M ManySignal
MS
RF
Integration

Recorded Future Integration

Real-time threat intelligence enrichment from Recorded Future Fusion.

What this integration does

Recorded Future meets agentic SOC

Recorded Future is a leading threat intelligence platform with comprehensive coverage of dark web, technical indicators, and geopolitical threat context. ManySignal integrates with Recorded Future's Intelligence API to enrich alerts with risk scores, threat actor attribution, and technical IOC context — giving analysts immediate strategic context alongside tactical indicators.

IP, domain, URL, hash, and vulnerability risk score enrichment

Threat actor and campaign attribution from Recorded Future Intelligence

CVE risk score and exploit maturity context

Data collected

  • Risk scores and evidence strings for IOCs
  • Threat actor profile data
  • CVE intelligence and exploit context
  • Recorded Future Playbook Alert findings

Actions supported

  • Submit IOC to Recorded Future for manual review
  • Export enrichment to MISP or OpenCTI
  • Add IOC to organisation blocklist based on RF risk score

Getting started

Set up in minutes

  1. 1

    Generate a Recorded Future API token

  2. 2

    Configure in ManySignal

Recorded Future Integration: frequently asked questions

Which Recorded Future tiers are compatible?

ManySignal requires the Recorded Future Intelligence API, which is included in Recorded Future Fusion Intelligence and above. Basic risk scores are available on Essentials; full threat actor attribution requires Fusion.

See the agentic SOC in action

Watch AI agents work a real alert queue — verdicts, evidence, and confidence scores included. In-house SOC or MDR, your call.