Searchlight Cyber Expands Threat Intelligence Solution with RST Cloud Integration

New partnership brings continuously updated threat intelligence from thousands of reports directly into Searchlight Threat, eliminating hours of manual research

Searchlight Cyber today announced a strategic partnership with RST Cloud, a provider of AI-driven Cyber Threat Intelligence (CTI) solutions, to integrate the RST Threat Library, RST Threat Feed and RST Report Hub directly into Searchlight Threat (Investigate). The integration gives security teams instant access to structured, continuously updated intelligence on Threat Actor groups, Campaigns, Malware families, Vulnerabilities, Tooling, and IoC’s without ever leaving the platform.

The integration is designed to give analysts faster access to the information they need when investigating emerging threats. Instead of manually searching across open-source reports and fragmented sources, teams will be able to view structured intelligence alongside their investigation results in Searchlight Threat. Having this breadth and depth of intelligence at their fingertips helps security teams prioritize the specific threats targeting their organization and preemptively stop attacks before they happen.

Searchlight Threat enables cybersecurity professionals, managed security service providers (MSSPs), and law enforcement to track threat actors, monitor illicit marketplaces, and investigate cyber-criminal activities.

RST Cloud is a cyber threat intelligence company delivering high-confidence threat data to SecOps teams at MSSPs, security vendors, enterprises, and other organizations. RST Cloud takes an automation-first approach to large-scale data collection and processing, transforming raw threat signals and unstructured data into structured, validated, and actionable intelligence. Its multi-layered product portfolio supports operational, tactical, and strategic use cases—from SOC workflow automation and AI SOC to detection engineering, threat research, and intelligence analysis.

Also Read: CIO Influence Interview with John Elliott, Cybersecurity Author Fellow at Pluralsight

Searchlight Threat users will gain access to continuously updated intelligence, supporting faster investigation, threat hunting, and incident response. The integration includes:

● Threat actor and campaign profiles: Structured data on 1,000+ threat actor groups, covering geolocations, motivations, victimology, and historical campaigns, with direct links to original source reports.

● Technical malware and tooling analysis: Detailed breakdowns of more than 5,000 malware families and hacking tools, including behavioral characteristics and indicators relevant to incident triage.

● CVE and campaign intelligence: Links between specific vulnerabilities and the threat actors and campaigns actively exploiting them in the wild, helping security teams to prioritize remediation based on real-world threat activity.

David Osler, Head of Product at Searchlight Cyber, said: “Security analysts were hired to investigate threats, not spend hours reading reports just to establish who they’re dealing with. By partnering with RST Cloud, we’re giving teams the context they need, exactly when they need it. The result is faster investigations, better decisions under pressure, and more time spent on the work that actually matters.”

Yury Sergeev, Director of RST Cloud, added: “As analysts ourselves, we understand that high-quality threat intelligence is the foundation of effective decision-making – and also one of the most time-consuming things to obtain. That’s why we built RST Threat Feed, RST Report Hub, RST Threat Library: to automate the parsing and normalization of threat reports, reconcile inconsistent naming across CTI sources, and transform fragmented intelligence into structured, analysis-ready datasets. This allows organizations to unlock the full potential of Searchlight Threat, spending less time collecting and cleaning data, and more time investigating threats and making informed security decisions.”

When seconds count, scattered intelligence is a liability. Searchlight Threat’s expanded capabilities help every team that needs answers quickly:

● For CTI analysts and security teams, it eliminates the mid-investigation pivot to open-source reports, forum posts, and scattered intelligence. Analysts can instantly surface the intelligence they need to help them prioritize the actors, campaigns, and specific threats that matter to their organization.

● For security leadership, structured threat profiles mean faster, more confident stakeholder briefings during a live incident, when clarity matters most and guesswork is not an option.

● For law enforcement agencies and criminal investigators, the integration provides the depth of actor profiling needed to quickly establish group origins, known TTPs, and prior campaigns. The intelligence supports both active investigations and longer-term disruption strategies.

● For MSSPs, the efficiency gains compound across every client: the ability to rapidly contextualize new and emerging threats means faster response times, stronger client reporting, and a more scalable CTI capability across their portfolio.

As one CTI Manager told Searchlight Cyber during development: “This will save us hours of time that would otherwise be spent searching online reports to identify a group’s operations and origins.”