Certego Threat Intelligence Modules are a set of intelligence capabilities built on Certego's proprietary platform, Quokka, and delivered through the PanOptikon® security operations platform. The modules collect and analyze threat data from multiple sources to produce actionable intelligence. The offering includes four main components: **IOC Feeds:** Continuously generates Indicators of Compromise (verified malicious IPs and domains) sourced from the Quokka platform. These IOCs are integrated in real-time into client defense systems, automatically updating firewall blocklists. **Dark Web Scanner:** Monitors Dark Web sources for exposure of sensitive data using a keyword-based approach. Clients define keywords to track; when matching data is detected, Certego analyzes it and notifies the client. **Early Warning:** Tracks newly disclosed vulnerabilities by continuously monitoring public sources such as NIST alerts. Notifications are scoped to the specific technologies used by each client, enabling timely remediation before exploitation occurs. **Targeted Cyber Threat Intelligence:** Provides customized intelligence gathering from Dark Web sources including closed forums, underground networks, and private social groups. Collected data is processed into actionable intelligence and delivered via the PanOptikon® platform. Certego contributes its threat intelligence feeds to VirusTotal (since 2019), CrowdSec, and SIE Europe. The company is also a member of The Honeynet Project and participates in FIRST activities.