We're excited to announce Intelligence Center 3.9, a release focused on giving you more flexibility in how you work with AI, and keeping your threat intelligence aligned with the evolving industry standards.
More choice for your AI-powered workflows
You can now connect Intelligence Center to Azure, Anthropic's Claude models, and Mistral, joining our existing support for OpenAI, Perplexity, Ollama, Amazon Bedrock, and other OpenAI-compatible LLMs.
This means you can choose the provider that best fits your infrastructure, compliance requirements, and performance goals, and select the best model for each AI-powered capability in the platform, such as search, summarization, IR matching, and more.
Intelligence Center connects seamlessly to LLMs wherever they live: hosted by you (on-prem, air-gapped, or cloud), in our secure cloud, or via third-party SaaS providers. With this release, organizations have even more freedom to choose, swap, or combine LLMs to avoid vendor lock-in and build the AI environment that works for them.
Stay aligned with MITRE ATT&CK v19.1
Intelligence Center now supports MITRE ATT&CK v19.1, helping keep your threat mappings aligned with the evolving ATT&CK framework. The v19 release introduced some of the most significant structural changes to ATT&CK in recent releases. For analysts, these changes provide more precise ways to map, investigate, and detect adversary activity across different environments:
- The Enterprise Defense Evasion tactic has been split into two new tactics: Stealth and Defense Impairment. Most existing Defense Evasion techniques keep their technique IDs and move under one of the two new tactics. A smaller set, centered on the former Impair Defenses techniques, has been revoked and reissued under new technique IDs.
- ICS ATT&CK gains new sub-techniques, giving analysts a more granular way to describe attacker behavior in industrial control systems.
- Mobile ATT&CK introduces Detection Strategies, providing a new way to organize approaches for detecting adversary techniques, initially covering areas including Initial Access and Execution.
Also in 3.9: Quality-of-life improvements
Alongside these two headline updates, 3.9 also includes a handful of improvements based on analyst feedback. They're designed to remove friction from everyday workflows: spotting report attachments faster, knowing at a glance which vendor integrations are free or paid, and setting one date and time standard for new users, with the option to override it individually if needed.
Get started
The best way to understand what 3.9 means for your program is to see it against your own use cases. Book a demo and let us show you.
