Real-Time Indicator Feeds

The real-time cyber threat intelligence (CTI) Indicator Sharing Program from the Center for Internet Security (CIS) provides easy-to-implement indicator feeds available at no cost to U.S. State, Local, Tribal, and Territorial (SLTT) entities and election offices. Thanks to industry-standard formatting, the feeds are easy to ingest into most modern security and analysis tools and are integrated into other CIS service offerings. A key component of our vision for CTI, this program helps automate defensive actions, correlate events, conduct analysis, and make better, faster, more proactive defensive decisions.

The best threat intelligence doesn’t just identify potential threats. It helps predict and mitigate them. The CTI team combines specialized expertise in intelligence tradecraft and technical analysis with one of the largest data streams in the country to provide high value, actionable intelligence for our members. We help our members shift to predicting the next threat before it happens instead of waiting to identify when they’ve already become a victim.