SETTINGS
Providers, feeds, enrichment & alerting status
API keys & feed connections
Add feed and enrichment credentials here. Keys are protected with Windows encryption and are never returned to this page. Leave a key blank to keep the saved value. Reputation services run only when you request a lookup; saving a key does not bulk-query your indicators.
Loading API-key settings…
Public feeds need no keys. Get an abuse.ch key. View live sync status. The public CIRCL MISP feed works separately from your private MISP server.
Intelligence connectors
Monitoring & intelligence recordsBulk feeds, knowledge bases and on-demand APIs have different purposes. A saved key is not proof of provider access. Restricted services require confirmation that your account permits the intended organizational use.
Loading connectors…
Confidence and risk policy
Confidence weights source reliability, freshness and independent corroboration. Aggregated repeats add no independent bonus. Vulnerability priority combines CVSS, known-exploited status and EPSS; asset exposure is not assumed.
Qwen / Ollama - Local AI
Start Ollama, run ollama list, and enter the exact installed model name. If needed, download a model with ollama pull qwen3:8b. The server connects to http://127.0.0.1:11434/v1; no API key is needed.
AI assists existing analysis features. Provider reputation scores remain evidence-based. Automatic AI feed enrichment stays off.