ThreatCluster

ThreatCluster reads every public security report, clusters them into one deduplicated story per incident, scores each story, extracts the entities involved (threat actors, malware, tools, vendors, CVEs, countries, industries) and tracks ransomware leak sites.

This connector gives your AI that corpus through ten read-only tools: search incident clusters, search everything, newest threats, get a full threat record with its sources and validated indicators, leak-site victims with a tally by group, sector and country, look up an entity, get a vulnerability with KEV, EPSS and exploit status, exploited vulnerabilities in a window, trending entities, and your API budget so your AI can pace itself. Every result carries citation URLs back to the original reporting. More