The Problem

ISO 27001 expects threat intelligence.
The market prices it for enterprise.

Most SMEs face an unhelpful choice: pay thousands a month for an enterprise platform, or do threat intel manually with no audit trail. Neither works.

Timer
Manual monitoring doesn't scale+

Someone checks the NCSC feed when they remember to. Threats get missed, and there's nothing to show an auditor.

Pound icon
Enterprise tools cost enterprise money

Commercial threat intelligence platforms run to thousands per month — built for SOC teams, not a 50-person business.

Feed icon
Raw feeds are noise

Hundreds of CVEs a day, most irrelevant to you. Without context, the important ones drown in the ones that aren't.

How it works

Broad capture, smart surfacing. Nothing silently dropped.

VTI captures everything, scores everything, and lets you decide what's noise. Every decision leaves an audit trail.

01
Aggregate

We poll trusted open-source feeds — NVD, NCSC, CISA KEV and more — on a continuous schedule, deduplicating as we go.

02
Score

Every item is scored 0–100 against your profile: your technology stack, your industry, your keywords, its severity and freshness.

03
Contextualise

AI writes two summaries per threat — a technical one with remediation steps for your ops team, and a plain-English one for leadership.

04
Deliver

Critical threats trigger real-time email alerts. Everything else lands in a ranked feed, with dismissals and suppressions under your control.

The platform

One platform, three audiences

Your ops team, your security lead and your board all need different things from threat intelligence. VTI gives each of them their own view.

A ranked feed your ops team will actually use

No hundred-item CVE dumps. Threats arrive scored and ranked against your profile, with the reasons for the match shown on every card.

  • Relevance score and severity on every item
  • AI-written remediation steps, not just links
  • Dismiss one item, or suppress everything like it
  • Escalate straight into your own ticket system with one click
Threat Feed

A weekly summary your board can read

Leadership doesn't need CVSS vectors. VTI writes plain-English summaries — what happened this week, whether it affects you, and what's being done about it.

  • Weekly posture view: are we more or less exposed than last week
  • No jargon, no acronyms without explanation
  • On Pro, exportable board and exec reports built from the same data
A weekly summary your board can read

A security overview for whoever owns security

The security overview aggregates everything: severity distribution, response times, top threat categories and feed health — the numbers behind the posture.

  • Severity and relevance-band distribution over time
  • Mean time from alert to action
  • Feed health monitoring built in
security overview

Security news, filtered to what you care about

Attacks, official advisories and key AI developments, aggregated from trusted public sources — with your own interest keywords to focus the feed.

  • Included on every plan, for every user
  • Set interests once — we match them against headlines and summaries
  • On Pro, get matching stories emailed as a daily or weekly digest
Security news

ISO 27001 ready

Threat intelligence your auditor will accept

ISO 27001:2022 control A.5.7 requires you to collect and analyse threat intelligence. Every VTI plan meets that requirement — a defined process, running continuously, with every item and decision recorded. Pro turns the record into evidence: a one-click ISO 27001 evidence pack and board-ready reports, built for the audit day.

  • A.5.7 satisfied on every plan — a running, recorded process
  • Pro: one-click ISO 27001 evidence pack export
  • Pro: board, exec and weekly reports from the same data
  • Suppressions applied transparently — data never deleted
  • UK-hosted data, built by a UK security consultancy

Pricing

Enterprise capability, SME pricing

Two plans. No per-seat surprises, no procurement cycle.

Essentials

Threat intelligence that meets ISO 27001, for one user
£79/month
Billed annually
Threat feed scored and ranked against your profile
Threats are scored against the business profile you set up, so the items most relevant to you come first.
AI summaries — technical and plain English
Each threat comes with two summaries: a technical one for your IT team and a plain-English one for everyone else.
Weekly summary and security overview
A short weekly round-up of new threats and your overall security picture.
Real-time critical alerts — email and in-app
Critical threats that match your profile are flagged straight away, by email and in the app.
Security news feed with your own interests
A security news feed filtered to the topics you choose.
MFA included — security basics are never an upsell
Multi-factor authentication protects every account as standard, at no extra cost.
Meets the ISO 27001 A.5.7 threat intelligence requirement
A documented threat intelligence process you can show your auditor for ISO 27001:2022 Annex A 5.7.
1 user
One login for one named user.

Pro

Audit-ready evidence and deeper analysis, for your whole team
£249/month
Billed annually
Everything in Essentials
All Essentials features, plus the Pro features below.
One-click ISO 27001 evidence pack export
Export your threat intelligence records as an evidence pack for your ISO 27001 auditor in one click.
Board, exec and weekly reporting
Ready-made reports for the board, executives and weekly team updates.
CVE explorer with per-CVE deep dives
Search known vulnerabilities (CVEs) and open a detailed breakdown of any one of them.
CISA KEV digest email
An email digest of CISA's Known Exploited Vulnerabilities list: flaws attackers are actively using.
IOC extraction on threat items
Indicators of compromise (such as IP addresses, domains and file hashes) are pulled out of threat items so your team can act on them.
News digest — matching stories emailed daily or weekly
Stories that match your interests, emailed daily or weekly.
Up to 20 users
Up to 20 colleagues, each with their own login.

Essentials

Threat intelligence that meets ISO 27001, for one user
£99/month
Billed monthly
Threat feed scored and ranked against your profile
Threats are scored against the business profile you set up, so the items most relevant to you come first.
AI summaries — technical and plain English
Each threat comes with two summaries: a technical one for your IT team and a plain-English one for everyone else.
Weekly summary and security overview
A short weekly round-up of new threats and your overall security picture.
Real-time critical alerts — email and in-app
Critical threats that match your profile are flagged straight away, by email and in the app.
Security news feed with your own interests
A security news feed filtered to the topics you choose.
MFA included — security basics are never an upsell
Multi-factor authentication protects every account as standard, at no extra cost.
Meets the ISO 27001 A.5.7 threat intelligence requirement
A documented threat intelligence process you can show your auditor for ISO 27001:2022 Annex A 5.7.
1 user
One login for one named user.

Pro

Audit-ready evidence and deeper analysis, for your whole team
£299/month
Billed monthly
Everything in Essentials
All Essentials features, plus the Pro features below.
One-click ISO 27001 evidence pack export
Export your threat intelligence records as an evidence pack for your ISO 27001 auditor in one click.
Board, exec and weekly reporting
Ready-made reports for the board, executives and weekly team updates.
CVE explorer with per-CVE deep dives
Search known vulnerabilities (CVEs) and open a detailed breakdown of any one of them.
CISA KEV digest email
An email digest of CISA's Known Exploited Vulnerabilities list: flaws attackers are actively using.
IOC extraction on threat items
Indicators of compromise (such as IP addresses, domains and file hashes) are pulled out of threat items so your team can act on them.
News digest — matching stories emailed daily or weekly
Stories that match your interests, emailed daily or weekly.
Up to 20 users
Up to 20 colleagues, each with their own login.

Prices exclude VAT. Online signup with card payment is coming soon — until then we onboard every client personally, usually within a week.

FAQ

Common questions

Does VTI satisfy the ISO 27001 threat intelligence requirement?
What's the difference between Essentials and Pro?
How is this different from just subscribing to the NCSC feed?
What happens when a critical threat is found?
Where is our data held?
Can we sign up online?

Get started

See your own threat picture, this week

Book a 30-minute demo and we'll show you VTI running against a profile built for your business — your stack, your industry, your threats.

Book a Demo