Threat Intelligence threat intelligenceCTIfeedsOSINT

Feed Selection Matrix

Sixty-two open sources pre-scored on the six criteria that are the same for everyone — you supply the two that are not. Six tabs, 411 formulas, an eight-criterion rubric and a cut line at 18 of 40.

The question "should we take this feed?" answered with a rubric instead of an opinion, applied to 62 real, publicly available sources across twelve categories.

Eight criteria, 1–5 each, 40 maximum, cut threshold at 18. Six of the eight are properties of the source itself and identical for every buyer, so they come pre-scored. The two that depend on you — relevance to your intelligence requirements and fit to your estate — are the ones you supply, and the workbook's requirements worksheets are what let you score them honestly.

The rule that matters most: a source earns direct detection use only at 25+ points and a low false-positive score. Everything else that clears the gate is enrichment and context only. That single rule is what keeps network reputation blocklists — which score well on breadth and badly on precision — out of your alerting, where they generate the noise that gets the whole program ignored.

The criterion people read backwards is called out explicitly: low FP risk is scored so that 5 is good. Score that column the other way round and you invert your entire matrix.

Six tabs — Read Me, the scoring Rubric with anchors at 1/3/5 for every criterion, the 62-source Feed Matrix with auto-totalling and conditional formatting on the cut line, My Estate and requirements tabs that make relevance scoring possible, Summary rollups by band and category, and a quarterly Review Log.

Honest about its own limits. The six universal scores are informed starting estimates, labelled as such in the file, with a verification column and a last-verified date beside every row. Feed quality, licensing and availability all change without notice — the matrix is built to be corrected by your own experience rather than trusted blindly.

Implements the rubric from Section 3.5 of the build workbook.

Also available in 2 bundles

This product is sold on its own and as part of a set. If you need more than this one, the set is cheaper than buying the parts.

3 products saves $78.00

CTI Essentials

The three products that get a program running — the build workbook, the maturity assessment, and the feed matrix. 30% off buying separately.

$143.20

6 products saves $255.00

Threat Intelligence Starter Kit

All six CTI products — assessment, auto-scoring tool, the build workbook, the feed matrix, eighteen analyst runbooks and the policy pack. 39% off buying separately.

$319.20