Automatically sync Cyren IP Reputation threat intelligence into SentinelOne via AWS Lambda. No manual imports, no custom code. Live in under 5 minutes.
The Cyren IP Reputation Threat Intelligence Connector for SentinelOne automates the ingestion of Cyren's industry-leading IP reputation feed directly into your SentinelOne Singularity platform.
Deployed as a serverless AWS Lambda function triggered by Amazon EventBridge, this connector continuously polls the Cyren CCF IP Reputation feed and pushes malicious IP indicators of compromise (IOCs) to SentinelOne's Threat Intelligence API, keeping your security platform current automatically.
How It Works:
Amazon EventBridge triggers the Lambda function every 6 hours
Lambda authenticates with the Cyren CCF API using your JWT token
IP reputation indicators are fetched with full PersistentToken pagination
Each IOC is pushed to SentinelOne's /web/api/v2.1/threat-intelligence/iocs endpoint
All operations are logged to Amazon CloudWatch
What You Get:
Fully automated IP IOC sync from Cyren to SentinelOne every 6 hours
Persistent pagination via DynamoDB - picks up where it left off each run
AWS Secrets Manager - credentials never in plaintext
CloudFormation one-click deployment - live in under 5 minutes
Full CloudWatch audit logging - 100% serverless
About Data443: Data443 Risk Mitigation, Inc. is a leading provider of data security and threat intelligence solutions.
Highlights
Automated sync of Cyren IP Reputation IOCs into SentinelOne every 6 hours - zero manual effort required
Serverless AWS Lambda + CloudFormation deployment - fully operational in under 5 minutes
Secure credential storage via AWS Secrets Manager with full CloudWatch audit logging on every sync
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
This listing has one pricing dimension: an annual subscription license for the threat intelligence connector, billed per user. You pay upfront for a 12-month contract term. Pricing scales with the number of users you license. There are no separate tiers, instance sizes, or usage-based add-ons to choose from. The connector feeds real-time threat data on malicious IPs, URLs, and domains into your endpoint protection for automated blocking. To adjust coverage, you change the licensed user quantity.
Top-of-mind questions for buyers
What counts as one user for billing under the connector license?
Each user is a licensed seat on the annual connector subscription. You license one seat per person who uses the connector. Your bill scales with the number of user seats you buy. To change coverage, you add or remove licensed users.
What threat data does the connector push, and does it replace my existing endpoint threat intelligence?
The connector pushes malicious IP addresses, phishing URLs, and malware domains to your endpoint protection for automated blocking. It supplements your existing endpoint threat intelligence rather than replacing it, adding a layer of real-time threat data your current feeds may not cover.
Does the annual price cover feed updates and maintenance, or are those billed separately?
The annual subscription covers the connector. Feeds update automatically and indicators push automatically, with no separate maintenance work required from you. There are no usage-based add-ons or extra tiers to buy. Your only pricing variable is the number of licensed users.
data443.com
Helpful?
Vendor refund policy
All sales are final. No refunds are provided for annual contracts after the 48-hour cancellation window. If you cancel within 48 hours of purchase, AWS automatically issues a full refund. For billing issues or disputes, contact support@data443.com and we will review your case within 5 business days. Refunds are at the sole discretion of Data443 Risk Mitigation, Inc.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Email: support@data443.com | URL: https://data443.com/support/ | Response time: within 24 business hours. Data443 provides full deployment support, credential troubleshooting, and connector configuration assistance.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Automatically sync Cyren Malware URL threat intelligence into SentinelOne via AWS Lambda. No manual imports, no custom code. Deploys in under 5 minutes.
Automatically sync Cyren IP Reputation threat intelligence into CrowdStrike Falcon as custom IOCs via AWS Lambda. Real-time threat detection without manual imports.
Automatically sync Cyren Malware URL threat intelligence into CrowdStrike Falcon as custom IOCs via AWS Lambda. Serverless, secure, deploys in under 5 minutes.
Automatically ingest Cyren IP Reputation threat intelligence into AWS Security Hub as findings via AWS Lambda. Unified security visibility without manual imports.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.