Question 1

What is SentinelTI?

Accepted Answer

SentinelTI is an explainable AI threat intelligence platform that automates multi-source IOC aggregation, scores indicators with machine learning and SHAP value explanations, maps threats to MITRE ATT&CK, and streams STIX 2.1 feeds to enterprise firewalls and SIEMs.

Question 2

How does explainable ML threat scoring work in SentinelTI?

Accepted Answer

SentinelTI trains an XGBoost model across multi-feed signals including AbuseIPDB reports, GreyNoise classifications, VirusTotal multi-engine flags, and Tor status. It uses SHAP (SHapley Additive exPlanations) to transparently explain why an indicator received its risk score.

Question 3

Which SIEM and Firewall platforms are supported?

Accepted Answer

SentinelTI integrates with Splunk, Microsoft Sentinel, IBM QRadar, Elastic SIEM, DNIF Hypercloud, Sumo Logic, Datadog, and exports native STIX 2.1 / TAXII 2.1 feeds for Palo Alto Networks PAN-OS and Fortinet FortiGate.

Question 4

Is SentinelTI free for security analysts?

Accepted Answer

Yes, SentinelTI provides a Free tier offering live threat feed aggregation, universal IOC lookup, and machine learning scoring for individual analysts and community SOC teams.

SentinelTI Support