Question 1

What is Defenders Castle AI?

Accepted Answer

Defenders Castle AI is an AI-powered threat intelligence platform built for Saudi Arabia and the GCC region. It aggregates real-time IOC feeds, monitors your external attack surface, scans the dark web for credential leaks, and provides AI-powered analysis so security teams can detect and respond to threats faster.

Question 2

Which SIEM and EDR products does Defenders Castle AI integrate with?

Accepted Answer

Defenders Castle AI integrates with major SIEM platforms (Splunk, Microsoft Sentinel, IBM QRadar, Elastic, Wazuh), leading EDR products (CrowdStrike, SentinelOne, Microsoft Defender, Carbon Black), and SOAR tools through STIX/TAXII 2.1, REST APIs, and Sigma rule export.

Question 3

Does Defenders Castle AI support Arabic?

Accepted Answer

Yes. The full interface is bilingual (Arabic and English) with right-to-left support. Threat reports, IOC enrichment, and the AI analyst respond in either language. The platform is designed specifically for SOC teams in the KSA and the wider GCC region.

Question 4

How does Defenders Castle AI protect customer data?

Accepted Answer

All data is encrypted in transit (TLS 1.2/1.3) and at rest (authenticated AES-GCM). Authentication uses HttpOnly secure cookies with SameSite=Strict, mandatory multi-factor authentication on every login, modern adaptive password hashing, and comprehensive audit logging. Sensitive operations are protected by double-submit CSRF tokens, IP-based rate limiting, and account lockout.

Question 5

What threat-intelligence sources does Defenders Castle AI aggregate?

Accepted Answer

Defenders Castle AI operates its own multi-layer intelligence pipeline: 15+ proprietary and vetted feeds spanning malware infrastructure, phishing, botnet C2, ransomware leak-site monitoring, dark-web credential exposure, and vulnerability exploitation signals (including the CISA KEV catalog and EPSS scoring), enriched and correlated with curated regional intelligence focused on GCC threat activity.