Supported Integrations
Connect to all major threat intelligence platforms through a single unified API.
Data Normalization at a Glance
Different vendors, different schemas. Unizo normalizes them all into one unified output.
indicatortypemalicious_confidencelabelsentity.nameentity.typerisk.scorerisk.evidenceDetailsvaluetype.namescoreattributesConsistent across all vendors
indicatortypeconfidencetagsfirst_seenlast_seensourceseverityDetailed Field Mapping
CrowdStrike Intel
indicatorindicatortypetypemalicious_confidenceconfidencelabelstagsRecorded Future
entity.nameindicatorentity.typetyperisk.scoreconfidencerisk.evidenceDetailstagsThreatQ
valueindicatortype.nametypescoreconfidenceattributestagsWhat You Can Build
Use Unizo's unified API to power these capabilities and more.
IOC Enrichment
Enrich alerts and events with threat intelligence context automatically.
Feed Aggregation
Aggregate multiple threat feeds into a single normalized stream.
Threat Hunting
Search for indicators across all your security tools.
Intelligence Sharing
Share and consume threat intelligence across platforms.
Unified Data Models
Consistent data structures that work the same way across all threat intelligence platforms.
Indicator
IOCs with type, value, and confidence score
Actor
Threat actors with TTPs and attribution
Campaign
Attack campaigns with timeline and targets
Report
Intelligence reports and analysis