Skip to main content
NewThe State of Cybersecurity in East Africa 2026
Seraph Cyber
Seraph CTI

Turn threat signals into security intelligence.

SERAPH CTI connects vulnerabilities, exploitation, threat actors, breach intelligence, suspicious activity and regional threat signals with your organisation's technology, people and security environment — helping teams understand what matters and act faster.

Priority RiskHigh
CVECISA KEVEPSSThreat ActorIOCCredential ExposureReported Phish
Seraph CTI
14,101Vulnerabilities
1,685Known Exploited
176Threat Actors
CVSSEPSSKEV StatusExploit AvailabilityThreat Actor ContextTechnology Match
Your Environment

Financial Services

Microsoft 365FortinetVMware
External assets26
Threat Match

CVE-2021-44228

  • ✓CISA KEV
  • ✓EPSS 97%
  • ✓Technology match
Exposure3 assets affected
SOCSuspicious activity detected
Human RiskFinance risk elevated
PentestValidation recommended
ComplianceRemediation task opened
Recommended Action

Patch affected systems

Security Posture

72 / 100

+18 pts / 90 days2 urgent actions
Live Seraph Intelligence
14,101CVE Catalogue
1,685CISA Known-Exploited Vulnerabilities
176Threat Actors Profiled

Vulnerability, exploited-vulnerability and threat-actor counts reflect the live Seraph CTI catalogue.

The Core Problem

Threat intelligence sits in a feed.Action happens somewhere else.

Vulnerability data, threat actor activity, regional signals and employee-reported threats should drive one connected response — not live in separate systems that never talk to each other.

Every signal — gathered from external sources or reported by your people — runs through the same loop:
  1. Collect
  2. Analyse
  3. Match
  4. Act
How Seraph CTI Works

From threat signals to relevant security action.

Seraph CTI collects threat information from multiple external sources, analyses and connects related activity, matches it against your organisation's digital environment, and helps your security team identify what requires attention.

  1. Collect Threat Intelligence

    Continuously gather intelligence from vulnerability feeds, breach and leak sources, threat communities, malicious infrastructure, security research and other external intelligence channels.

  2. Analyse & Connect

    Identify vulnerabilities, domains, IP addresses, malware, threat actors and campaigns, then connect related intelligence using exploitability, reputation, recency, source reliability and threat context.

  3. Match to Your Environment

    Compare intelligence against your organisation's domains, IP addresses, technologies, brands and monitored assets to identify the threats that are relevant to your environment.

  4. Prioritise & Act

    Surface the threats that require attention through prioritised intelligence, alerts and reporting, helping security teams investigate, monitor, remediate, hunt or escalate.

Act feeds the next Collect — the cycle never stops

The intelligence picture evolves as the threat landscape changes.

What Seraph CTI Does

Six value areas, working as one system.

Threat intelligence, breach and leak monitoring, human risk management and enterprise governance — connected, not siloed.

Threat Intelligence

A living catalogue of vulnerabilities, CISA KEV flags and threat actors mapped to MITRE ATT&CK, filtered to your technology stack.

Breach & Leak Monitoring

Domain monitoring across breach and infostealer corpora — exposed staff become alerts and are auto-enrolled in training.

Phishing Simulations

Realistic, department-scoped campaigns with click, open, attachment and credential-submission tracking, plus per-team resilience scoring.

Targeted Training & LMS

Course assignments driven by simulation outcomes, not a calendar — comprehension quizzes, verifiable certificates, repeat-clicker cohorts.

One-Click Phishing Reporting

Outlook and Gmail add-ins let employees report suspicious messages directly into an analyst Threat Inbox.

Enterprise Readiness

Per-tenant SAML SSO, enforced MFA, org-scoped API keys, hash-chained audit logs, and hard tenant isolation at the query level.

Regional Threat Context

Global intelligence. Local signal.

Understand threats through the context of the markets in which your organisation operates. Global vendors see East Africa as a region. Seraph CTI treats it as the dataset.

KenyaLive coverage
  • Actively exploited vulnerabilities affecting regionally-deployed technology
  • Threat actor and ransomware activity tracked against local incidents
  • Credential phishing and malicious domains targeting financial services
UgandaDemo data
  • Identity and credential-related threat activity
  • Regional phishing indicators
TanzaniaDemo data
  • Observed threat actor campaigns
  • Regional exploitation trends
Enterprise Readiness

Built for enterprise security review.

SAML SSO

Per-tenant single sign-on, enforced at the organisation level.

Multi-Factor Authentication

Enforced MFA for every account, not optional.

Tenant Isolation

Hard tenant isolation at the query level, not just at the UI.

Audit Logging

Hash-chained, exportable audit logs designed to resist tampering.

API Governance

Org-scoped API keys with defined access boundaries.

Data Protection

Standard DPA, privacy notice and terms — no compliance badges claimed without earned certification.

See how Seraph CTI works in your organisation.

Book a demo for a guided walkthrough of Seraph CTI, or talk to our team about your requirements.