Stellar Cyber integrates ESET threat intelligence into SecOps

Stellar Cyber has announced a technology partnership with ESET that embeds ESET Threat Intelligence into the Stellar Cyber Open Threat Intelligence Platform. The integration is designed to operationalise threat intelligence at the point of data ingestion, rather than appending it to alerts after the fact, which the companies say improves detection fidelity and reduces analyst workload for joint customers.

The partnership covers organisations across network, endpoint, cloud, identity, SaaS and security infrastructure environments. Customers who already license ESET Threat Intelligence can configure their credentials directly within Stellar Cyber's platform, allowing indicators to flow continuously without additional infrastructure.

How the integration works

ESET's threat research teams analyse more than 750,000 suspicious samples and 2.5 billion URLs each day, producing continuously updated indicators of compromise including malicious IP addresses, domains, URLs and file hashes. Under the new arrangement, incoming telemetry in Stellar Cyber's platform is evaluated against these indicators before AI analytics, correlation and automated response steps begin.

Andrew Homer, Senior Vice President of Strategic Alliances at Stellar Cyber, said the approach allows intelligence to "become part of the detection process itself, allowing organisations to detect threats earlier, investigate faster, and respond with greater confidence." Ryan Grant, Country Manager for the US and Canada at ESET North America, added that the integration helps security teams "reduce operational complexity while improving the speed, accuracy, and confidence of threat detection and response."

The partnership also targets managed security service providers. Stellar Cyber claims that roughly one-third of the world's top 250 MSSPs use its platform, and the companies say the integration gives those partners a mechanism to offer premium threat-intelligence tiers and higher-fidelity detection without deploying a separate standalone product.

Market context

The threat intelligence market has grown increasingly crowded as security vendors race to differentiate their SecOps and SIEM platforms. Hyperscalers including Microsoft (Sentinel), Google (Chronicle) and AWS (Security Lake) have each deepened native intelligence feeds, while specialist vendors such as Recorded Future, Mandiant and Anomali compete on the breadth and freshness of their indicator data. Against this backdrop, platform vendors like Stellar Cyber are seeking to absorb best-of-breed intelligence through partnerships rather than building proprietary global threat-research capacity, which requires significant ongoing investment.

For MSSPs in particular, the proposition is commercially straightforward: differentiated intelligence-led tiers can support higher-margin service contracts without proportionally higher operating costs, provided the underlying data quality is sufficient.

The EU AI Act's provisions for high-risk AI systems used in security-critical applications are beginning to phase in, and ESET's European Union headquarters and GDPR compliance posture may become a selling point for customers with data-residency constraints, particularly in regulated industries. Stellar Cyber has not disclosed which specific data-processing regions the integration covers, a detail enterprise procurement teams are likely to press on.

Both companies position the partnership as an extension of an existing relationship rather than a new commercial arrangement, though neither disclosed the financial terms or revenue-share structure of the integration.