How Security Automation Improves Business Protection: 30x the Reach of a Blocklist
By Patrick Duggan, DugganUSA LLC • April 2, 2026
DugganUSA built an autonomous security platform that has resolved 2.9 million block events to 12,216 distinct hosts without human intervention — counting attackers, not knocks. Here's how security automation transforms business protection.
The Speed Problem
Manual threat analysis takes hours or days. Attackers move in minutes. The average time from initial access to lateral movement is under 2 hours. DugganUSA's autonomous cascade pipeline processes new threat indicators in real-time, pushing STIX 2.1 bundles and OPNsense blocklists to subscriber SIEMs and firewalls within minutes of detection.
How DugganUSA Automation Works
- Automated Collection: 15 upstream feeds monitored continuously — URLhaus, ThreatFox, Feodo Tracker, Spamhaus DROP, PhishTank, OpenPhish, and more.
- Automated Analysis: Multi-framework scoring (CARVER, DREAD, Diamond Model, ACH) applied without analyst involvement.
- Automated Distribution: STIX 2.1 bundles generated for Splunk, Sentinel, CrowdStrike. OPNsense blocklists (IP, domain, URL) updated continuously.
- Automated Compliance: KYC/AML screening across 11M+ documents including Epstein DOJ records, Panama Papers, and federal court decisions.
Business Impact
- 30x reach over list-only defence: 1,638 distinct hosts stopped where blocklists stop 55, measured over 5,288 blocks
- 98% cost reduction: DugganUSA is 98% cheaper than Recorded Future (Pro at $99/mo vs their $80k/yr)
- Zero analyst overhead: 12,216 distinct hosts blocked autonomously
- Free tier available: 25 API calls/day at $0/month — no barrier to entry
Integration with Existing Tools
DugganUSA integrates with the tools US businesses already use: CrowdStrike Falcon, Splunk Enterprise Security, Microsoft Sentinel, Cortex XSOAR, Wiz, and OPNsense. No rip-and-replace required — the STIX 2.1 feed plugs into existing SIEM infrastructure. Register for free and start consuming threat intelligence in minutes.
Start consuming threat intelligence for free
25 API calls/day. STIX 2.1 feed. No credit card required.
Register Free →