The Threat Intel Mesh
Every AiSOC install can make every other install smarter — without revealing its data. Instances opt in to gossip hashed IOC sightings and aggregate verdict signatures through a lightweight, open-source hub. No raw indicators, no entities, no tenant data ever leave your perimeter.
The community hub isn't reporting stats yet — be one of the first instances to join. Run your own hub from services/mesh.
Community FP-suppression lift
The mesh adds a bounded (±0.10) community-consensus signal to the verdict engine. We will publish the measured false-positive-suppression lift (mesh enabled vs. disabled) on the benchmark page once it's run on real multi-instance data. Until then any lift figure shown is explicitly labelled simulated — we never present a synthetic number as measured production performance.
Trust the code, not a promise
The mesh is opt-in, the hub is open source, and mesh preview shows exactly what would leave your instance before you enable it. Read the threat model.