Cybersecurity company Cyware Labs Inc. today announced a new strategic partnership with Microsoft Corp. to help global enterprises and public sector organizations operationalize threat intelligence with greater speed, ease and confidence.

The partnership between the two companies delivers an integrated threat intelligence workflow across Cyware and Microsoft Sentinel solutions, giving customers a faster path from threat insights to action.

The integration between Microsoft Sentinel and Cyware Intel Exchange enables bi-directional threat intelligence exchange. That includes support for Structured Threat Information eXpression/Trusted Automated eXchange of Indicator Information-based threat intelligence sharing and sightings to validate indicators at scale for mutual customers.

The collaboration seeks to address the issue whereby security teams struggle to put threat intelligence into operation at large scale. They encounter siloed data, inconsistent context and validation and manual handoffs between tools. With Cyware and Microsoft teaming up, Microsoft Sentinel can ingest actionable threat intelligence from Cyware, while Cyware can receive intelligence and sightings from Microsoft Sentinel to drive faster investigations and response with real-time context sharing and actioning.

“We’re focused on empowering every defender with a more connected, intelligence-driven experience,” said Erez Einav, corporate vice president, Sentinel and Defender XDR at Microsoft. “This partnership with Cyware extends how threat intelligence is shared, validated and automated across Microsoft Sentinel solutions, helping customers streamline workflows, strengthen detection quality and accelerate response.”

In addition to Microsoft Sentinel integration, Cyware Intel Exchange also now integrates with Microsoft Defender. That allows Defender threat intelligence feeds to flow into Cyware for enrichment and automated indicator searches against Defender data, speeding triage and investigation.

The announcement builds on Cyware’s recent inclusion in the Microsoft Intelligent Security Association and continued momentum with Microsoft Copilot, where Cyware participated as one of the inaugural Copilot launch partners.

The collaboration strengthens ongoing integrations between Cyware Intel Exchange, Microsoft Sentinel and Microsoft Defender for Endpoint and supports Azure-hosted deployment options for customers standardizing on Microsoft.

“By meeting defenders directly in Microsoft Sentinel solutions and making Cyware deployable through Azure IP Co-Sell, we are reducing friction from purchase to value while giving security teams enriched, high-fidelity intelligence they can act on immediately,” said Cyware co-founder and Chief Executive Anuj Goel.

Cyware is a venture capital-backed startup that has raised $73 million in funding, including a round of $30 million in June 2023. Investors in the company include Ten Eleven Ventures, Advent International Corp., Zscaler Inc., Emerald Development Managers, Mercato Partners Management and Great Road Holdings.

Photo: Cyware