Real time insights from Cassini CTI

Cassini Cyber Threat Intelligence gives you the edge to stay ahead of attacks. Our proactive CTI services deliver early threat detection and insights, strengthen defenses before threats strikes.

Talk to an expert

Uncover security risks

Threat detection with our market-leading Cassini Cyber Threat Intelligence service.

Cassini CTI was built from day one to stop threats in their tracks. It’s proactive by design, meant to prevent incidents, not just clean them up. Think of it as your early warning system, blocking malicious activity.

No items found.

Discover our services

A cohesive and integrated security offering

Our Cassini CTI service is designed to work seemlessly with our Managed Detection and Response and DFIR capabilities to provide a cohesive, fully integrated service

No items found.

Security Operations

Energy Sector

"Excellent customer engagement and a thorough understanding of our diverse requirements. Outstanding testing and communication throughout the testing phase."

Service detail

Proactive threat detection to protect your organisation

Our Cassini CTI service pulls together trusted threat intel from CERT NZ and the NCSC to spot and stop malicious activity. Whether it’s on our network, your devices, or the services you use every day.

Get Rapid EDR Protection, Up and Running in No Time

Fully protected and ready in 10 minutes

Setting up our EDR with Microsoft Defender for Endpoint and CrowdStrike Falcon is quick and easy, your organisation can be protected in just minutes.

Automatically adds IoCs straight into your EDR tenancy
Compatible with Defender for Endpoint and CrowdStrike Falcon
Supports every indicator type

‍

Easily connects to the network hardware you’ve already got in place

Native support for leading firewalls, no complex setup required

Cassini CTI doesn’t require any special hardware or software agents. It’s built to work with the network infrastructure you already have in place, using simple configuration changes. By leveraging standard APIs and native firewall capabilities, we deliver powerful Detection and Disruption across your environment with minimal lift from your operations team.

Compatible with leading firewall vendors like Fortinet, Palo Alto Networks, Cisco, and Check Point
Quick to set up and simple to configure
Set-and-forget configuration eliminates ongoing overhead for your infrastructure team, no manual upkeep required.

‍

Measurable Detection and Disruption you can act on

Cassini dashboards deliver clear, real-time situational awareness

Cassini CTI dashboards offer visibility into detection and disruption metrics across your subscribed intelligence feeds. While not a SIEM replacement, they give stakeholders the critical insights needed to understand potential security events on your network, delivered in near real time.

Instant visibility into malicious activity across your environment
In-depth telemetry available with select integrations
Live, real-time visibility into your environment

‍

Our delivery process

Seamless cloud-native threat detection

Our SaaS platform deploys fast and integrates with ease

Pick the integration points that fit your setup

We’ll help identify the right services in your environment to maximise coverage and protection for your organisation

Your tenancy is fully configured and ready to go

Getting your tenancy live and integrations in place is fast, most setups are complete within a day or two.

Extra protection, built in

Cassini CTI adds powerful threat detection and disruption to your existing security stack, fast and hassle-free.

Benefits

Why choose Cythera for trusted threat detection?

We’re trusted experts in threat detection, first to integrate with CERT NZ’s PDS and NCSC’s MFN. Cassini CTI continues to evolve with the market, delivering new features and integrations to keep you ahead.

Runs independently as a self-contained detection service

The Cassini CTI platform is built to operate seamlessly across diverse technologies in complex, multivendor environments.

Wide-ranging detection and integration capability

Our integrations enable wide coverage and layered defence across nearly any environment.

Proven and reliable security capability

We protect a wide range of public and private sector organisations, including government, finance, critical infrastructure, research, education, and more.

What comes next

Expand your security coverage

Cassini CTI delivers strong value as a standalone service, but it’s even more powerful when paired with our Managed Services or DFIR retainers.

Pair Cassini CTI with MDR for enhanced detection and stronger protection
Pairing Cassini CTI with a DFIR retainer gives you proactive insight into threats. Spotting signs of an incident before it escalates

Talk to an expert

Certification & Accreditation

We help organisations simplify the security certification and accreditation process with expert advice that actually fits your systems, goals, and timelines.

Testimonials

Our customers

Look what our customers have to say

Security Operations

Energy Sector

"Excellent customer engagement and a thorough understanding of our diverse requirements. Outstanding testing and communication throughout the testing phase."

Cyber security news

Latest advisories

Stay ahead of emerging threats with our expert blog posts, research, and industry updates.

Silverstripe - Host Header Injection

Silverstripe CMS is affected by a Host Header Injection flaw, which can be exploited to manipulate password reset workflows, potentially redirecting or compromising user data.

FarCry Core Framework - Multiple Issues

FarCry Core contains multiple vulnerabilities that could let unauthenticated users upload arbitrary files and execute remote code on the hosting server.

Silverstripe – Cross-Site Scripting (XSS) Vulnerability

With local organisation admin credentials, an attacker can exploit the API to create, delete, or revert virtual machine snapshots in other organisations’ Virtual Data Centres (VDCs), breaching isolation boundaries.

Frequently asked questions

From risk assessment to rapid response - we’re with you every step of the way.

What are Cassini's threat intelligence sources?

We work with the GCSB's National Cyber Security Centre to access the Malware Free Networks (MFN) feed and also integrate phishing feed. If your organisation uses a commercial threat feed, we can incorporate that too.

What are the available integration options for Cassini CTI?

We offer a wide range of plug-and-play integrations for leading firewalls, DNS servers, proxies, SIEMs, and EDR tools - including Microsoft Defender for Endpoint, CrowdStrike, and Zscaler. Need something specific? Our team can build custom integrations tailored to your unique environment.

What types of SIEM tools can Cythera help manage?

Cythera's threat intelligence can be directly integrated into Microsoft Sentinel, giving your team real-time threat indicators. Using a different SIEM? Get in touch -we're continually expanding platform support.

Which EDR solutions are supported by Cythera?

We integrate with leading EDR platforms like Microsoft Defender for Endpoint and CrowdStrike Falcon. Our setup process is streamlined, often taking under 10 minutes. If you're using another EDR solution, reach out we can likely support it or add compatibility quickly

Which firewalls does Cythera work with?

We support a wide range of firewalls including Fortigate, Palo Alto, Cisco FMC, and Checkpoint through straightforward configuration. If you're using a different vendor, get in touch - our threat intelligence feed is compatible with many formats, and we can quickly add support for new ones as needed.