Pack Contributors:
- Ugur Kircicek
Contributions are welcome and appreciated. For more info, visit our Contribution Guide.
ThreatMon
- Details
- Content
- Dependencies
- Version History
This integration pulls data from the ThreatMon API and updates XSOAR incidents. You can also update the status of your incidents, submit takedown requests, and request data removal for Black Market Monitoring findings directly from the XSOAR interface.
Pack Contributors:
- Ugur Kircicek
Contributions are welcome and appreciated. For more info, visit our Contribution Guide.
Integrations
| Name | Description |
|---|---|
| Threatmon (Community Contribution) | Integration with Threatmon for vulnerability threat intelligence. |
Integrations
| Name | Description |
|---|---|
| Threatmon (Community Contribution) | Integration with Threatmon for vulnerability threat intelligence. |
Required Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
All level dependencies (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
1.0.5 - 11786168 (August 9, 2026)
- 45379
- 45375
Download
Integrations
Threatmon
- Added the threatmon_request_data_removal command to submit a Black Market Monitoring data removal request for a specific finding. The command checks whether the company has remaining Black Market Data Removal credits and returns an appropriate error if the quota is exceeded.
- 45379
- 45375
Download
1.0.4 - 11340468 (July 26, 2026)
- 45232
- 45226
Download
Integrations
Threatmon
- Added the threatmon_list_cves command to retrieve a paginated list of all CVEs monitored by ThreatMon, including CVSS v2, v3, v3.1, and v4 scores and severities.
- Added the threatmon_list_subscribed_cves command to retrieve a paginated list of CVEs affecting products the authenticated company is subscribed to.
- Updated the Docker image to: demisto/python3:3.12.13.10404775.
- 45232
- 45226
Download
1.0.3 - 9871964 (June 4, 2026)
- 44494
- 44373
Download
Integrations
Threatmon
- Added Cortex XSIAM marketplace support. The integration now runs on both Cortex XSOAR and Cortex XSIAM without configuration changes.
- Refactored the HTTP client to use BaseClient, enabling proper handling of the Trust any certificate and Use system proxy settings parameters that were previously ignored.
- 44494
- 44373
Download
1.0.2 - 7756396 (March 18, 2026)
- 43573
- 43453
Download
Integrations
Threatmon
- Added support for the threatmon_request_takedown command that submits takedown requests for eligible Threatmon findings such as Phishing Domain, Rogue Mobile App, and Fake Social Media Account detections.
- Added support for the Fetch Interval (minutes) configuration parameter to control how often the integration polls ThreatMon for new incidents. The interval is fixed at up to 100 pages per run to prevent timeouts.
- Updated the Docker image to: demisto/python3:3.12.13.7444307.
- 43573
- 43453
Download
1.0.5 - 11786168 (August 9, 2026)
- 45379
- 45375
Download
Integrations
Threatmon
- Added the threatmon_request_data_removal command to submit a Black Market Monitoring data removal request for a specific finding. The command checks whether the company has remaining Black Market Data Removal credits and returns an appropriate error if the quota is exceeded.
- 45379
- 45375
Download
1.0.4 - 11340468 (July 26, 2026)
- 45232
- 45226
Download
Integrations
Threatmon
- Added the threatmon_list_cves command to retrieve a paginated list of all CVEs monitored by ThreatMon, including CVSS v2, v3, v3.1, and v4 scores and severities.
- Added the threatmon_list_subscribed_cves command to retrieve a paginated list of CVEs affecting products the authenticated company is subscribed to.
- Updated the Docker image to: demisto/python3:3.12.13.10404775.
- 45232
- 45226
Download
1.0.3 - 9871964 (June 4, 2026)
- 44494
- 44373
Download
Integrations
Threatmon
- Added Cortex XSIAM marketplace support. The integration now runs on both Cortex XSOAR and Cortex XSIAM without configuration changes.
- Refactored the HTTP client to use BaseClient, enabling proper handling of the Trust any certificate and Use system proxy settings parameters that were previously ignored.
- 44494
- 44373
Download
1.0.2 - 7756396 (March 18, 2026)
- 43573
- 43453
Download
Integrations
Threatmon
- Added support for the threatmon_request_takedown command that submits takedown requests for eligible Threatmon findings such as Phishing Domain, Rogue Mobile App, and Fake Social Media Account detections.
- Added support for the Fetch Interval (minutes) configuration parameter to control how often the integration polls ThreatMon for new incidents. The interval is fixed at up to 100 pages per run to prevent timeouts.
- Updated the Docker image to: demisto/python3:3.12.13.7444307.
- 43573
- 43453
Download
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Community | |
| Created | August 6, 2025 | |
| Last Release | August 16, 2026 |
Threat Intelligence Management
WORKS WITH THE FOLLOWING INTEGRATIONS:
