Tidal Cyber Highlights Platform Upgrade Separating ATT&CK Framework and Proprietary Threat Intelligence

According to a recent LinkedIn post from Tidal Cyber, the company is emphasizing a new architectural evolution in its platform that separates MITRE ATT&CK® intelligence from Tidal Cyber’s proprietary cyber threat intelligence. The post suggests this change is intended to address industry challenges in converting technique-level mapping into actionable defensive measures as threat volume and complexity grow.

The company’s LinkedIn post highlights that MITRE ATT&CK will continue to serve as the structural framework for understanding adversary techniques, while Tidal Cyber CTI will focus on procedure-level intelligence aligned to an organization’s defensive stack. This separation is presented as a way to clarify intelligence sources, operationalize how attacks are executed in practice, and help security teams identify where defenses fail and what remediation actions to prioritize.

For investors, the post implies that Tidal Cyber is trying to move up the value chain from reference mapping to operational decision support, which could enhance the stickiness and perceived ROI of its platform. If customers view procedure-level CTI as materially improving detection and response outcomes, this capability may support higher pricing, upsell opportunities, and improved competitive positioning against vendors that rely solely on ATT&CK-based mapping.

The focus on eliminating “fragmented and blended intelligence” also points to a potential differentiation theme in a crowded cyber threat intelligence market. By framing its platform as a way to unify structural and procedural views of threats, Tidal Cyber may be targeting larger enterprises and security operations centers that struggle to act on disparate feeds, potentially expanding its addressable market among higher-spend security buyers.

The post links to a press release and encourages direct contact, indicating an intent to convert interest into sales conversations around this new architecture. While no customer metrics or financial figures are mentioned, the emphasis on operationalizing procedure-level CTI could signal a product roadmap geared toward measurable security outcomes, a factor that institutional buyers often weigh when allocating cybersecurity budgets.