Integration with Threatmon for vulnerability threat intelligence.
ThreatMon
- Details
- Content
- Dependencies
- Version History
This integration pulls data from the ThreatMon API and updates XSOAR incidents. You can also update the status of your Incedents in the ThreatMon dashboard from the XSOAR interface with this integration.
Integrations
| Name | Description |
|---|---|
| Threatmon (Community Contribution) |
Integrations
| Name | Description |
|---|---|
| Threatmon (Community Contribution) | Integration with Threatmon for vulnerability threat intelligence. |
Required Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
All level dependencies (2)
| Pack Name | Pack By |
|---|---|
| Aggregated Scripts | By: Cortex XSOAR |
| Base | By: Cortex XSOAR |
1.0.2 - 7756396 (March 18, 2026) Related pull requests:
- 43573
- 43453
Download
Integrations
Threatmon
- Added support for the threatmon_request_takedown command that submits takedown requests for eligible Threatmon findings such as Phishing Domain, Rogue Mobile App, and Fake Social Media Account detections.
- Added support for the Fetch Interval (minutes) configuration parameter to control how often the integration polls ThreatMon for new incidents. The interval is fixed at up to 100 pages per run to prevent timeouts.
- Updated the Docker image to: demisto/python3:3.12.13.7444307.
- 43573
- 43453
Download
1.0.0 - 6597147 (August 6, 2025) Download
This integration pulls data from the ThreatMon API and updates XSOAR incidents. You can also update the status of your Incedents in the ThreatMon dashboard from the XSOAR interface with this integration.
1.0.2 - 7756396 (March 18, 2026) Related pull requests:
- 43573
- 43453
Download
Integrations
Threatmon
- Added support for the threatmon_request_takedown command that submits takedown requests for eligible Threatmon findings such as Phishing Domain, Rogue Mobile App, and Fake Social Media Account detections.
- Added support for the Fetch Interval (minutes) configuration parameter to control how often the integration polls ThreatMon for new incidents. The interval is fixed at up to 100 pages per run to prevent timeouts.
- Updated the Docker image to: demisto/python3:3.12.13.7444307.
- 43573
- 43453
Download
1.0.0 - 6609623 (August 6, 2025) Download
This integration pulls data from the ThreatMon API and updates XSOAR incidents. You can also update the status of your Incedents in the ThreatMon dashboard from the XSOAR interface with this integration.
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Community | |
| Created | August 6, 2025 | |
| Last Release | March 18, 2026 |
Threat Intelligence Management
WORKS WITH THE FOLLOWING INTEGRATIONS:
