Integration with Threatmon for vulnerability threat intelligence.
ThreatMon
- Details
- Content
- Dependencies
- Version History
This integration pulls data from the ThreatMon API and updates XSOAR incidents. You can also update the status of your Incedents in the ThreatMon dashboard from the XSOAR interface with this integration.
Integrations
| Name | Description |
|---|---|
| Threatmon (Community Contribution) |
Integrations
| Name | Description |
|---|---|
| Threatmon (Community Contribution) | Integration with Threatmon for vulnerability threat intelligence. |
Required Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
All level dependencies (2)
| Pack Name | Pack By |
|---|---|
| Aggregated Scripts | By: Cortex XSOAR |
| Base | By: Cortex XSOAR |
1.0.3 - 9871964 (June 4, 2026)
- 44494
- 44373
Download
Integrations
Threatmon
- Added Cortex XSIAM marketplace support. The integration now runs on both Cortex XSOAR and Cortex XSIAM without configuration changes.
- Refactored the HTTP client to use BaseClient, enabling proper handling of the Trust any certificate and Use system proxy settings parameters that were previously ignored.
- 44494
- 44373
Download
1.0.2 - 7756396 (March 18, 2026)
- 43573
- 43453
Download
Integrations
Threatmon
- Added support for the threatmon_request_takedown command that submits takedown requests for eligible Threatmon findings such as Phishing Domain, Rogue Mobile App, and Fake Social Media Account detections.
- Added support for the Fetch Interval (minutes) configuration parameter to control how often the integration polls ThreatMon for new incidents. The interval is fixed at up to 100 pages per run to prevent timeouts.
- Updated the Docker image to: demisto/python3:3.12.13.7444307.
- 43573
- 43453
Download
1.0.0 - 6597147 (August 6, 2025)
This integration pulls data from the ThreatMon API and updates XSOAR incidents. You can also update the status of your Incedents in the ThreatMon dashboard from the XSOAR interface with this integration.
1.0.3 - 9871964 (June 4, 2026)
- 44494
- 44373
Download
Integrations
Threatmon
- Added Cortex XSIAM marketplace support. The integration now runs on both Cortex XSOAR and Cortex XSIAM without configuration changes.
- Refactored the HTTP client to use BaseClient, enabling proper handling of the Trust any certificate and Use system proxy settings parameters that were previously ignored.
- 44494
- 44373
Download
1.0.2 - 7756396 (March 18, 2026)
- 43573
- 43453
Download
Integrations
Threatmon
- Added support for the threatmon_request_takedown command that submits takedown requests for eligible Threatmon findings such as Phishing Domain, Rogue Mobile App, and Fake Social Media Account detections.
- Added support for the Fetch Interval (minutes) configuration parameter to control how often the integration polls ThreatMon for new incidents. The interval is fixed at up to 100 pages per run to prevent timeouts.
- Updated the Docker image to: demisto/python3:3.12.13.7444307.
- 43573
- 43453
Download
1.0.0 - 6609623 (August 6, 2025)
This integration pulls data from the ThreatMon API and updates XSOAR incidents. You can also update the status of your Incedents in the ThreatMon dashboard from the XSOAR interface with this integration.
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Community | |
| Created | August 6, 2025 | |
| Last Release | June 4, 2026 |
Threat Intelligence Management
WORKS WITH THE FOLLOWING INTEGRATIONS:
