Skip to main content

Welcome to Contextal Platform Documentation

Welcome to the official documentation for Contextal Platform - a powerful technology designed for threat detection, intelligence, and contextual data processing. It is the foundation of our security solutions and can be seen in action at our public threat detection & intelligence service Contextal Lens.

Key Features of Contextal Platform​

Contextual Detection​

Contextal Platform goes beyond conventional detection methods by employing contextual threat analysis. While traditional systems often rely on static signatures or isolated rule sets, our platform uses local specialized AI and generic situational scenarios, which take into account global context, relations, metadata, time, anomalies, content, and other factors to trigger specific actions.

AI Powered & Optimized​

Contextal Platform makes use of AI in its data processors, utilizing neural networks and machine learning techniques to perform advanced tasks like natural language processing, image classification, or visual brand detection. Importantly, all AI operations happen locally - no data is ever exposed to third-party providers, ensuring that sensitive information stays private at all times. Additionally, the platform's powerful data extraction capabilities provide a rich set of features that can be directly utilized for training local AI models.

Robust Design​

Created by the original authors of ClamAV, Contextal Platform is built upon decades of cybersecurity expertise. We designed the platform to address weaknesses and limitations in existing solutions, and make it possible to easily and effectively deal with complex threats.

Real-Time Processing and Analysis​

Contextal Platform provides a real-time processing pipeline that ingests data from multiple sources and runs it through a network of specialized data processors. These processors are designed to analyze and extract metadata from various file formats and other data sources. The results of the processing are immediately available for querying, correlation, and visualization.

Security and Scalability​

We’ve gone the extra mile to ensure that sensitive operations are entirely isolated, workers containerized, and our backend and data processors are written in Rust – a language renowned for its security features. Contextal Platform can detect its own malfunctions, and yes - it's also an actionable indicator.

The modular architecture at the same time allows scaling the system horizontally by adding more processing nodes as needed, making Contextal Platform handle massive data loads with ease.

Use Cases​

Proactive Threat Detection​

Contextal Platform has been designed with advanced and proactive threat detection in mind. The local AI models and contextual scenarios analyze and detect the nature of attacks in a more abstract way, avoiding reliance on specific content details that would limit their use to a single instance, as it's often the case with legacy security software. Additionally, the system can autonomously learn and take into account past events, considering information beyond just the currently processed data.

Threat Intelligence​

The platform is the foundation for Contextal Lens - a threat intelligence service that analyzes thousands of indicators to detect and understand threats hidden within files and URLs. It detects, reports, and describes hundreds of attack types and other signals, with many detections mapped to MITRE ATT&CK® techniques - all accessible through an interactive interface that enables full visual inspection of the data.

Data Governance​

Contextal Platform supports a wide range of data formats, can extract text from various sources, perform Optical Character Recognition (OCR), identify natural and programming languages, analyze text sentiment, detect sensitive data such as passwords or credit card numbers, and even classify images using local AI to detect NSFW content or brand visuals. This combination of features provides unparalleled control and visibility over the data flowing through any organization, enabling implementation of sophisticated data policies and Data Leak Prevention (DLP) strategies.

Critical Infrastructure Protection​

Due to Contextal Platform's secure design and efficacy, it's the ideal choice for mission-critical applications, such as the protection of critical infrastructure. In addition to its advanced threat detection capabilities, the platform can be configured to operate in data firewall mode - only allowing data that conforms to strict scenarios while blocking anything undefined. This ensures a highest level of control and protection in the most sensitive environments.

Full Customization​

Contextal solutions can be fully customized - from detection mechanisms to deployment models. Contact us or schedule a live demo to learn more.