration of threat data, prioritisation of indicators, API-based integration, ease of export, and flexibility to adapt to the unique requirements of the cloud.

“Our use-case driven approach to the evaluation process clearly pointed us to the ThreatQ Platform to help us achieve our goals and demonstrate value back to the organisation quickly,” says Michael Clark, Director of Threat Research at Sysdig. “With the ThreatQ platform, we can scale our threat research capabilities now and in the future. Whether that’s bringing in additional sources of intelligence, adding rules, or the addition of ThreatQ Data Exchange to share data across different teams.”

As a result of using the ThreatQ platform, Sysdig’s threat research team gains the following benefits:

• Additional context-rich detection rules

Threat detection rules can be created and fine-tuned faster with data from an expanded number of sources enriched with more context, resulting in better detections for customers. This is particularly important given the current geopolitical climate and rapidly evolving threat landscape.

• Time saved for the threat research team

The ThreatQ Platform automates tasks including data aggregation, deduplication, and normalisation. Additionally, based on parameters set by the Sysdig threat research team, the platform also automates enrichment, scoring, prioritisation, and expiration, which saves time and reduces noise.

• Simplified and enhanced threat intelligence reporting

“Technology vendors and experienced software developers naturally consider build versus buy when exploring solutions for their security operations needs. Time and time again, we see the ThreatQ Platform’s flexible and extensible architecture stand out as an important factor for facilitating maximum control, efficiency, and speed,” says John Czupak, President and CEO, ThreatQuotient. “I am also proud that the expertise and responsiveness of ThreatQuotient’s team shines through during evaluation periods and beyond as a significant factor for selection. As a business we have our sights set on new goals for 2023 after a successful 2022, which included the largest deals in company history and a variety of industry award wins that reinforce ThreatQuotient’s position as a market leader in security operations.”