Security vendors, governments, and defenders all name threat actors differently, and today's alias lists aren’t helping us get past the hard parts — partial overlaps, renames, splits, disputed attribution, and shared tooling mistaken for shared identity.

We're building something better: a way to model threat actor names, histories, and relationships so you can identify, understand, and act more effectively against persistent and new adversaries.