G2

Verified User in Telecommunications

Mid-Market (51-1000 emp.)

10/12/2026

"Threat Intelligence for More Efficient SIEM Monitoring"

5/5

What do you like best about Cyber Threat Intelligence Feed?

What I find most useful about CTIFeed is having up-to-date IoCs that we can actually use in our daily monitoring. For me, the biggest benefit is spending less time on routine checks and more time on incidents that need a closer look. I use the feed with our SIEM to correlate known malicious IPs and domains with network traffic. This helps spot potentially malicious activity earlier and gives more context when investigating alerts. Instead of spending time manually checking every suspicious connection, we can focus on the ones that are actually worth investigating. Review collected by and hosted on G2.com.

What do you dislike about Cyber Threat Intelligence Feed?

The overall experience has been very positive. I haven't encountered any significant issues with the solution Review collected by and hosted on G2.com.

What problems is Cyber Threat Intelligence Feed solving and how is that benefiting you?

Previously, I had to spend a lot of time manually collecting and checking suspicious IP addresses and domains from different sources. With CTI Feed, I can automatically retrieve updated IoCs through the REST API and correlate them with events in my SIEM. This saves me time on routine checks, helps me identify phishing-related activity faster, and makes it easier to prioritize alerts based on risk scores. Review collected by and hosted on G2.com.