DeRISK™ Threat Intelligence Foundation layer

Live OT/ICS threat intelligence, wired into every product

DeRISK™ Threat Intelligence tracks who is attacking industrial systems, what they target, where and how, and grounds DeRISK™ CRQ and DeRISK™ UWA in observed threat activity, in real time.

Talk to sales How it works

Live threat pictureElectrical T&D · EuropeIllustrative

Detected threatsscanning

31+ collectorsDeduplicatedMapped to ATT&CK for ICS

From raw threat data to Gold signals

DeRISK™ Threat Intelligence collects threat data from many sources, cleans it, enriches it and turns it into predictive signals you can act on.

31⁺

live collectorsUpdated continuously

Collect

Vendor reports, advisories, ATT&CK, IOC and EPSS data, and leak sites.

ReportsAdvisoriesLeak sites

Clean

Every item is deduplicated and normalized, so the same campaign is counted once.

DeduplicatedNormalized

Enrich

Each item is checked against the public references.

KEVNVDEPSSATT&CK

Gold signals

Predictive signals, by sector, region and technology.

SectorRegionTechnology

Under every DeRISK^™ product

DeRISK™ Threat Intelligence is the live thread under the platform. It doesn't sit beside the products; it feeds them.

DeRISK™ CRQ

Frequency from real campaigns

Risk-frequency assumptions come from observed campaign activity, not historical base rates.

DeRISK™ UWA

Every submission threat‑validated

Each underwriting assessment is checked against live threat context, which reduces adverse selection.

Included in every plan. A Threat Intelligence baseline runs in every DeRISK™ CRQ and DeRISK™ UWA plan.

Who, what, where and how

Every signal answers the same four questions, and every view can be pivoted by sector, region and technology.

Electric powermost active sector this monthIllustrative

92745836

Electric powerOil & gasManufacturingWater

Weekly campaign activity, last 12 weeks. Group names are illustrative.

Targeting index, 0–100, share of observed campaigns.

LowHigh · share of observed intrusions

DENEXUSTLP:AMBER

DeRISK™ Threat Intelligence · Threat report OT/ICS threat landscape ViewSectorFocusElectric powerPeriodQ3 2026 Most targeted sectors Electric powerOil & gasManufacturingWater Actors and techniques

Get a sample reportPDF · Sector view · updated monthly

3 tracked groups were active against electric power this month. Most intrusions started through remote access and map to 6 MITRE ATT&CK for ICS techniques.

See the threat picture behind your numbers.

DeRISK™ Threat Intelligence runs underneath DeRISK™ CRQ and DeRISK™ UWA. See it at work in a walkthrough with our team.

Talk to sales See DeRISK CRQ