Synapse-Horizon

Synapse-Horizon pulls live threat intelligence — CISA KEV, abuse.ch feeds, OTX, PhishTank and security RSS — into one normalised feed for Tier-3 analysts and threat hunters, with a critical-triage board that flags what needs eyes on it right now.

• Live multi-source CTI ingestion with per-source health status
• Critical Triage panel (top 5) with acknowledge / acknowledge-all
• STIX/TAXII + MITRE ATT&CK enriched indicator detail drawer
• Confidence-scored, severity-ranked indicator feed
• Animated radar brandmark and a flashing critical-alert pill

• Server-side key handling — API keys never touch the browser
• Graceful demo fallback for unconfigured sources
• Independent display-refresh and background-sync cadences
• Dockerised two-service deployment (ingestion API + SPA)

• One pane of glass instead of five open intel-feed tabs
• Nothing critical goes unacknowledged thanks to the flashing triage pill
• Self-hosted — no third party sees what your analysts are watching

Horizon is the ecosystem's intelligence radar: the indicators it surfaces inform triage decisions analysts action inside Synapse-iRespond and Synapse IronNode.