# Cybora

> Cybora provides curated threat intelligence feeds as native firewall lists. The service helps firewall teams reduce known malicious IP, domain, botnet, scanner, phishing, malware, and command-and-control infrastructure at the network edge.

## Product

- [Cybora](https://cybora.io/): Product overview, plans, update intervals, feed coverage, free compatibility feed, and frequently asked questions.
- [Features](https://cybora.io/features/): How Cybora evaluates signals, controls false-positive risk, ages indicators, and delivers firewall-ready feeds.
- [Integrations](https://cybora.io/integrations/): Supported firewall platforms and links to the corresponding setup guides.
- [Documentation](https://cybora.io/docs/): Complete technical documentation.

## Getting Started

- [Introduction](https://cybora.io/docs/introduction/): What Cybora provides and where a threat feed fits in a security architecture.
- [Feed URL format](https://cybora.io/docs/feed-url-format/): How to construct IPv4, domain, and URL feed endpoints.
- [Polling intervals](https://cybora.io/docs/polling-intervals/): How to align firewall polling with the selected plan.
- [Threat feeds vs. IPS, EDR, and SIEM](https://cybora.io/docs/threat-feed-vs-ips-edr-siem/): Scope and limitations of firewall threat feeds.

## Firewall Integration Guides

- [Fortinet FortiGate](https://cybora.io/docs/fortinet/): Configure External Connectors and apply imported feeds in FortiGate policies.
- [Palo Alto Networks](https://cybora.io/docs/paloaltonetworks/): Configure External Dynamic Lists and use them in PAN-OS policy.
- [Cisco Secure Firewall](https://cybora.io/docs/cisco/): Configure Security Intelligence feeds in Firewall Management Center.
- [Check Point](https://cybora.io/docs/checkpoint/): Configure External IoC feeds in SmartConsole.
- [Sophos Firewall](https://cybora.io/docs/sophos/): Configure third-party threat feeds with Active Threat Response.
- [SonicWall](https://cybora.io/docs/sonicwall/): Configure dynamic external address objects and groups.
- [OPNsense](https://cybora.io/docs/opnsense/): Configure native firewall aliases from a Cybora feed.
- [pfSense](https://cybora.io/docs/pfsense/): Configure URL Table aliases from a Cybora feed.

## Feed Quality and Operations

- [Indicator admission](https://cybora.io/docs/how-indicators-enter-feed/): How observations become firewall-ready indicators.
- [Signal correlation](https://cybora.io/docs/signal-correlation/): How independent evidence increases confidence.
- [Policy confidence](https://cybora.io/docs/policy-confidence/): How Cybora evaluates operational risk before enforcement.
- [Signal aging](https://cybora.io/docs/signal-aging/): How stale evidence leaves production feeds.
- [False-positive review](https://cybora.io/docs/false-positive-review/): How to report and review a suspected false positive.
- [Feed security](https://cybora.io/docs/feed-security/): License-key handling, HTTPS delivery, and polling controls.
- [Privacy and data flow](https://cybora.io/docs/privacy-data-flow/): What data flows between a firewall and Cybora.
- [Validation and troubleshooting](https://cybora.io/docs/troubleshooting/): Verify delivery, format, import, policy use, and logging.

## Languages

- [English](https://cybora.io/)
- [German](https://cybora.io/de/)
- [Spanish](https://cybora.io/es/)
- [French](https://cybora.io/fr/)
- [Italian](https://cybora.io/it/)
- [Arabic](https://cybora.io/ar/)
- [Hindi](https://cybora.io/hi/)

## Company and Policies

- [Contact](https://cybora.io/contact/): Product, integration, partnership, and support enquiries.
- [Partners](https://cybora.io/partners/): Cybora partner programme.
- [Privacy Policy](https://cybora.io/privacy/)
- [Terms of Service](https://cybora.io/terms/)