Syntak Intel · Features
Everything Syntak Intel does.
Syntak Intel pulls security feeds into one place, looks up the CVEs they mention, and ranks what matters for the systems your team actually runs. Here is everything it does today.
- security feeds preloaded
- 12
- public feeds in the catalog, in 5 starter packs
- 16
- feed refresh in the hosted setup
- 15 min
- CISA KEV catalog refresh
- 12 hr
- longest look-back for the dashboard and reports
- 90 days
Sources and ingestion
Security news, advisories, and threat research, pulled in on a schedule and sorted for you.
-
Feeds ready on day one
Twelve sources are preloaded, including CISA, ICS advisories, MSRC, Project Zero, SANS, BleepingComputer, and Krebs on Security.
-
Feed catalog and starter packs
Choose from sixteen public feeds grouped into five starter packs, or build and share your own packs.
-
Team and personal sources
Admins add shared sources for the whole team, and anyone can add personal sources only they see.
-
Three categories
Articles are sorted into news, advisories, and threat intelligence.
-
Safe fetching
Private and internal addresses are blocked, redirects are limited, and feed size is capped.
-
CVEs and thumbnails picked out
CVE identifiers are extracted from each article, and a thumbnail is found where possible.
-
Sync status for every source
See when each source last synced and any error it hit.
CVE research and enrichment
Look up a vulnerability and get the facts that decide how urgent it is.
-
CVE cards
See the CVSS score and vector, severity, weakness types, references, and published date from the National Vulnerability Database.
-
Known exploited status
See whether a CVE is on CISA's Known Exploited Vulnerabilities list. If the list cannot be loaded, Intel says unknown rather than not listed.
-
Related articles
Find recent feed articles that mention the CVEs you researched.
-
Cached results
Researched CVEs are stored so repeat lookups are instant, and you can research up to 25 at once.
Prioritization and scoring
Ranking you can explain, using fixed rules instead of a black box.
-
Transparent CVE ranking
A CVE's rank starts from its CVSS score, adds points for being on the known exploited list, for critical severity, and for network reachability.
-
Why this rank
Every ranked CVE comes with a plain-language explanation and impact bullets drawn from the vulnerability's description and weakness types.
-
Article relevance score
Articles score higher for keyword matches, system criticality, production environments, advisory or threat-intel sources, and being unread.
Team dashboard
A shared view of what matters to the whole team, based on what you run.
-
Watched systems
Admins list the organization's systems with vendor, product, version, environment, and criticality.
-
Relevant intel feed
See articles from the last 1 to 90 days, 14 by default, that match your systems, ranked by relevance with unread first.
-
CVE attention list
See the CVEs mentioned in relevant articles, with CVSS and known-exploited flags.
-
Team feeds with unread counts
Browse by category, see unread counts, and mark everything read.
-
Threat landscape
See 30 days of volume by category, the most-mentioned recent CVEs, and known-exploited hits.
Personal overlay
Each analyst adds their own sources and systems on top of the team view.
-
Personal systems and sources
Add your own, visible only to you.
-
Team, personal, or all
Switch the dashboard between the team view, your own, and both together.
-
Your own read state
Mark articles read or unread and filter to unread only, without affecting teammates.
-
Light and dark theme
Choose the look that suits you.
Search and reports
Find anything you have collected, and hand a summary to someone else.
-
Global search
Search articles, systems, sources, keywords, and researched CVEs from one box.
-
On-demand report
Generate a digest for the last 1 to 90 days as Markdown or JSON, filtered by category, up to 100 items.
Integrations
Use the same API the app uses.
-
API keys
Admins create and revoke keys with a role, sent in a request header.
-
REST API with interactive docs
Everything in the web app is available through the API, with interactive documentation.
Administration and security
Separate spaces for each company, with roles and an audit log.
-
Company spaces
Each company is isolated, with its own members, sources, systems, and packs.
-
Roles and invites
Platform admin, space admin, and user roles, with invite links and a forced password change on first sign-in.
-
Sign-in options
Local sign-in, or Amazon Cognito when it is configured.
-
Audit log
Admin actions such as changes to sources, keys, packs, spaces, and users are recorded.
-
Hardening
Rate limiting at 60 requests per minute and standard security headers.
Syntak Intel
Start with Syntak Intel.
Turn security feeds, advisories, and CVE research into prioritized team intelligence.