Bring your Recorded Future API token to SignalGuard to enrich four Chatter-pillar signals — dark web, Telegram threats, X, and news — with aggregated, scored threat intelligence already trusted by most large SOCs.
What Recorded Future adds to SignalGuard
Recorded Future enriches four of SignalGuard's 50+ signals: dark web, Telegram threats, X, and news. The platform aggregates dark-web, social-media, technical, and news sources, scoring entities and risks in a unified model. For SignalGuard, that turns raw multi-source chatter into a structured threat picture: the platform doesn't just see that a venue keyword is mentioned in a forum, it sees the source's prior credibility, related entities, and risk score.
That structure pays off in two ways. First, it raises confidence on dark-web and Telegram severity escalations, because Recorded Future's analyst pipeline has already triaged source credibility. Second, it lets SignalGuard reduce false positives by weighting chatter against Recorded Future's broader entity context — a hostile post from a high-credibility actor scores differently than identical wording from a noisy account.
Most large enterprise SOCs already have a Recorded Future contract; BYOK lets the security team apply that investment directly to venue-level threat scoring.
How the integration works
Paste your Recorded Future API token into the Recorded Future tile at /integrations. SignalGuard validates it with an alert-search call (accepting both 200 and 403 as proof the token is valid, since scope-limited tokens return 403 on some endpoints). The token is stored AES-256-GCM encrypted at rest.
Common use cases
- Major-venue threat assessment with aggregated dark-web and social intel
- VIP-protection threat monitoring across executive travel windows
- Reusing an existing enterprise SOC contract for venue-level scoring
- Reducing false positives via entity-credibility weighting
- Cross-source confirmation when a single signal flags a venue
- Analyst-grade context for elevated-risk operational decisions
What you need
A Recorded Future enterprise contract — typically $50K-150K/yr. Generate an API token from the Recorded Future portal at api.recordedfuture.com under Account → API Tokens. The token is used in the X-RFToken header.
FAQ
Do I need a Recorded Future subscription? Yes — Recorded Future enrichment is BYOK-only. Without it, SignalGuard's threat signals run on their default open-source aggregations.
Where do I add my key? In your SignalGuard workspace at /integrations. Open the Recorded Future tile and paste your API token.
Is my key secure? Yes. Tokens are AES-256-GCM encrypted at rest, decrypted only at request time in server memory, and never logged or sent to the browser.
Connect Recorded Future
Connect Recorded Future in your SignalGuard workspace → and review the signal docs for how multi-source threat intel feeds Chatter.