The Automated Indicator Sharing (AIS) by the Cybersecurity and Infrastructure Security Agency (CISA) has recently released an update to their automated STIX/TAXII CTI exchange infrastructure. This new AIS version reflects updates in AIS's markings system, and adds an additional layer of IOC vetting by the CISA team.

ThreatSTOP's AIS reintegration offers improvements in the confidence level of AIS indicators, and better threat intelligence coverage. The update also allows for the reduction of the number of targets used in our CISA AIS bundles. For the ThreatSTOP AIS bundles users, the following targets have been removed: AISAUYDM, AISANYDM, AISWUYDM, AISGUYDM, AISGNYDM, AISWNYDM, AISAUYIP, AISANYIP, AISWUYIP, AISWNYIP, AISGUYIP, AISGNYIP.

Not a user of ThreatSTOP's CISA AIS protections yet? Keep on reading.

CISA's AIS is a service that facilitates the seamless exchange of machine-readable cyber threat indicators among various public and private-sector organizations, and enables information sharing for real-time protection. The AIS community comprises a diverse range of entities, including private sector organizations, federal agencies, state, local, tribal, and territorial (SLTT) governments, information sharing and analysis centers (ISACs) and information sharing and analysis organizations (ISAOs), as well as foreign government partners and companies. This collaborative network fosters a collective defense approach, ensuring comprehensive protection against evolving cyber threats.

Integrating cutting-edge threat intelligence from the prestigious CISA Automated Indicator Sharing (AIS) initiative, ThreatSTOP equips user firewalls, DNS servers, and other critical network and security components with the most advanced indicators available to the US government. Our CISA AIS target bundles provide unrivaled access to real-time information on attempted adversary compromises. Stay one step ahead of cyberattacks and data breaches with this invaluable intelligence.


To receive access to the AIS protections, reach out to a Sales Engineer:

Talk to an Engineer


Want to see ThreatSTOP instantly eliminate attacks on your network, or how it can effectively grow your MSP services?

Get a Demo

MSP Solutions