Threat intelligence
Threat intelligence that stays current — automatically
A canonical library of 3,000+ threats by industry, sector, sub-sector, and geography. Threats are first-class objects, maintained centrally and linked to your risks. When a threat evolves, every risk connected to it updates — no stale data buried in individual register entries.
SEE NORRSENT IN ACTIONHow it works
Subscribe
Configure which threat domains apply to your organisation — by industry, sector, sub-sector, geography, and operational profile. Norrsent surfaces the relevant ones automatically.
Link
Threats propagate to risks, not the other way around. Connect threats to existing risks, or let Copilot suggest links based on context. The chain stays current as both ends evolve.
Monitor
When a threat's likelihood, impact, or context changes — regulatory shift, geopolitical development, sector incident — every linked risk updates with full lineage. No manual reconciliation.
Key capabilities
3,000+ canonical threats
A curated master library spanning 20+ industrial sectors, 100+ sub-sectors, and 145+ countries — maintained centrally so your team starts with intelligence, not a blank slate.
Auto-linked to your risks
Threats are first-class objects connected to risks at the data-model level. Updates propagate automatically; nothing relies on someone remembering to re-edit a register entry next quarter.
Sector and geography mapping
Each threat is tagged with the industries, sectors, sub-sectors, and jurisdictions where it applies — so your team sees what's relevant to your operations, not a generic feed.
Lineage and provenance
Every threat carries its source, last-update timestamp, and review state. You can answer 'where did this come from and when was it confirmed?' without leaving the register.
Regulatory and geopolitical signals
Continuous integration of regulatory changes, sanctions, sector incidents, and emerging threats — turned into structured threat objects ready to link to your risks.
One library, every level
The same threat library serves enterprise, subsidiary, project, and asset levels. Local teams see local relevance; leadership sees aggregated exposure with no double-counting.
Get started
See Threat Management in action