SentinelTI is an explainable AI threat intelligence platform that automates multi-source IOC aggregation, scores indicators with machine learning and SHAP value explanations, maps threats to MITRE ATT&CK, and streams STIX 2.1 feeds to enterprise firewalls and SIEMs.

How does explainable ML threat scoring work in SentinelTI?

SentinelTI trains an XGBoost model across multi-feed signals including AbuseIPDB reports, GreyNoise classifications, VirusTotal multi-engine flags, and Tor status. It uses SHAP (SHapley Additive exPlanations) to transparently explain why an indicator received its risk score.

Which SIEM and Firewall platforms are supported?

SentinelTI integrates with Splunk, Microsoft Sentinel, IBM QRadar, Elastic SIEM, DNIF Hypercloud, Sumo Logic, Datadog, and exports native STIX 2.1 / TAXII 2.1 feeds for Palo Alto Networks PAN-OS and Fortinet FortiGate.

Is SentinelTI free for security analysts?

Yes, SentinelTI provides a Free tier offering live threat feed aggregation, universal IOC lookup, and machine learning scoring for individual analysts and community SOC teams.

Terms of Service – SentinelTI

These Terms of Service (“Terms”) govern your access to and use of SentinelTI (the “Service”). By creating an account or using the Service, you agree to these Terms. If you are using the Service on behalf of an organization, you represent that you have authority to bind that organization, and “you” refers to that organization.

SentinelTI is operated as a sole proprietorship by Soham Shah (“we”, “us”), based in Mumbai, India. Payments are processed by Paddle.com Market Ltd as Merchant of Record; see our Refund Policy for how billing and refunds are handled.

1. The Service

SentinelTI aggregates public and configured threat intelligence feeds, applies automated enrichment and machine-learning scoring, maps indicators to the MITRE ATT&CK framework, and integrates with third-party SIEM platforms, as described on our site and in-product documentation. Available features depend on your plan (Free, Pro, or MSSP).

2. Accounts

You must be at least 18 years old and provide accurate registration information.
You are responsible for safeguarding your account credentials and for all activity under your account.
If you invite team members or create client workspaces under an MSSP account, you are responsible for their compliance with these Terms.
Notify us promptly of any unauthorized use of your account.

3. Subscriptions and billing

Paid plans (Pro, MSSP) are billed monthly in advance through Paddle.com Market Ltd, our Merchant of Record, and renew automatically until cancelled.
You can cancel at any time from your account settings; cancellation takes effect at the end of the current billing period, and you retain access until then.
Refunds are governed by our Refund Policy, which gives you a full refund within 14 days of any charge. Nothing here reduces a stronger right granted to you by consumer law.
We may change plan pricing or features with notice; continued use after a price change takes effect constitutes acceptance.
Exceeding a plan's storage or usage limits may result in the oldest, lowest-risk data being pruned automatically, as described in our documentation.

4. Acceptable use

You agree not to:

Use the Service to violate any law, or to attack, scan, or gain unauthorized access to systems you do not own or have permission to test.
Submit data you do not have the right to submit, or that infringes a third party's rights.
Attempt to circumvent rate limits, plan restrictions, or access controls, or to access another tenant's data.
Reverse engineer, resell, or white-label the Service itself outside of the client-workspace reporting features we provide for that purpose under the MSSP plan.
Use the Service in a way that could disable, overburden, or impair it for other customers.

5. Threat intelligence is informational, not a guarantee

SentinelTI's ML risk scores, SHAP explanations, TTP/technique overlap signals, and any other automated assessment are decision-support tools, not verdicts. They are generated from third-party and public data sources that are themselves incomplete or occasionally inaccurate, and from a model that can produce false positives and false negatives. You remain solely responsible for your own security decisions, investigations, and actions taken (or not taken) based on output from the Service. We do not warrant that the Service will detect, block, or accurately classify any particular threat.

6. Data ownership

You retain ownership of the data you submit to the Service (indicators, asset ranges, annotations, and configuration). You grant us a license to host, process, and analyze that data solely to provide and improve the Service to you. We own the Service itself — its software, models, design, and documentation.

7. Availability

We aim to keep the Service available and reliable, but we do not guarantee uninterrupted or error-free operation. The Service may be temporarily unavailable for maintenance, third-party infrastructure issues, or factors outside our control. We will make reasonable efforts to communicate significant planned downtime in advance.

8. Termination

You may stop using the Service and cancel your subscription at any time. We may suspend or terminate your access if you materially breach these Terms, including the acceptable use provisions above, or if required to do so by law. Upon termination, your right to use the Service ends; data handling after termination is governed by our Privacy Policy.

9. Disclaimer of warranties

The Service is provided “as is” and “as available,” without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement, except as expressly stated in these Terms.

10. Limitation of liability

To the maximum extent permitted by law, SentinelTI will not be liable for indirect, incidental, special, consequential, or punitive damages, or for any loss of data, revenue, or profits, arising from your use of the Service. Our total liability for any claim relating to the Service will not exceed the amount you paid us in the 12 months preceding the claim.

11. Changes to these Terms

We may update these Terms from time to time. Material changes will be reflected by updating the “Last updated” date above, and where appropriate, by notifying account owners by email. Continued use of the Service after changes take effect constitutes acceptance of the updated Terms.

12. Contact

Questions about these Terms can be sent to sohamshahh@gmail.com.