Excalibur

Excalibur.

Dashboard

Threats Browse and triage the threat corpus

t

Actors Threat actor profiles and attribution

a

Merlin Graph command center, cases and timeline

i

Exposure Profiler Client exposure scoring and mitigations

x

Patterns Campaign patterns and correlations

p

Vendors Vendor registry and capabilities

v

Clients Private client profiles and sharing

l

Metrics

Threats

All Severities

Critical High Medium Low

All Categories

All Techniques

All Dates

Pick a day

To

Quick ranges

Unreviewed Bookmarked

No threats match

Try adjusting your filters or search terms.

Sorted by date (newest)

	Threat	RISK	CATEGORY	ACTOR	DATE

Bulk

Patterns

Pattern signals

All types

Emerging Anomaly Radar

All vectors

Crypto holdings Executive devices AI/Dev stacks Family office ops Finance transfers

Highest priority Most connected threats

All severities

Critical High Medium

All techniques

All actors

All provenance

Auto Curated Hybrid

Unreviewed FO relevance Momentum

No patterns match

Try adjusting your filters or search terms.

Sorted by Priority (descending)

Actors

All risk levels

Critical High Medium

Risk (Critical first)

Primary vector focus

No actors match

Try adjusting your filters or search terms.

Sorted by risk (Critical first)

Merlin

Actionable signals

Global search

Date range

Seed

Full corpus (all nodes — no seed)

Depth (hops)

2

Focus on click

Priority hub

Search or pick a signal to seed the graph.

Inspector

Top Category

—

—

Primary Exposure Vector

—

—

Recent Velocity

—

—

Attribution & Focus

—

—

Activity and severity

Threats this month

SMTWTFS

Severity distribution

Top exposure vectors

Review backlog

—

—

Pattern coverage

—

—

Critical + High

—

—

Merlin workspace

—

—

Vendor catalog

—

—

Managed clients

—

—

Actor depth & attribution

—

—

TTP & defense coverage

—

The Holy Grail

Same day capture

100%

First wave inclusion

99%

Avg. lead time

10.4h

Ahead of enterprise feeds

84%

Timing vs. major sources

Ahead of first major source

39%

Tied with earliest major source

60%

Slightly behind absolute first

1%

Outperformance vs. competitor tiers

Mid-tier competitors Newsletters · smaller feeds

88–94%

of the time we are ahead

Enterprise & platform Enterprise platforms

81–88%

of the time we are ahead

Vendors

Active, Evaluating

Active Evaluating Deprecated

All categories

Name A–Z

All capabilities & tags

Sorted by name A–Z

No vendors match

Try adjusting filters or add a new vendor profile.

Clients

Active, Onboarding, Monitoring

Active Onboarding Monitoring Offboarded

All types

All tiers

All vectors

Code name A–Z

Code name A–Z

No clients match

Try adjusting filters or add a new client profile (code name only — no real client names).

Add vendor

Name *

Website *

Category

Status

Add client profile

Use a code name only (GDPR pseudonym). Never enter real client or principal names — maintain the real-name mapping outside Excalibur.

Code name *

Client type

Status

Geography (comma-separated, optional)

Primary vectors (optional)

Share client

Recipient

Permission

Note (optional)

New case (private)

Title

Summary

Status

Priority

Client code (EP)

Monitoring watchlist

Template

Save investigation view

View name

Keyboard shortcuts

My Queue

Submit threat

Queued as a Holy Grail candidate on the next discovery run.

URL (required)

Notes (optional)

Menu

Viewing: Dashboard

Dashboard

Threats

Actors

Merlin

Exposure Profiler

Patterns

Vendors

Clients

Metrics

Bypasses cache, same as Ctrl+Shift+R

Search & commands

Threats, actors, navigation, and JSON export

Search and commands

↑↓ Navigate · Enter · Esc / · Cmd/Ctrl+K

Arthur

Ready

Ready

0:00

Listening

0:00 0:00