Searchlight Cyber adds RST Cloud threat intelligence to Searchlight Threat

Searchlight Cyber has partnered with RST Cloud to embed continuously updated threat intelligence inside Searchlight Threat, giving analysts faster access to actor profiles, malware analysis and vulnerability context. The integration is live now for customers and is aimed at cutting manual research time during investigations and incident response.

Why it matters: - Security teams often lose time piecing together threat context from open-source reports and scattered data. - The integration puts structured intelligence inside Searchlight Threat, which can speed investigations, threat hunting and incident response. - The move also helps MSSPs, law enforcement and security leaders get faster, more consistent answers during live incidents.

What happened: - Searchlight Cyber announced a partnership with RST Cloud on September 1, 2026. - The deal integrates the RST Threat Library, RST Threat Feed and RST Report Hub into Searchlight Threat, also called Investigate. - The integration is available now to all Searchlight Threat customers. - Searchlight Cyber said customers can learn more at the company website.

The details: - Searchlight Threat users now have access to structured, continuously updated intelligence on threat actor groups, campaigns, malware families, vulnerabilities, tooling and indicators of compromise. - The integration includes profiles on more than 1,000 threat actor groups. - The actor profiles include geolocations, motivations, victimology and historical campaigns, with links to original source reports. - The platform adds technical analysis on more than 5,000 malware families and hacking tools. - The malware and tooling data includes behavioral characteristics and indicators useful for incident triage. - The integration links specific vulnerabilities to the threat actors and campaigns actively exploiting them in the wild. - Searchlight Cyber says that visibility can help teams prioritize remediation based on real-world threat activity. - Searchlight Threat is used to track threat actors, monitor illicit marketplaces and investigate cybercriminal activity. - RST Cloud said its products automate parsing and normalization of threat reports, reconcile inconsistent naming across CTI sources and turn fragmented intelligence into structured datasets. - RST Cloud said the goal is to support operational, tactical and strategic use cases across SOC workflow automation, AI SOC, detection engineering, threat research and intelligence analysis.

Between the lines: - The partnership reflects a broader push to collapse the distance between research and response. - Embedding threat intelligence directly into an investigation workflow can reduce context switching, which matters most when analysts are under time pressure. - The integration also raises the value of structured CTI data, especially for organizations that need to brief leadership, coordinate response or scale intelligence across multiple clients.

What's next: - Searchlight Cyber is pushing the integration as a faster path to investigation-ready context for analysts and security teams. - The company is also positioning the update as a benefit for law enforcement, MSSPs and security leadership that need speed and clarity during incidents. - Searchlight Cyber and RST Cloud are directing interested users to request a demo through Searchlight's threat platform site.

The bottom line: - Searchlight Cyber is betting that built-in, continuously refreshed CTI will help customers spend less time collecting data and more time stopping attacks.