I don't understand the difference between the Brute Force and Firewall modes. Why can't they be integrated? The brute force mode is quite limited, with only a few protocols and ports.
Please create a specific subreddit for ThreatDown.
CTI, I know ThreatDown does that, but it would be great to have more focus on the threat landscape and threat research to also attract new customers.
It would be also great to know which MTH does for their customers, which IOC they use, what hypothetical research they conduct and on what.
It's a great product and, in some aspects, more innovative than other products, e.g. AIDR.
However, I feel there are some gaps in functionality that could really put ThreatDown above the "big vendors".
A subreddit for ThreatDown would be great.
I suggest to open a subreddit for threatdown, it can be helpfull, it's a good product.