Central capture
Security events and abuse signals are meant to land in one database, with source, time and reason kept together.
One record, not scattered logsCTIAD · Central Threat Intelligence & Abuse Database
Collect, correlate, score and report.
CDPGuard detects and protects. CTIAD is the database behind that work: security events and abuse signals in one place, scored so protection systems and reviews can use them.
Role
A database, not another firewall.
CDPGuard filters and blocks on the server. CTIAD keeps the record: what was seen, how it relates to other signals, and what score that record carries.
Related signals
A single request is weak evidence. CTIAD is built so repeated sources, similar paths and matching abuse types can be read as one case.
Context across eventsA usable rating
Collected material is scored so a protection system or an analyst can tell a noisy probe from a source that keeps coming back.
Assessment, not a raw dumpReports for operators
The point of the database is output: lists, case summaries and material a firewall or an operator can act on.
For protection and reviewWhat sits inside
Four parts of one system.
- PlatformThe architecture: own data, own scoring, own reports. Not a skin on someone else’s feed.
- Threat intelligenceEvents and indicators prepared so they can be compared and reused by protection systems.
- Abuse databaseAbuse signals — scans, floods, protocol abuse — stored as cases rather than one-off lines.
- Blacklist moduleOne module inside CTIAD. It publishes evaluated indicators. It is not the whole product.
The facts
What this site states.
Only the properties of the design. A function is described as live only when this site can point at it.
Own dataCTIAD keeps its own database
ModuleBlacklist is one part, not the product
CDPGuardDetects and protects on the server
CTPFOperated by CertThor PlatForms Ltd.
Principles
How the database is meant to work.
Collect first
A signal that is not stored cannot be correlated later.
Keep the source
Address, time and reason stay on the record.
Score before publish
A raw hit is not the same thing as a published indicator.
Blacklist is a module
Publishing a list is one output. It does not replace the database.
Own basis
External catalogues can be compared. They are not the system.
Say what is live
This public site does not pretend a feed or an integration is running.
CTIAD is operated by CertThor PlatForms Ltd.
Central threat intelligence and abuse data for the CTPF network. Questions go through the contact form.