The WCF (World Crime Feeds) Agent is built to harmonise with the security infrastructure you already run — regardless of vendor.

Supported Platforms

166+ integrations across four categories

OneFirewall integration categories: Firewall and Network, Cloud and WAF, Endpoint and Device, SIEM and Log, with vendor logos including Check Point, Fortinet, Sophos, pfSense, Cisco, Cloudflare, F5, Splunk and IBM QRadar

Enterprise Firewalls

Direct, one-click sync of live IOC block lists into the firewalls and routers you already run.

Check Point & SecureXL Fortinet FortiGate Palo Alto Networks Sophos SonicWall Forcepoint NGFW & Web Security pfSense

Network & Cloud Security

Keep cloud edge, WAF, and network-layer rule sets continuously updated with live threat intelligence.

Google Cloud Platform Amazon Web Services Cloudflare Cisco IOS HAProxy InfoBlox

Web & Endpoint Protection

Extend perimeter-grade reputation scoring down to the application and endpoint layer.

Apache ModSecurity Windows Defender GCP Cloud Armor AWS CloudFront AWS WAF

Security Analytics & SIEM

Native delivery into the platforms your SOC already watches, with MITRE ATT&CK context attached.

IBM QRadar Elasticsearch Trellix Splunk

Don't see your platform? The WCF Agent supports custom API and syslog-based integrations — ask our integration team.

Key Benefits

What connecting the alliance actually changes

⚡

Enhanced Real-Time Protection

Continuous threat intelligence updates mean your defences identify and neutralise threats before they can exploit a vulnerability — not after.

🎯

Simplified Management

Centralised control and reporting across every connected platform, instead of maintaining separate rule sets vendor by vendor.

🔄

Vendor-Agnostic by Design

OneFirewall sits above your existing stack — it doesn't ask you to replace anything you've already invested in.

Get intelligence flowing into your stack this week.

Most integrations are live within a single engineering session.

Start a Proof of Value