Cyware, a provider of AI-powered threat intelligence management, automation, and security orchestration, recently announced a strategic partnership with Microsoft for product integrations aimed at helping enterprises and public sector organizations operationalize threat intelligence with greater speed, ease, and confidence.
The partnership was established to deliver integrated threat intelligence workflows across Cyware and Microsoft Sentinel, enabling customers to move from threat insights to action more quickly. The Cyware-Microsoft collaboration will enable Microsoft Sentinel to ingest actionable threat intelligence from Cyware, while Cyware can receive intelligence from Microsoft Sentinel to drive faster investigations and response with real-time context sharing and actioning.
“This partnership with Microsoft brings together Cyware’s strength in AI-powered threat intelligence operations and Microsoft’s security technology to help customers make smarter, faster decisions,” said Anuj Goel, CEO and Co-founder, Cyware. “By meeting defenders directly in Microsoft Sentinel, and making Cyware deployable through Microsoft Commercial Marketplace, we are reducing friction from purchase to value while giving security teams enriched, high-fidelity intelligence they can act on immediately.”
Cyware is already a Microsoft partner, with Cyware’s solutions already available in the Microsoft Commercial Marketplace. This move is an expansion of that existing partnership to deliver an end-to-end solution that modernizes security operations, automating threat intelligence ingestion, enrichment, and actioning.
This integration between the two companies enables bi-directional threat intelligence exchange, including support for STIX/TAXII-based threat intelligence sharing to validate indicators at scale for mutual customers.
“We’re focused on empowering every defender with a more connected, intelligence-driven experience,” said Erez Einav, Corporate Vice President, Sentinel and Defender XDR at Microsoft. “This partnership with Cyware extends how threat intelligence is shared, validated, and automated across Microsoft Defender data, speeding triage and investigation.”
Cyware deepens Microsoft connection
Cyware was recently included in the Microsoft Intelligent Security Association (MISA) and participated as one of the inaugural Copilot launch partners.
“Cyware has been integral in threat intel and security operations teams’ journeys to unified threat intelligence management,” said Goel. “Joining the Microsoft Intelligent Security Association enables Cyware to provide extended threat intelligence capabilities for Microsoft Sentinel and Microsoft Defender customers, for example, through advanced threat intel sharing.”
MISA is an ecosystem of software development companies and security services partners that have integrated their solutions with Microsoft Security technology to better defend mutual customers against cyber threats.
“The Microsoft Intelligent Security Association has grown into a vibrant ecosystem comprised of the most reliable and trusted security vendors across the globe,” said Maria Thomson, Director, MISA. “Our members, like Cyware, share Microsoft’s commitment to collaboration within the cybersecurity community to improve our customers’ ability to predict, detect, and respond to security threats faster.”
To improve threat detection capabilities, cybersecurity provider ArmorPoint recently announced an integration with Cyware. Read more about this integration that allows customers to correlate threat intel with real-time data from SIEM tools.





