Syntak Intel · Features

Everything Syntak Intel does.

Syntak Intel pulls security feeds into one place, looks up the CVEs they mention, and ranks what matters for the systems your team actually runs. Here is everything it does today.

security feeds preloaded
12
public feeds in the catalog, in 5 starter packs
16
feed refresh in the hosted setup
15 min
CISA KEV catalog refresh
12 hr
longest look-back for the dashboard and reports
90 days
01

Sources and ingestion

Security news, advisories, and threat research, pulled in on a schedule and sorted for you.

  • Feeds ready on day one

    Twelve sources are preloaded, including CISA, ICS advisories, MSRC, Project Zero, SANS, BleepingComputer, and Krebs on Security.

  • Feed catalog and starter packs

    Choose from sixteen public feeds grouped into five starter packs, or build and share your own packs.

  • Team and personal sources

    Admins add shared sources for the whole team, and anyone can add personal sources only they see.

  • Three categories

    Articles are sorted into news, advisories, and threat intelligence.

  • Safe fetching

    Private and internal addresses are blocked, redirects are limited, and feed size is capped.

  • CVEs and thumbnails picked out

    CVE identifiers are extracted from each article, and a thumbnail is found where possible.

  • Sync status for every source

    See when each source last synced and any error it hit.

02

CVE research and enrichment

Look up a vulnerability and get the facts that decide how urgent it is.

  • CVE cards

    See the CVSS score and vector, severity, weakness types, references, and published date from the National Vulnerability Database.

  • Known exploited status

    See whether a CVE is on CISA's Known Exploited Vulnerabilities list. If the list cannot be loaded, Intel says unknown rather than not listed.

  • Related articles

    Find recent feed articles that mention the CVEs you researched.

  • Cached results

    Researched CVEs are stored so repeat lookups are instant, and you can research up to 25 at once.

03

Prioritization and scoring

Ranking you can explain, using fixed rules instead of a black box.

  • Transparent CVE ranking

    A CVE's rank starts from its CVSS score, adds points for being on the known exploited list, for critical severity, and for network reachability.

  • Why this rank

    Every ranked CVE comes with a plain-language explanation and impact bullets drawn from the vulnerability's description and weakness types.

  • Article relevance score

    Articles score higher for keyword matches, system criticality, production environments, advisory or threat-intel sources, and being unread.

04

Team dashboard

A shared view of what matters to the whole team, based on what you run.

  • Watched systems

    Admins list the organization's systems with vendor, product, version, environment, and criticality.

  • Relevant intel feed

    See articles from the last 1 to 90 days, 14 by default, that match your systems, ranked by relevance with unread first.

  • CVE attention list

    See the CVEs mentioned in relevant articles, with CVSS and known-exploited flags.

  • Team feeds with unread counts

    Browse by category, see unread counts, and mark everything read.

  • Threat landscape

    See 30 days of volume by category, the most-mentioned recent CVEs, and known-exploited hits.

05

Personal overlay

Each analyst adds their own sources and systems on top of the team view.

  • Personal systems and sources

    Add your own, visible only to you.

  • Team, personal, or all

    Switch the dashboard between the team view, your own, and both together.

  • Your own read state

    Mark articles read or unread and filter to unread only, without affecting teammates.

  • Light and dark theme

    Choose the look that suits you.

07

Integrations

Use the same API the app uses.

  • API keys

    Admins create and revoke keys with a role, sent in a request header.

  • REST API with interactive docs

    Everything in the web app is available through the API, with interactive documentation.

08

Administration and security

Separate spaces for each company, with roles and an audit log.

  • Company spaces

    Each company is isolated, with its own members, sources, systems, and packs.

  • Roles and invites

    Platform admin, space admin, and user roles, with invite links and a forced password change on first sign-in.

  • Sign-in options

    Local sign-in, or Amazon Cognito when it is configured.

  • Audit log

    Admin actions such as changes to sources, keys, packs, spaces, and users are recorded.

  • Hardening

    Rate limiting at 60 requests per minute and standard security headers.

Syntak Intel

Start with Syntak Intel.

Turn security feeds, advisories, and CVE research into prioritized team intelligence.