Liberty91

Do More Threat Intelligence, Faster.

Collect, analyse and share real-time, actionable and highly customised Threat Intelligence Reports with AI-powered agents trained on your organisation's unique threat profile.

Start Free Trial
https://platform.liberty91.com
Liberty91 threat intelligence platform dashboard

What is Liberty91?

Liberty91's AI-powered platform is designed to drastically reduce the time spent on threat intelligence and security research.

By automating the collection, analysis, and reporting of cyber-security events, Liberty91 allows you to focus on what truly matters. Our AI agents, trained on your organisation's unique threat profile, rapidly identify and prioritise critical threats, enabling you to respond instantly.

7x

Faster intelligence

85%

Quicker response

24/7

Threat monitoring

Meet Harry, Your AI Analyst That Never Sleeps.

Harry is Liberty91's stack of AI agents, acting as your real-time junior threat intelligence analyst. He synthesises raw content from hundreds of cybersecurity sources upon publication and surfaces what matters to your security teams.

Harry provides strategic and tactical analysis, Indicators of Compromise, Detection Rules and more, delivered as written reports, STIX bundles, or through integrations with your existing security tooling and productivity suites.

And Harry scales indefinitely. Whether you need one dedicated analyst for your organisation or hundreds for your MSSP customers, each gets their own Harry, trained on their unique threat profile.

Liberty91 AI intelligence engine
The configurable spine of the platform

Intelligence Requirements.

An Intelligence Requirement is a question your team needs answered continuously, about a sector, a malware family, a threat actor, a supplier, an asset group, a VIP, anything that matters. Liberty91 turns each one into a self-maintaining knowledge base and reads every incoming event through every relevant requirement, so each one lands with cumulative expert context no single analyst could realistically carry.

Liberty91 keeps its own Intelligence Requirements continuously updated as a shared knowledge base. You, or your MSSP analysts on behalf of clients, can author additional Intelligence Requirements that stay private to you. They cross-reference each other, so a single question returns one answer with citations across everything relevant.

See how Intelligence Requirements work →
https://platform.liberty91.com
Liberty91 Intelligence Requirements list, continuously updated knowledge bases for regions, threat sources, threat types, and threats to your environment

Platform Features.

https://platform.liberty91.com
Liberty91 Collection Modules screen with CrowdStrike, FalconFeeds, Group-IB, Google Threat Intelligence, and other active sources

Real-time collection.

Collect Cyber Threat and security news from hundreds of sources in real-time.

  • Security News & Blogs, Vendor Reports
  • Premium Intelligence Sources
  • Darkweb
  • Social Media
https://platform.liberty91.com
Liberty91 instant threat analysis showing aliases, sectors, targets, latest developments, and linked threat-library entities, tailored to your profile

Instant analysis based on your profile.

Analyse every event for relevance based on your threat profile. Integrate with your own Attack Surface Management Tools, Supply Chain Software and Asset inventories to dynamically keep your profile updated.

https://platform.liberty91.com
Liberty91 intelligence report with an executive summary and a relevance assessment tailored to a customer organization

Actionable reports and alerts.

Receive actionable alerts as soon as you need to know, or integrate with thousands of platforms like your ticketing system, SIEM, SOAR or TIP.

https://platform.liberty91.com
Liberty91 Mailroom dashboard with dispatch volumes for reports, IOCs, detection rules, and STIX bundles, plus a sent log across multiple client organisations

Dispatch intelligence to the stakeholders who act on it.

Mailroom sends reports, IOCs, Sigma detection rules, and STIX bundles to the right recipients, and keeps an auditable Sent log of every dispatch, across every organisation in your account. The last mile of the CTI lifecycle, finally tooled.

Liberty91 document upload extracting Assets and Suppliers from a vendor register for one-click confirmation

Set up an organisation in minutes.

Skip the manual data entry. Upload the documents you already have, asset inventories, supplier registers, network diagrams, or a corporate profile, and Liberty91 extracts the Assets and Suppliers for you to confirm in a couple of clicks. The agent that manages each organisation commits everything to memory, so every new event is judged against your real environment.

Liberty91 Suggestions and Enrichment Opportunities, AI-generated threat entities ready to add as Threat Cards

Find and track new threats when they emerge.

Get ahead with AI-powered suggestions and customised threat intelligence before you thought to ask. Liberty91 will offer suggestions for new threats to track based on industry reporting. It will then research and create your personalised threat cards based on all available reporting.

Liberty91 agentic AI workflow

Be the first to learn about zero-days.

Liberty91 monitors any source you choose. So if anyone talks about a new vulnerability in a product in your infrastructure, you will be immediately notified, complete with a list of where your affected assets are hosted, and remediation recommendations.

Liberty91 detection rules and Indicators of Compromise for monitoring and threat hunting

Use detection rules to take immediate action.

Our reports include not just Indicators of Compromise (IOCs), but also detection rules you can use to monitor, detect and hunt. We'll tell you what to look for and where you can find it.

L91

Liberty91 Morning Report

to: security-team@acme.com

Daily Cybersecurity Morning Report, April 2, 2026

Tailored Threat Intelligence Report

Executive Summary

Critical cybersecurity threats including actively exploited Google Chrome vulnerabilities, regional scams targeting travelers and grieving families in the UK, and a complex web of data breaches and phishing campaigns impacting major technology companies.

Attack Surface Threats

Google Chrome, CVE-2026-5281

Actively exploited zero-day, CVSS 8.8. Patch by April 15.

EvilTokens Phishing-as-a-Service

New kit targeting Microsoft accounts via device code phishing.

SLSH / Scattered Spider Data Exfiltration

3M+ Salesforce records from major U.S. tech company.

Regional: United Kingdom

Reservation hijack scams targeting travelers via compromised booking systems.

View Full Report in Platform

Arrive at the office in-the-know.

Our daily emails are not just a round-up of the latest security news, they are a personalised summary, analysis and assessment of everything published in the last 24 hours. Arrive at the office with an up-to-date understanding of how the latest events are relevant to your organisation, sector and assets specifically.

Frequently Asked Questions.

Ready to do more with less?

Request a demo or start your free trial today. Get instant access to AI-powered threat intelligence tailored to your organisation.