Location via proxy:   
[Report a bug]   [Manage cookies]                
CTI Butler

One App. Much CTI.

The most important cyber threat intelligence knowledgebases accessible in a single place.

Explore Visually

Traverse each knowledgebase with ease. Understand how objects are connected to uncover additional intelligence otherwise overlooked.

Explore Visually

A Single Source

Stop spending time building data transformation pipelines for all the threat intelligence frameworks that exist. CTI Butler supports them all in a single data format, STIX 2.1.

Native STIX Support

Knowledgebase Management

CTI Butler supports the latest framework versions immediately -- no more making your users wait for the latest releases. You can also target specific framework versions in your app to ensure backward compatibility.

Knowledgebase Management

Integrate Easily

Use our existing product integrations with MISP or OpenCTI, or build your own using the CTI Butler REST API and TAXII API.

Highly Flexible

See how it works

The core CTI Butler API is available on GitHub under an Apache 2.0 license. Run the code yourself and contribute to future improvements of CTI Butler.

CTI Butler Github