Cofense Partners


Linking together security technologies, Cofense provides the capabilities that security analysts or incident responders need to make more effective decisions on the threats facing their company.  In addition, Cofense integrations enable customers to simplify deployment, improve efficiency, reduce costs, and optimize their overall IT security investments.

The Cofense Technology Alliance Program (TAP) cultivates a strong and mutually profitable ecosystem with our technical alliance partners to provide a more comprehensive solution to fight phishing attacks, and best meet our customers’ requirements.  Cofense enables complementary IT solution providers to seamlessly integrate their security capabilities with Cofense products and services.

Anomali delivers earlier detection and identification of adversaries in your organizations network by making it possible to correlate tens of millions of threat indicators against your real time network activity logs and up to a year or more of forensic log data. Anomali’s approach enables detection at every point along the kill chain, making it possible to mitigate threats before material damage to your organization has occurred.

Bay Dynamics leverages businesses’ existing security investments to provide a cyber risk analytics platform that delivers actionable risk insights and out-of-the-box business value. With a rich history in Security Analytics that dates back to 2001, Bay Dynamics is focused on providing automated cyber security and risk solutions for the enterprises.

Carbon Black is the leading provider of next-generation endpoint security. With more than 9 million endpoints under management, Carbon Black has more than 3,000 customers, including 30 of the Fortune 100. These customers use Carbon Black to replace legacy antivirus, lock down critical systems, hunt threats, and protect their endpoints from the most advanced cyberattacks, including non-malware attacks.

Centripetal Networks helps protect networks from advanced threats at the speed and scale of the Internet. With backgrounds in the defense and intelligence sectors as well as leading edge technologists and developers, Centripetal has made it their mission to deliver a complete solution in cyber threat defense.

EclecticIQ helps organizations to turn cyber threat intelligence into business value through products built for cyber security professionals in threat intelligence, threat hunting, SOC, and Incident Response. EclecticIQ Platform is the analyst-centric threat intelligence platform based on STIX/TAXII that meet the full spectrum of intelligence needs.

FireEye has invented a purpose-built, virtual machine-based security platform that provides real-time threat protection to enterprises and governments worldwide against the next generation of cyber attacks. The core of the FireEye platform is a virtual execution engine, complemented by dynamic threat intelligence, to identify and block cyber attacks in real time.

Microfocus is an American multinational information technology enterprise company, founded in November 2015 as part of the now-split Hewlett-Packard company. Microfocus is a business-focused organization with four divisions: Enterprise Group, Services, Software, and Financial Services.

IBM operates one of the world’s broadest security research, development and delivery organizations. The IBM Security portfolio, supported by world-renowned IBM X-Force® research, enables organizations to effectively manage risk and defend against emerging threats.

Lastline’s Deep Content Inspection™ goes beyond the legacy malware analysis used in most firewalls, UTM’s, IPS systems, and antimalware software. Lastline’s open architecture integrates advanced threat defenses and intelligence into existing operational workflows and security systems.

LogRhythm empowers organizations around the globe to rapidly detect, respond to and neutralize damaging cyber threats. The company’s patented platform uniquely unifies next-generation SIEM, log management , network and endpoint monitoring, and advanced security analytics

McAfee is now part of Intel Security which protects consumers and businesses of all sizes from the latest malware and emerging online threats. Our solutions are designed to deliver unsurpassed real-time visibility and analytics, reduce risk, ensure compliance, improve Internet security, and help businesses achieve operational efficiencies.

Mimecast (NASDAQ: MIME) makes email safer for business. Tens of thousands of customers with millions of employees worldwide rely on the company’s next-generation cloud-based security, archiving, and continuity services to protect email and deliver comprehensive email risk management.

Cisco Umbrella (formerly OpenDNS) is a leading provider of DNS-layer network security and Internet threat intelligence, enabling the world to connect to the Internet with confidence on any device, anywhere, anytime. Its predictive intelligence automates protection against emergent threats before they can reach customers.

Palo Alto Networks is the next-generation security company maintaining trust in the digital age by helping tens of thousands of organizations worldwide prevent cyber breaches. Our innovative security platform prevents known and unknown threats, and safely enables applications, users and content, empowering organizations to securely and efficiently move their businesses forward.

Phantom is the first community-powered security automation and orchestration platform. It integrates your existing security technologies, providing a layer of connective tissue between them. You can work smarter, respond faster and strengthen the defenses of your entire security infrastructure by automating repetitive tasks associated with detection, investigation, and response. Learn more at:

Recorded Future provides real-time threat intelligence to help you proactively defend your organization against cyber-attacks. Indexing billions of facts, our patented Web Intelligence Engine continuously analyzes the entire Web, giving you unmatched insight into emerging threats. We help protect four of the top five companies in the world.

RSA® Business-Driven Security™ solutions uniquely link business context with security incidents to help organizations manage risk and protect what matters most. RSA solutions are designed to effectively detect and respond to advanced attacks; manage user identities and access; and reduce business risk, fraud and cybercrime. RSA protects millions of users worldwide and works with more than 90 percent of the Fortune 500.

ServiceNow makes work better across the enterprise. Getting simple stuff completed at work can be easy, and getting complex multi‑step tasks accomplished can be painless. Our applications automate, predict, digitize and optimize business processes and tasks, across IT, Customer Service, Security Operations, Human Resources and more, creating a better experience for your employees and customers.

Splunk Inc. provides the leading platform for Operational Intelligence. Splunk® software searches, monitors, analyzes and visualizes machine-generated big data from websites, applications, servers,networks, sensors and mobile devices. More than 12,000 organizations use Splunk software to deepen business and customer understanding, mitigate cybersecurity risk, improve service performance and reduce costs. View Integration Demo.

Swimlane helps organizations get the most out of existing resources by automating time-intensive, manual processes and operational workflows in real time. An API-first architecture, extensive out-of-the-box integrations and prepackaged templates allow organizations to quickly enable orchestration across their entire security infrastructure.

ThreatConnect unites cybersecurity people, processes and technologies behind a cohesive intelligence-driven defense. Designed for security teams at all maturity levels, ThreatConnect enables organizations to maximize the value of their security technology investments, combat the fragmentation of their security organizations, and enhance their infrastructure with relevant threat intelligence.

ThreatQuotient Inc. (TQI) is dedicated to revolutionizing cyber defense capabilities by building analyst-driven applications and helping organizations manage threat intelligence to defend against sophisticated cyber attacks. We allow analysts to spend more time on high-value processes rather than transferring intelligence across multiple cloud solutions and internal platforms.

Vade Secure is an email security company providing easy-to-deploy defenses against phishing, spear phishing, malware, ransomware, and spam. Protecting more than 400 million of mailboxes in 76 countries, Vade Secure’s solutions are used by major ISPs, OEMs, and enterprises worldwide. Vade Secure has offices in 5 countries (USA, Canada, France, Hong Kong and Japan) and staffs a 24/7 global email security center.

Demisto Enterprise is the first and only comprehensive Security Operations Platform to combine security orchestration, incident management, machine learning from analyst activities, and interactive investigation. Demisto’s orchestration engine automates security product tasks and weaves in the human analyst tasks and workflows. Demisto enables security teams to reduce mean time to resolution (MTTR), create consistent incident management process, and increase analyst productivity.

The MISP threat sharing platform is a free and open source software helping information sharing of threat intelligence including cyber security indicators. A threat intelligence platform for gathering, sharing, storing and correlating Indicators of Compromise of targeted attacks, threat intelligence, financial fraud information, vulnerability information or even counter-terrorism information.

SentinelOne delivers autonomous endpoint protection through a single agent that successfully prevents, detects and responds to attacks across all major vectors. Designed for extreme ease of use, the SentinelOne platform saves customers time by applying AI to automatically eliminate threats in real time for both on-premise and cloud environments and is the only solution to provide full visibility across networks directly from the endpoint.

Cofense works closely with innovative channel resellers and distributors to deliver our human phishing defense solutions to organizations around the world. See our growing list of Partners below or contact us to inquire about a specific company.