ThreatConnect Announces Enhanced Orchestration Capabilities Designed to Measure and Improve Security Operations Efficiency

ThreatConnect continues to reinforce its platform’s value combining threat intelligence, analytics and orchestration

ARLINGTON, Va.--()--In an effort to continue to enhance and expand its security automation and orchestration (SAO) capabilities and features, ThreatConnect, provider of the industry's only extensible, intelligence-driven security platform, announces new Playbooks enablements to optimize the ability to make faster security decisions, more easily automate processes, and improve reaction and response capacity.

“Our vision is a Platform that transforms the way that security professionals do their jobs,” CEO Adam Vincent said. “I’ve said this before...the only way to augment humans is to act like them. Humans use data to produce knowledge that becomes wisdom. That wisdom is the equivalent of our Intelligence and is what makes ‘sense-making’ possible in our platform. Then, we put that sense-making into action with orchestration, seamlessly from a single platform.”

Measurable Decision Making

The ThreatConnect Platform's Playbooks capability allows a sequence of automated or human tasks, arranged as a process, to be configured as a playbook, executed to incorporate automated analytics or human workflows, and measured to support continuous improvement. Now with the new ThreatConnect Playbooks ROI Calculator, security teams have the ability to actually measure value. Metrics for savings made possible by Playbooks are automatically assessed by tracking how long it takes a human to perform a task or series of tasks and then calculating how much time (or equivalent salary in dollars) is saved through the automation and orchestration. Organizations can quantify the return on investment of their automation and orchestration activities for each playbook created — over a configurable time period.

Vincent said, “ThreatConnect Playbooks and other automation capabilities enable the refinement of data into relevant intelligence, and also leverage that newly created intelligence to inform decisions across the security team. As we strengthen our Playbook capabilities and features, we are helping security operations teams improve processes and thus improve the security of the business.”

Process Improvement

ThreatConnect has also created Playbooks Components to enable security teams to bundle single elements from a process and easily re-use the elements in other playbooks. With Components, users have only to build a process once, and then it becomes available for use in every other Playbook their team builds. Updates made to Components in one playbook will carryover into any other playbook, and users can also convert Playbooks they’ve already created into Components with a cloning option in the menu.

To meet the challenges of building complex playbook processes, analysts can now use the ThreatConnect Playbooks Debugger. With the Playbooks Debugger, advanced playbooks, such as those that integrate with multiple third-party applications, can be optimized and done more simply.

In late Q3, ThreatConnect will offer more effective ways to manage Playbooks with the Playbooks Activity Monitor which will offer real-time monitoring across multiple Playbook Servers. Users will be able to see which Playbooks are running, what ran previously, and which Playbooks are scheduled to run next. With this feature, enterprise security teams and managed service providers will be able to offer easier scaling and quality of service, for their ThreatConnect playbooks.

Since launching its new SAO-enabled products in 2017, ThreatConnect has equipped companies worldwide in developing an intelligence-driven defense strategy into their security operations. The company was most recently recognized in Forrester’s “Now Tech: Security Automation And Orchestration (SAO), Q3 2018” and Gartner’s “Innovation Insight for Security Orchestration, Automation and Response” as a security automation and orchestration vendor.

About ThreatConnect

ThreatConnect Inc.®, the pioneer in threat intelligence platforms, arms organizations with a powerful defense against cyber threats and the confidence to make strategic business decisions. Built on the industry's only extensible security platform, ThreatConnect provides a suite of products designed to meet the threat intelligence aggregation, analysis, automation, and orchestration needs of security teams at any maturity level. More than 1,600 companies and agencies worldwide use the ThreatConnect platform to integrate their security technologies, teams, and processes with relevant threat intelligence resulting in reduced detection and response time for enhanced asset protection. To register for a free ThreatConnect account or learn more, visit:


ThreatConnect, Inc.
Hayley Kropog


ThreatConnect, Inc.
Hayley Kropog