{"id":13727,"date":"2026-03-31T21:29:13","date_gmt":"2026-03-31T19:29:13","guid":{"rendered":"https:\/\/fortgale.com\/it\/?page_id=13727"},"modified":"2026-04-01T13:33:12","modified_gmt":"2026-04-01T11:33:12","slug":"cyber-threat-intelligence","status":"publish","type":"page","link":"https:\/\/fortgale.com\/it\/cyber-threat-intelligence\/","title":{"rendered":"Cyber Threat Intelligence"},"content":{"rendered":"
\n \n
\n \n \n
\n \n
\n \n
\n \n
\n
\n \n \n
\n \n
\n \n
\n \n\n\n\n \n \n Cyber Threat Intelligence Proprietaria | IOC, Report e Advisory \u2014 Fortgale<\/title>\n <meta name=\"description\" content=\"Intelligence sulle minacce generata da incidenti reali, non acquistata sul mercato. IOC applicabili, report su gruppi criminali, advisory verticali e monitoraggio dark web. Fortgale, Milano.\">\n <meta name=\"keywords\" content=\"cyber threat intelligence, CTI Italia, threat intelligence aziendale, IOC feed, dark web monitoring, intelligence minacce informatiche, threat actor report, advisory sicurezza\">\n <meta name=\"robots\" content=\"index, follow\">\n <link rel=\"canonical\" href=\"https:\/\/fortgale.com\/it\/cyber-threat-intelligence\/\">\n\n <meta property=\"og:title\" content=\"Cyber Threat Intelligence Proprietaria \u2014 Fortgale\">\n <meta property=\"og:description\" content=\"Intelligence generata da incidenti reali, non acquistata sul mercato. IOC, report su threat actor e monitoraggio dark web per aziende italiane ed europee.\">\n <meta property=\"og:type\" content=\"website\">\n <meta property=\"og:url\" content=\"https:\/\/fortgale.com\/it\/cyber-threat-intelligence\/\">\n\n <script type=\"application\/ld+json\">\n {\n \"@context\": \"https:\/\/schema.org\",\n \"@type\": \"WebPage\",\n \"name\": \"Cyber Threat Intelligence Proprietaria \u2014 Fortgale\",\n \"url\": \"https:\/\/fortgale.com\/it\/cyber-threat-intelligence\/\",\n \"description\": \"Servizio di Cyber Threat Intelligence basato su intelligence proprietaria generata da incidenti reali. IOC applicabili, report su gruppi criminali attivi, advisory verticali per settore e monitoraggio dark web per la protezione delle aziende italiane ed europee.\",\n \"inLanguage\": \"it-IT\",\n \"publisher\": {\n \"@type\": \"Organization\",\n \"name\": \"Fortgale\",\n \"url\": \"https:\/\/fortgale.com\/it\/\",\n \"logo\": \"https:\/\/fortgale.com\/it\/wp-content\/uploads\/sites\/9\/2023\/02\/cropped-fortgale_logo.png\",\n \"address\": {\n \"@type\": \"PostalAddress\",\n \"streetAddress\": \"Via San Damiano 2\",\n \"addressLocality\": \"Milano\",\n \"addressCountry\": \"IT\"\n }\n }\n }\n <\/script>\n\n <script type=\"application\/ld+json\">\n {\n \"@context\": \"https:\/\/schema.org\",\n \"@type\": \"FAQPage\",\n \"mainEntity\": [{\n \"@type\": \"Question\",\n \"name\": \"Cosa distingue la CTI Fortgale dai feed di intelligence commerciali?\",\n \"acceptedAnswer\": {\n \"@type\": \"Answer\",\n \"text\": \"La maggior parte dei vendor di Cyber Threat Intelligence vende feed generici acquistati da aggregatori globali. Fortgale genera la propria intelligence da tre fonti primarie: gli incidenti gestiti quotidianamente (che producono IOC e TTP osservati in condizioni reali), la ricerca indipendente su threat actor e campagne attive, e il monitoraggio continuativo di ambienti deep e dark web. Questa intelligence \u00e8 contestuale, aggiornata e applicabile immediatamente all'infrastruttura delle aziende clienti.\"\n }\n },\n {\n \"@type\": \"Question\",\n \"name\": \"Cosa sono gli IOC e come vengono applicati alla protezione aziendale?\",\n \"acceptedAnswer\": {\n \"@type\": \"Answer\",\n \"text\": \"Gli Indicatori di Compromissione (IOC) sono elementi tecnici \u2014 indirizzi IP, domini, hash di file, URL \u2014 che identificano infrastrutture offensive o malware noti. Fortgale produce IOC direttamente dagli incidenti gestiti e dalla ricerca su threat actor. Questi indicatori vengono applicati preventivamente ai sistemi di difesa dei clienti (SIEM, EDR, firewall) in modo da bloccare automaticamente le minacce note prima che raggiungano l'infrastruttura.\"\n }\n },\n {\n \"@type\": \"Question\",\n \"name\": \"Cosa include il monitoraggio dark web di Fortgale?\",\n \"acceptedAnswer\": {\n \"@type\": \"Answer\",\n \"text\": \"Il servizio di monitoraggio dark web Fortgale include: ricerca di credenziali aziendali compromesse in vendita nei marketplace criminali, monitoraggio dei forum dove i threat actor discutono o pianificano attacchi verso specifici settori o aziende, rilevamento di dati aziendali (documenti, database, codice sorgente) pubblicati o messi all'asta dopo una violazione, e tracking dei leak site dei principali gruppi ransomware per rilevare tempestivamente la comparsa di dati clienti.\"\n }\n },\n {\n \"@type\": \"Question\",\n \"name\": \"A chi sono destinati i report di threat intelligence Fortgale?\",\n \"acceptedAnswer\": {\n \"@type\": \"Answer\",\n \"text\": \"Fortgale produce due tipi di report: report tecnici dettagliati destinati ai team di sicurezza (analisti SOC, threat hunter, CISO tecnici), che includono IOC, TTP mappati su MITRE ATT&CK e indicazioni operative; e report esecutivi destinati al management aziendale, che traducono le minacce in termini di rischio business, impatto potenziale e azioni prioritarie. Entrambi sono disponibili in italiano e inglese.\"\n }\n }\n ]\n }\n <\/script>\n\n <link rel=\"preconnect\" href=\"https:\/\/fonts.googleapis.com\">\n <link rel=\"preconnect\" href=\"https:\/\/fonts.gstatic.com\" crossorigin=\"\">\n <link href=\"https:\/\/fonts.googleapis.com\/css2?family=Poppins:wght@300;400;500;600;700;800&display=swap\" rel=\"stylesheet\">\n\n <style>\n *,\n *::before,\n *::after {\n box-sizing: border-box;\n margin: 0;\n padding: 0;\n }\n\n :root {\n --navy: #001B3B;\n --navy-mid: #0A2250;\n --navy-btn: #303E7A;\n --navy-light: #1a2e5a;\n --white: #FFFFFF;\n --gray-light: #F2F2F2;\n --gray-mid: #C3C4C7;\n --text-dark: #001B3B;\n --text-body: #2c3340;\n --text-muted: #65615f;\n --amber: #c9920a;\n --amber-light: #f5c842;\n --amber-glow: rgba(245, 200, 66, 0.15);\n --amber-dim: rgba(245, 200, 66, 0.55);\n }\n\n html {\n scroll-behavior: smooth;\n }\n\n body {\n font-family: 'Poppins', sans-serif;\n color: var(--text-body);\n background: var(--white);\n line-height: 1.7;\n font-size: 16px;\n }\n\n a {\n text-decoration: none;\n color: inherit;\n }\n\n img {\n max-width: 100%;\n display: block;\n }\n\n \/* \u2500\u2500\u2500 HERO \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .hero {\n background: linear-gradient(to right, rgba(0, 27, 59, 0.95) 48%, rgba(0, 27, 59, 0.55) 100%), url('https:\/\/fortgale.com\/it\/wp-content\/uploads\/sites\/9\/2026\/03\/managed-detection-and-response-mdr.png') center\/cover no-repeat;\n min-height: 100vh;\n display: flex;\n align-items: center;\n position: relative;\n overflow: hidden;\n padding-top: 40px;\n }\n\n \/* signal lines SVG background *\/\n\n .hero-canvas {\n position: absolute;\n inset: 0;\n pointer-events: none;\n opacity: 0.18;\n }\n\n \/* animated pulse dot *\/\n\n @keyframes pulse-ring {\n 0% {\n transform: scale(0.6);\n opacity: 0.9;\n }\n 100% {\n transform: scale(2.4);\n opacity: 0;\n }\n }\n\n @keyframes blink {\n 0%,\n 100% {\n opacity: 1\n }\n 50% {\n opacity: .3\n }\n }\n\n .pulse-wrap {\n position: absolute;\n right: 18%;\n top: 42%;\n transform: translateY(-50%);\n pointer-events: none;\n }\n\n .pulse-core {\n width: 10px;\n height: 10px;\n background: var(--amber-light);\n border-radius: 50%;\n position: relative;\n z-index: 2;\n animation: blink 2.4s ease-in-out infinite;\n box-shadow: 0 0 12px var(--amber-light);\n }\n\n .pulse-ring {\n position: absolute;\n top: 50%;\n left: 50%;\n width: 10px;\n height: 10px;\n border-radius: 50%;\n border: 1.5px solid var(--amber-light);\n transform: translate(-50%, -50%);\n animation: pulse-ring 2.4s ease-out infinite;\n }\n\n .pulse-ring:nth-child(2) {\n animation-delay: 0.8s;\n }\n\n .pulse-ring:nth-child(3) {\n animation-delay: 1.6s;\n }\n\n .hero-content {\n position: relative;\n z-index: 3;\n padding: 80px 80px 120px;\n max-width: 680px;\n }\n\n .hero-tag {\n display: inline-block;\n font-size: 11px;\n font-weight: 600;\n letter-spacing: 0.15em;\n text-transform: uppercase;\n color: var(--amber-light);\n border: 1px solid rgba(245, 200, 66, 0.35);\n padding: 5px 14px;\n border-radius: 3px;\n margin-bottom: 28px;\n }\n\n .hero h1 {\n font-size: clamp(36px, 4vw, 54px);\n font-weight: 800;\n color: var(--white);\n line-height: 1.13;\n margin-bottom: 24px;\n letter-spacing: -0.02em;\n }\n\n .hero h1 span {\n color: var(--amber-light);\n }\n\n .hero-subtitle {\n font-size: 17px;\n font-weight: 400;\n color: rgba(240, 246, 252, 0.72);\n line-height: 1.75;\n margin-bottom: 40px;\n max-width: 540px;\n }\n\n .hero-ctas {\n display: flex;\n gap: 16px;\n flex-wrap: wrap;\n }\n\n .btn-primary {\n background: var(--navy-btn);\n color: var(--white);\n font-family: 'Poppins', sans-serif;\n font-size: 12px;\n font-weight: 600;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n padding: 14px 30px;\n border-radius: 56px;\n border: 1.6px solid var(--navy-btn);\n cursor: pointer;\n transition: all 0.25s;\n display: inline-block;\n }\n\n .btn-primary:hover {\n background: #253070;\n border-color: #253070;\n transform: translateY(-1px);\n box-shadow: 0 6px 20px rgba(0, 0, 0, 0.25);\n }\n\n .btn-amber {\n background: transparent;\n color: var(--amber-light);\n font-family: 'Poppins', sans-serif;\n font-size: 12px;\n font-weight: 600;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n padding: 14px 30px;\n border-radius: 56px;\n border: 1.6px solid rgba(245, 200, 66, 0.5);\n cursor: pointer;\n transition: all 0.25s;\n display: inline-block;\n }\n\n .btn-amber:hover {\n border-color: var(--amber-light);\n background: rgba(245, 200, 66, 0.06);\n }\n\n .btn-secondary {\n background: transparent;\n color: var(--white);\n font-family: 'Poppins', sans-serif;\n font-size: 12px;\n font-weight: 600;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n padding: 14px 30px;\n border-radius: 56px;\n border: 1.6px solid rgba(255, 255, 255, 0.4);\n cursor: pointer;\n transition: all 0.25s;\n display: inline-block;\n }\n\n .btn-secondary:hover {\n border-color: var(--white);\n background: rgba(255, 255, 255, 0.07);\n }\n\n .hero-bottom {\n position: absolute;\n bottom: 36px;\n left: 80px;\n display: flex;\n gap: 48px;\n }\n\n .hero-stat-value {\n font-size: 30px;\n font-weight: 800;\n color: var(--white);\n line-height: 1;\n }\n\n .hero-stat-value.accent {\n color: var(--amber-light);\n }\n\n .hero-stat-label {\n font-size: 11px;\n font-weight: 500;\n color: rgba(240, 246, 252, 0.5);\n text-transform: uppercase;\n letter-spacing: 0.08em;\n margin-top: 4px;\n }\n\n \/* \u2500\u2500\u2500 GENERAL \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .section {\n padding: 96px 80px;\n }\n\n .section-narrow {\n max-width: 1200px;\n margin: 0 auto;\n }\n\n .section-tag {\n display: inline-block;\n font-size: 11px;\n font-weight: 700;\n letter-spacing: 0.18em;\n text-transform: uppercase;\n color: var(--navy-btn);\n margin-bottom: 16px;\n }\n\n .section-tag-amber {\n color: var(--amber-dim);\n }\n\n .section-tag-light {\n color: rgba(245, 200, 66, 0.7);\n }\n\n .section h2 {\n font-size: clamp(26px, 2.8vw, 38px);\n font-weight: 800;\n color: var(--text-dark);\n line-height: 1.2;\n letter-spacing: -0.02em;\n margin-bottom: 20px;\n }\n\n .section-dark h2 {\n color: var(--white);\n }\n\n .section-lead {\n font-size: 17px;\n color: var(--text-muted);\n max-width: 700px;\n line-height: 1.75;\n margin-bottom: 56px;\n }\n\n .section-dark .section-lead {\n color: rgba(240, 246, 252, 0.68);\n }\n\n .section-dark {\n background: var(--navy);\n color: var(--white);\n }\n\n .section-alt {\n background: var(--gray-light);\n }\n\n .section-ink {\n background: #040d1a;\n }\n\n \/* \u2500\u2500\u2500 DIFFERENTIATOR PILLARS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .pillars {\n display: grid;\n grid-template-columns: repeat(3, 1fr);\n gap: 2px;\n margin-top: 56px;\n }\n\n .pillar {\n background: rgba(255, 255, 255, 0.03);\n border: 1px solid rgba(255, 255, 255, 0.07);\n padding: 44px 36px;\n position: relative;\n transition: background 0.3s;\n }\n\n .pillar:hover {\n background: rgba(255, 255, 255, 0.06);\n }\n\n .pillar-num {\n font-size: 56px;\n font-weight: 800;\n color: rgba(245, 200, 66, 0.12);\n line-height: 1;\n margin-bottom: 20px;\n letter-spacing: -0.04em;\n font-variant-numeric: tabular-nums;\n }\n\n .pillar h3 {\n font-size: 18px;\n font-weight: 700;\n color: var(--white);\n margin-bottom: 14px;\n line-height: 1.3;\n }\n\n .pillar p {\n font-size: 14px;\n color: rgba(240, 246, 252, 0.62);\n line-height: 1.75;\n }\n\n .pillar-line {\n position: absolute;\n top: 0;\n left: 0;\n width: 3px;\n height: 0;\n background: var(--amber-light);\n transition: height 0.4s ease;\n }\n\n .pillar:hover .pillar-line {\n height: 100%;\n }\n\n \/* \u2500\u2500\u2500 INTEL DELIVERABLES \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .deliverables {\n display: grid;\n grid-template-columns: repeat(2, 1fr);\n gap: 24px;\n margin-top: 52px;\n }\n\n .del-card {\n border: 1px solid rgba(0, 27, 59, 0.1);\n border-radius: 12px;\n padding: 36px;\n background: var(--white);\n position: relative;\n overflow: hidden;\n transition: box-shadow 0.25s, transform 0.25s;\n }\n\n .del-card:hover {\n box-shadow: 0 10px 40px rgba(0, 27, 59, 0.1);\n transform: translateY(-3px);\n }\n\n .del-card::before {\n content: '';\n position: absolute;\n top: 0;\n left: 0;\n right: 0;\n height: 3px;\n background: linear-gradient(90deg, var(--amber-light), var(--navy-btn));\n }\n\n .del-icon {\n font-size: 32px;\n margin-bottom: 18px;\n }\n\n .del-title {\n font-size: 19px;\n font-weight: 800;\n color: var(--text-dark);\n margin-bottom: 12px;\n }\n\n .del-desc {\n font-size: 14px;\n color: var(--text-muted);\n line-height: 1.75;\n margin-bottom: 20px;\n }\n\n .del-tags {\n display: flex;\n flex-wrap: wrap;\n gap: 6px;\n }\n\n .del-tag {\n font-size: 11px;\n font-weight: 600;\n color: var(--navy-btn);\n background: rgba(48, 62, 122, 0.07);\n padding: 4px 10px;\n border-radius: 4px;\n }\n\n \/* \u2500\u2500\u2500 REPORT SHOWCASE \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .reports-grid {\n display: grid;\n grid-template-columns: repeat(3, 1fr);\n gap: 20px;\n margin-top: 52px;\n }\n\n .report-card {\n background: rgba(255, 255, 255, 0.03);\n border: 1px solid rgba(255, 255, 255, 0.08);\n border-radius: 10px;\n padding: 32px 28px;\n position: relative;\n transition: background 0.25s, border-color 0.25s;\n display: flex;\n flex-direction: column;\n gap: 0;\n }\n\n .report-card:hover {\n background: rgba(255, 255, 255, 0.06);\n border-color: rgba(245, 200, 66, 0.3);\n }\n\n .report-class {\n font-size: 10px;\n font-weight: 700;\n letter-spacing: 0.2em;\n text-transform: uppercase;\n color: var(--amber-light);\n margin-bottom: 18px;\n display: flex;\n align-items: center;\n gap: 8px;\n }\n\n .report-class::before {\n content: '';\n display: inline-block;\n width: 20px;\n height: 1px;\n background: var(--amber-light);\n }\n\n .report-title {\n font-size: 17px;\n font-weight: 800;\n color: var(--white);\n margin-bottom: 14px;\n line-height: 1.35;\n }\n\n .report-meta {\n display: flex;\n flex-wrap: wrap;\n gap: 8px;\n margin-bottom: 16px;\n }\n\n .report-badge {\n font-size: 10px;\n font-weight: 700;\n text-transform: uppercase;\n letter-spacing: 0.1em;\n padding: 3px 10px;\n border-radius: 20px;\n }\n\n .badge-apt {\n background: rgba(192, 57, 43, 0.15);\n color: #f1a1a1;\n border: 1px solid rgba(192, 57, 43, 0.3);\n }\n\n .badge-fin {\n background: rgba(74, 144, 217, 0.15);\n color: #a8c4e8;\n border: 1px solid rgba(74, 144, 217, 0.3);\n }\n\n .badge-local {\n background: rgba(245, 200, 66, 0.12);\n color: var(--amber-light);\n border: 1px solid rgba(245, 200, 66, 0.3);\n }\n\n .report-summary {\n font-size: 13px;\n color: rgba(240, 246, 252, 0.58);\n line-height: 1.7;\n flex-grow: 1;\n margin-bottom: 22px;\n }\n\n .report-actor {\n font-size: 12px;\n font-weight: 600;\n color: rgba(240, 246, 252, 0.4);\n margin-bottom: 6px;\n }\n\n .report-actor span {\n color: rgba(240, 246, 252, 0.75);\n }\n\n .report-link {\n font-size: 11px;\n font-weight: 700;\n letter-spacing: 0.12em;\n text-transform: uppercase;\n color: var(--amber-light);\n display: inline-flex;\n align-items: center;\n gap: 6px;\n padding-top: 18px;\n border-top: 1px solid rgba(255, 255, 255, 0.07);\n transition: gap 0.2s;\n }\n\n .report-link:hover {\n gap: 10px;\n }\n\n \/* \u2500\u2500\u2500 AI + HUMAN \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .two-col {\n display: grid;\n grid-template-columns: 1fr 1fr;\n gap: 64px;\n align-items: center;\n }\n\n .feature-list {\n display: flex;\n flex-direction: column;\n gap: 28px;\n margin-top: 36px;\n }\n\n .feature-item {\n display: flex;\n gap: 20px;\n align-items: flex-start;\n }\n\n .feature-num {\n width: 36px;\n height: 36px;\n flex-shrink: 0;\n border-radius: 6px;\n background: rgba(245, 200, 66, 0.12);\n color: var(--amber-light);\n font-size: 13px;\n font-weight: 700;\n display: flex;\n align-items: center;\n justify-content: center;\n border: 1px solid rgba(245, 200, 66, 0.25);\n }\n\n .feature-text h4 {\n font-size: 15px;\n font-weight: 700;\n color: var(--white);\n margin-bottom: 5px;\n }\n\n .feature-text p {\n font-size: 14px;\n color: rgba(240, 246, 252, 0.62);\n line-height: 1.68;\n }\n\n .intel-box {\n background: rgba(255, 255, 255, 0.03);\n border: 1px solid rgba(255, 255, 255, 0.09);\n border-radius: 14px;\n padding: 40px;\n position: relative;\n overflow: hidden;\n }\n\n .intel-box::after {\n content: '';\n position: absolute;\n bottom: -40px;\n right: -40px;\n width: 180px;\n height: 180px;\n border-radius: 50%;\n background: radial-gradient(circle, rgba(245, 200, 66, 0.07) 0%, transparent 70%);\n }\n\n .cert-badge {\n display: inline-block;\n background: rgba(255, 255, 255, 0.05);\n border: 1px solid rgba(255, 255, 255, 0.13);\n border-radius: 6px;\n padding: 8px 16px;\n font-size: 11px;\n font-weight: 700;\n color: rgba(240, 246, 252, 0.75);\n letter-spacing: 0.06em;\n text-transform: uppercase;\n margin: 4px;\n }\n\n \/* \u2500\u2500\u2500 STATS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .stats-row {\n display: grid;\n grid-template-columns: repeat(4, 1fr);\n gap: 24px;\n margin-top: 48px;\n }\n\n .stat-box {\n text-align: center;\n padding: 36px 20px;\n background: rgba(255, 255, 255, 0.03);\n border: 1px solid rgba(255, 255, 255, 0.08);\n border-radius: 10px;\n }\n\n .stat-box:hover {\n background: rgba(255, 255, 255, 0.06);\n border-color: rgba(245, 200, 66, 0.25);\n }\n\n .stat-value {\n font-size: 40px;\n font-weight: 800;\n color: var(--amber-light);\n line-height: 1;\n margin-bottom: 8px;\n }\n\n .stat-label {\n font-size: 12px;\n font-weight: 600;\n text-transform: uppercase;\n letter-spacing: 0.1em;\n color: rgba(240, 246, 252, 0.45);\n }\n\n .stat-desc {\n font-size: 13px;\n color: rgba(240, 246, 252, 0.55);\n margin-top: 10px;\n line-height: 1.5;\n }\n\n \/* \u2500\u2500\u2500 MITRE STRIP \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .mitre-strip {\n background: rgba(255, 255, 255, 0.03);\n border: 1px solid rgba(255, 255, 255, 0.07);\n border-radius: 10px;\n padding: 28px 36px;\n margin-top: 36px;\n display: flex;\n align-items: center;\n gap: 24px;\n flex-wrap: wrap;\n }\n\n .mitre-label {\n font-size: 12px;\n font-weight: 700;\n text-transform: uppercase;\n letter-spacing: 0.12em;\n color: rgba(240, 246, 252, 0.4);\n flex-shrink: 0;\n }\n\n .mitre-tactics {\n display: flex;\n flex-wrap: wrap;\n gap: 8px;\n }\n\n .tactic {\n font-size: 11px;\n font-weight: 600;\n color: rgba(240, 246, 252, 0.7);\n background: rgba(255, 255, 255, 0.05);\n border: 1px solid rgba(255, 255, 255, 0.1);\n padding: 4px 12px;\n border-radius: 4px;\n }\n\n \/* \u2500\u2500\u2500 SERVICES CTA CARDS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .services-grid {\n display: grid;\n grid-template-columns: repeat(3, 1fr);\n gap: 28px;\n margin-top: 52px;\n }\n\n .service-card {\n background: var(--white);\n border-radius: 10px;\n padding: 36px 30px;\n box-shadow: 0 2px 24px rgba(0, 27, 59, 0.07);\n border-bottom: 4px solid transparent;\n transition: border-color 0.25s, transform 0.25s, box-shadow 0.25s;\n }\n\n .service-card:hover {\n border-color: var(--navy-btn);\n transform: translateY(-4px);\n box-shadow: 0 8px 36px rgba(0, 27, 59, 0.13);\n }\n\n .service-card-tag {\n font-size: 10px;\n font-weight: 700;\n letter-spacing: 0.18em;\n text-transform: uppercase;\n color: var(--navy-btn);\n margin-bottom: 14px;\n }\n\n .service-card h3 {\n font-size: 18px;\n font-weight: 700;\n color: var(--text-dark);\n margin-bottom: 12px;\n line-height: 1.3;\n }\n\n .service-card p {\n font-size: 14px;\n color: var(--text-muted);\n line-height: 1.7;\n margin-bottom: 22px;\n }\n\n .service-card a {\n font-size: 12px;\n font-weight: 600;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n color: var(--navy-btn);\n border-bottom: 1.5px solid var(--navy-btn);\n padding-bottom: 2px;\n transition: opacity 0.2s;\n }\n\n .service-card a:hover {\n opacity: 0.7;\n }\n\n \/* \u2500\u2500\u2500 FAQ \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .faq-list {\n display: flex;\n flex-direction: column;\n margin-top: 48px;\n border-top: 1px solid rgba(0, 27, 59, 0.1);\n }\n\n .faq-item {\n border-bottom: 1px solid rgba(0, 27, 59, 0.1);\n }\n\n .faq-question {\n width: 100%;\n text-align: left;\n background: none;\n border: none;\n cursor: pointer;\n padding: 24px 0;\n display: flex;\n justify-content: space-between;\n align-items: center;\n gap: 20px;\n font-family: 'Poppins', sans-serif;\n font-size: 15px;\n font-weight: 600;\n color: var(--text-dark);\n }\n\n .faq-question:hover {\n color: var(--navy-btn);\n }\n\n .faq-icon {\n flex-shrink: 0;\n width: 28px;\n height: 28px;\n border-radius: 50%;\n border: 1.5px solid var(--navy-btn);\n display: flex;\n align-items: center;\n justify-content: center;\n color: var(--navy-btn);\n font-size: 18px;\n font-weight: 300;\n transition: transform 0.25s;\n }\n\n .faq-item.open .faq-icon {\n transform: rotate(45deg);\n }\n\n .faq-answer {\n display: none;\n padding: 0 0 24px;\n font-size: 14.5px;\n color: var(--text-muted);\n line-height: 1.75;\n }\n\n .faq-item.open .faq-answer {\n display: block;\n }\n\n \/* \u2500\u2500\u2500 CTA SECTION \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .cta-section {\n background: var(--navy-mid);\n padding: 88px 80px;\n text-align: center;\n position: relative;\n overflow: hidden;\n }\n\n .cta-section::before {\n content: '';\n position: absolute;\n top: -80px;\n right: -80px;\n width: 400px;\n height: 400px;\n background: rgba(48, 62, 122, 0.4);\n border-radius: 50%;\n }\n\n .cta-section::after {\n content: '';\n position: absolute;\n bottom: -60px;\n left: -60px;\n width: 280px;\n height: 280px;\n background: rgba(48, 62, 122, 0.3);\n border-radius: 50%;\n }\n\n .cta-section>* {\n position: relative;\n z-index: 1;\n }\n\n .cta-section h2 {\n font-size: clamp(28px, 3vw, 42px);\n font-weight: 800;\n color: var(--white);\n margin-bottom: 18px;\n letter-spacing: -0.02em;\n }\n\n .cta-section p {\n font-size: 16px;\n color: rgba(240, 246, 252, 0.7);\n margin-bottom: 40px;\n max-width: 560px;\n margin-left: auto;\n margin-right: auto;\n line-height: 1.7;\n }\n\n .cta-buttons {\n display: flex;\n gap: 16px;\n justify-content: center;\n flex-wrap: wrap;\n }\n\n \/* \u2500\u2500\u2500 RESPONSIVE \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n @media (max-width: 1024px) {\n .section {\n padding: 72px 40px;\n }\n .hero-content {\n padding: 80px 40px 120px;\n }\n .pillars {\n grid-template-columns: 1fr;\n gap: 2px;\n }\n .deliverables {\n grid-template-columns: 1fr;\n }\n .reports-grid {\n grid-template-columns: 1fr 1fr;\n }\n .stats-row {\n grid-template-columns: repeat(2, 1fr);\n }\n .cta-section {\n padding: 72px 40px;\n }\n }\n\n @media (max-width: 768px) {\n .section {\n padding: 56px 24px;\n }\n .hero-content {\n padding: 80px 24px 140px;\n max-width: 100%;\n }\n .pulse-wrap {\n display: none;\n }\n .reports-grid {\n grid-template-columns: 1fr;\n }\n .two-col {\n grid-template-columns: 1fr;\n gap: 32px;\n }\n .services-grid {\n grid-template-columns: 1fr;\n }\n .stats-row {\n grid-template-columns: 1fr 1fr;\n }\n .cta-section {\n padding: 56px 24px;\n }\n .hero-bottom {\n left: 24px;\n gap: 24px;\n bottom: 24px;\n }\n .mitre-strip {\n flex-direction: column;\n align-items: flex-start;\n }\n }\n <\/style>\n\n\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 HERO \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"hero\">\n\n <!-- signal grid SVG -->\n <svg class=\"hero-canvas\" viewBox=\"0 0 1440 900\" preserveAspectRatio=\"xMidYMid slice\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n <!-- grid lines -->\n <line x1=\"0\" y1=\"150\" x2=\"1440\" y2=\"150\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"0\" y1=\"300\" x2=\"1440\" y2=\"300\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"0\" y1=\"450\" x2=\"1440\" y2=\"450\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"0\" y1=\"600\" x2=\"1440\" y2=\"600\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"0\" y1=\"750\" x2=\"1440\" y2=\"750\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"240\" y1=\"0\" x2=\"240\" y2=\"900\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"480\" y1=\"0\" x2=\"480\" y2=\"900\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"720\" y1=\"0\" x2=\"720\" y2=\"900\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"960\" y1=\"0\" x2=\"960\" y2=\"900\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"1200\" y1=\"0\" x2=\"1200\" y2=\"900\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <!-- connection lines -->\n <line x1=\"900\" y1=\"200\" x2=\"1150\" y2=\"420\" stroke=\"#f5c842\" stroke-width=\"1\"><\/line>\n <line x1=\"1150\" y1=\"420\" x2=\"1050\" y2=\"600\" stroke=\"#f5c842\" stroke-width=\"1\"><\/line>\n <line x1=\"1050\" y1=\"600\" x2=\"1280\" y2=\"680\" stroke=\"#f5c842\" stroke-width=\"1\"><\/line>\n <line x1=\"900\" y1=\"200\" x2=\"780\" y2=\"380\" stroke=\"#f5c842\" stroke-width=\"0.8\"><\/line>\n <circle cx=\"900\" cy=\"200\" r=\"4\" fill=\"#f5c842\"><\/circle>\n <circle cx=\"1150\" cy=\"420\" r=\"4\" fill=\"#f5c842\"><\/circle>\n <circle cx=\"1050\" cy=\"600\" r=\"3\" fill=\"#f5c842\"><\/circle>\n <circle cx=\"1280\" cy=\"680\" r=\"3\" fill=\"#f5c842\"><\/circle>\n <circle cx=\"780\" cy=\"380\" r=\"3\" fill=\"#f5c842\"><\/circle>\n <!-- fade left -->\n <rect x=\"0\" y=\"0\" width=\"500\" height=\"900\" fill=\"url(#fadeLeft)\"><\/rect>\n <defs>\n <linearGradient id=\"fadeLeft\" x1=\"0\" x2=\"1\" y1=\"0\" y2=\"0\">\n <stop offset=\"0%\" stop-color=\"#001B3B\" stop-opacity=\"1\"><\/stop>\n <stop offset=\"100%\" stop-color=\"#001B3B\" stop-opacity=\"0\"><\/stop>\n <\/linearGradient>\n <\/defs>\n <\/svg>\n\n <!-- animated signal pulse -->\n <div class=\"pulse-wrap\">\n <div class=\"pulse-core\"><\/div>\n <div class=\"pulse-ring\"><\/div>\n <div class=\"pulse-ring\"><\/div>\n <div class=\"pulse-ring\"><\/div>\n <\/div>\n\n <div class=\"hero-content\">\n <span class=\"hero-tag\">Intelligence proprietaria \u00b7 Non acquistata \u00b7 Generata ogni giorno<\/span>\n <h1>Sapere prima\n <br>che l’attacco\n <br><span>accada.<\/span><\/h1>\n <p class=\"hero-subtitle\">\n Fortgale non acquista feed di intelligence generici. La genera: dagli incidenti gestiti ogni giorno, dalla ricerca indipendente su threat actor globali e dal monitoraggio continuativo di ambienti che nessun vendor commerciale raggiunge.\n <\/p>\n <div class=\"hero-ctas\">\n <a href=\"https:\/\/fortgale.com\/it\/#contatti\/\" class=\"btn-primary\">Parla con il team CTI<\/a>\n <a href=\"https:\/\/fortgale.com\/blog\/\" class=\"btn-amber\">Leggi i nostri report \u2192<\/a>\n <\/div>\n <\/div>\n\n <div class=\"hero-bottom\">\n <div class=\"hero-stat\">\n <div class=\"hero-stat-value accent\">100%<\/div>\n <div class=\"hero-stat-label\">Intelligence proprietaria<\/div>\n <\/div>\n <div class=\"hero-stat\">\n <div class=\"hero-stat-value\">24\/7<\/div>\n <div class=\"hero-stat-label\">Monitoraggio dark web<\/div>\n <\/div>\n <div class=\"hero-stat\">\n <div class=\"hero-stat-value accent\">AI<\/div>\n <div class=\"hero-stat-label\">Potenziamento analisti interno<\/div>\n <\/div>\n <\/div>\n <\/section>\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 CI\u00d2 CHE CI DISTINGUE \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-dark\">\n <div class=\"section-narrow\">\n <span class=\"section-tag section-tag-amber\">Il vantaggio Fortgale<\/span>\n <h2>L’intelligence che nessun vendor\n <br>pu\u00f2 venderti.<\/h2>\n <p class=\"section-lead\">\n Sul mercato esistono centinaia di feed di threat intelligence. Quasi tutti aggregano dati di terzi, li impacchettano e li rivendono. Fortgale fa qualcosa di radicalmente diverso: genera intelligence originale, ogni giorno, da fonti che solo chi \u00e8 in prima\n linea pu\u00f2 raggiungere.\n <\/p>\n\n <div class=\"pillars\">\n\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">01<\/div>\n <h3>Intelligence da incidenti reali<\/h3>\n <p>\n Ogni incidente gestito dal SOC Fortgale diventa intelligence strutturata: IOC osservati in condizioni reali, TTP documentate, infrastrutture offensive mappate. Non modelli teorici \u2014 artefatti estratti da attacchi contro aziende italiane ed europee nelle\n ultime 24 ore.\n <\/p>\n <\/div>\n\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">02<\/div>\n <h3>Ricerca indipendente su threat actor<\/h3>\n <p>\n Il team CTI Fortgale analizza in modo autonomo campagne, infrastrutture e strumenti dei principali gruppi criminali e attori statali attivi contro l’Europa. Senza dipendere da vendor o aggregatori: analisi originali, attribuzioni proprie, pubblicazioni\n indipendenti.\n <\/p>\n <\/div>\n\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">03<\/div>\n <h3>AI come moltiplicatore, non sostituto<\/h3>\n <p>\n Fortgale utilizza intelligenza artificiale sviluppata internamente per potenziare gli analisti: correlazione di grandi volumi di dati, pattern recognition su campagne note, prioritizzazione degli alert. Nessun prodotto AI di terze parti: sistemi interni,\n addestrati sui nostri dati, sotto il controllo esclusivo del team.\n <\/p>\n <\/div>\n\n <\/div>\n\n <div class=\"stats-row\" style=\"margin-top:56px;\">\n <div class=\"stat-box\">\n <div class=\"stat-value\">3+<\/div>\n <div class=\"stat-label\">Anni di tracking threat actor<\/div>\n <div class=\"stat-desc\">Database proprietario di gruppi attivi contro l’Europa, aggiornato continuamente.<\/div>\n <\/div>\n <div class=\"stat-box\">\n <div class=\"stat-value\">IOC<\/div>\n <div class=\"stat-label\">Applicati automaticamente<\/div>\n <div class=\"stat-desc\">Ogni indicatore rilevato viene distribuito ai sistemi di difesa dei clienti in tempo reale.<\/div>\n <\/div>\n <div class=\"stat-box\">\n <div class=\"stat-value\">D\/DW<\/div>\n <div class=\"stat-label\">Deep & dark web monitorati<\/div>\n <div class=\"stat-desc\">Ambienti criminali dove si pianificano gli attacchi e si vendono i dati rubati.<\/div>\n <\/div>\n <div class=\"stat-box\">\n <div class=\"stat-value\">IT\/EN<\/div>\n <div class=\"stat-label\">Report in italiano e inglese<\/div>\n <div class=\"stat-desc\">Per il management e per i team tecnici, in entrambe le lingue.<\/div>\n <\/div>\n <\/div>\n\n <\/div>\n <\/section>\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 REPORT SHOWCASE \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-ink\">\n <div class=\"section-narrow\">\n <span class=\"section-tag section-tag-amber\">Ricerca originale<\/span>\n <h2 style=\"color:var(--white);\">Intelligence pubblicata.\n <br>Capacit\u00e0 dimostrata.<\/h2>\n <p class=\"section-lead\" style=\"color:rgba(240,246,252,0.62);\">\n La qualit\u00e0 di un team CTI si misura dalla profondit\u00e0 delle sue analisi pubbliche. Fortgale pubblica regolarmente report originali su threat actor, campagne attive e vulnerabilit\u00e0 sfruttate contro aziende italiane ed europee.\n <\/p>\n\n <div class=\"reports-grid\">\n\n <!-- Report 1: Operation Storming Tide -->\n <div class=\"report-card\">\n <div class=\"report-class\">Threat Report \u00b7 Feb 2026<\/div>\n <div class=\"report-title\">Operation Storming Tide<\/div>\n <div class=\"report-meta\">\n <span class=\"report-badge badge-apt\">APT \/ Spionaggio<\/span>\n <span class=\"report-badge badge-apt\">Origine Russa<\/span>\n <\/div>\n <p class=\"report-summary\">\n Campagna multi-stadio attribuita a Mora_001, threat actor di origine russa. Il team Incident Response Fortgale ha tracciato internamente l’operazione come “FortiSync Quasar”: exploit di vulnerabilit\u00e0 Fortinet, deployment di Matanbuchus 3.0, Astarion RAT\n e SystemBC. Evoluzione da ransomware a spionaggio strategico. Esfiltrazione dati bloccata.\n <\/p>\n <div class=\"report-actor\">Threat Actor: <span>Mora_001<\/span><\/div>\n <div class=\"report-actor\">Vettore: <span>Fortinet vulnerability exploitation<\/span><\/div>\n <a href=\"https:\/\/fortgale.com\/blog\/defence\/operation-storming-tide\/\" class=\"report-link\" target=\"_blank\" rel=\"noopener\">\n Leggi il report completo \u2192\n <\/a>\n <\/div>\n\n <!-- Report 2: PhishSurf Nebula -->\n <div class=\"report-card\">\n <div class=\"report-class\">Espionage Report \u00b7 Dic 2023<\/div>\n <div class=\"report-title\">Espionage Activities Targeting European Businesses<\/div>\n <div class=\"report-meta\">\n <span class=\"report-badge badge-fin\">Banking & Finance<\/span>\n <span class=\"report-badge badge-apt\">Cyber Espionage<\/span>\n <\/div>\n <p class=\"report-summary\">\n Fortgale ha identificato e iniziato a tracciare PhishSurf Nebula, gruppo di spionaggio informatico avanzato con focus primario su entit\u00e0 del settore bancario e finanziario europeo. Il gruppo dimostra capacit\u00e0 di bypass MFA e tecniche di phishing sofisticate\n indicative di risorse significative alle spalle.\n <\/p>\n <div class=\"report-actor\">Threat Actor: <span>PhishSurf Nebula<\/span><\/div>\n <div class=\"report-actor\">Target: <span>Banking & Finance, Europa<\/span><\/div>\n <a href=\"https:\/\/fortgale.com\/blog\/featured\/espionage-activities-targeting-european-businesses\/\" class=\"report-link\" target=\"_blank\" rel=\"noopener\">\n Leggi il report completo \u2192\n <\/a>\n <\/div>\n\n <!-- Report 3: Nebula Broker -->\n <div class=\"report-card\">\n <div class=\"report-class\">Threat Actor Report \u00b7 Dic 2023<\/div>\n <div class=\"report-title\">Nebula Broker: Offensive Operations Made in Italy<\/div>\n <div class=\"report-meta\">\n <span class=\"report-badge badge-local\">Threat Actor Italiano<\/span>\n <span class=\"report-badge badge-local\">Custom Malware<\/span>\n <\/div>\n <p class=\"report-summary\">\n Fortgale traccia Nebula Broker dall’marzo 2022: threat actor italiano che opera con malware sviluppato internamente denominato BrokerLoader, con targeting specifico di sistemi e organizzazioni italiane. Un caso raro di attore locale con capacit\u00e0 offensive\n custom, documentato in esclusiva dalla ricerca Fortgale.\n <\/p>\n <div class=\"report-actor\">Threat Actor: <span>Nebula Broker<\/span><\/div>\n <div class=\"report-actor\">Malware: <span>BrokerLoader (custom)<\/span><\/div>\n <a href=\"https:\/\/fortgale.com\/blog\/featured\/nebula-broker-offensive-operations-italy\/\" class=\"report-link\" target=\"_blank\" rel=\"noopener\">\n Leggi il report completo \u2192\n <\/a>\n <\/div>\n\n <\/div>\n\n <div class=\"mitre-strip\">\n <span class=\"mitre-label\">MITRE ATT&CK Coverage<\/span>\n <div class=\"mitre-tactics\">\n <span class=\"tactic\">Initial Access<\/span>\n <span class=\"tactic\">Execution<\/span>\n <span class=\"tactic\">Persistence<\/span>\n <span class=\"tactic\">Privilege Escalation<\/span>\n <span class=\"tactic\">Defense Evasion<\/span>\n <span class=\"tactic\">Credential Access<\/span>\n <span class=\"tactic\">Discovery<\/span>\n <span class=\"tactic\">Lateral Movement<\/span>\n <span class=\"tactic\">Collection<\/span>\n <span class=\"tactic\">Exfiltration<\/span>\n <span class=\"tactic\">Command & Control<\/span>\n <\/div>\n <\/div>\n\n <\/div>\n <\/section>\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 COSA PRODUCE LA CTI \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-alt\">\n <div class=\"section-narrow\">\n <span class=\"section-tag\">I deliverable CTI<\/span>\n <h2>Intelligence applicabile,\n <br>non solo informativa.<\/h2>\n <p class=\"section-lead\">\n La differenza tra intelligence utile e intelligence decorativa \u00e8 l’applicabilit\u00e0 immediata. Ogni deliverable Fortgale \u00e8 progettato per tradursi in un’azione concreta: un blocco, un aggiornamento delle regole, una decisione del CISO.\n <\/p>\n\n <div class=\"deliverables\">\n\n <div class=\"del-card\">\n <div class=\"del-icon\">\ud83c\udfaf<\/div>\n <div class=\"del-title\">IOC Feed Proprietari<\/div>\n <p class=\"del-desc\">\n Indicatori di Compromissione estratti direttamente dagli incidenti gestiti e dalla ricerca su infrastrutture offensive attive. IP, domini, hash, URL e pattern comportamentali applicati automaticamente ai sistemi di difesa dei clienti SOC nel momento della\n rilevazione, senza aspettare l’aggiornamento di un vendor esterno.\n <\/p>\n <div class=\"del-tags\">\n <span class=\"del-tag\">IP maliziosi<\/span>\n <span class=\"del-tag\">Domini C2<\/span>\n <span class=\"del-tag\">Hash malware<\/span>\n <span class=\"del-tag\">URL pattern<\/span>\n <span class=\"del-tag\">YARA rules<\/span>\n <\/div>\n <\/div>\n\n <div class=\"del-card\">\n <div class=\"del-icon\">\ud83d\udccb<\/div>\n <div class=\"del-title\">Threat Intelligence Report<\/div>\n <p class=\"del-desc\">\n Analisi approfondite su threat actor, campagne attive e malware emergenti. Prodotti in due formati: report tecnico per gli analisti SOC (TTP dettagliate, IOC, MITRE ATT&CK mapping) e report esecutivo per il management (impatto business, rischio stimato,\n azioni prioritarie). Pubblicati in italiano e inglese.\n <\/p>\n <div class=\"del-tags\">\n <span class=\"del-tag\">Threat Actor Profile<\/span>\n <span class=\"del-tag\">Campaign Analysis<\/span>\n <span class=\"del-tag\">TTP Mapping<\/span>\n <span class=\"del-tag\">Executive Summary<\/span>\n <\/div>\n <\/div>\n\n <div class=\"del-card\">\n <div class=\"del-icon\">\u26a0\ufe0f<\/div>\n <div class=\"del-title\">Advisory Verticali<\/div>\n <p class=\"del-desc\">\n Alert mirati per settore: quando il team CTI rileva campagne dirette specificamente verso manifatturiero, finanza, sanit\u00e0 o infrastrutture critiche italiane, i clienti ricevono un advisory dedicato con indicazioni operative immediate per ridurre l’esposizione\n prima che l’attacco materializzi.\n <\/p>\n <div class=\"del-tags\">\n <span class=\"del-tag\">Manifatturiero<\/span>\n <span class=\"del-tag\">Banking<\/span>\n <span class=\"del-tag\">Sanit\u00e0<\/span>\n <span class=\"del-tag\">Infrastrutture<\/span>\n <span class=\"del-tag\">Supply Chain<\/span>\n <\/div>\n <\/div>\n\n <div class=\"del-card\">\n <div class=\"del-icon\">\ud83d\udd75\ufe0f<\/div>\n <div class=\"del-title\">Monitoraggio Dark & Deep Web<\/div>\n <p class=\"del-desc\">\n Presenza continuativa negli ambienti dove i threat actor operano: marketplace criminali, forum underground, leak site dei gruppi ransomware, canali Telegram e reti anonimizzate. Il team monitora in tempo reale la comparsa di credenziali aziendali, dati\n interni, menzioni di specifiche organizzazioni e pianificazione di attacchi imminenti.\n <\/p>\n <div class=\"del-tags\">\n <span class=\"del-tag\">Credential Leak<\/span>\n <span class=\"del-tag\">Data Exposure<\/span>\n <span class=\"del-tag\">Ransomware Leak Site<\/span>\n <span class=\"del-tag\">Forum Monitoring<\/span>\n <\/div>\n <\/div>\n\n <\/div>\n <\/div>\n <\/section>\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 AI + HUMAN \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-dark\">\n <div class=\"section-narrow\">\n <span class=\"section-tag section-tag-amber\">Il modello operativo<\/span>\n <h2>Analisti aumentati dall’AI.\n <br>Non sostituiti.<\/h2>\n <p class=\"section-lead\">\n L’intelligenza artificiale trasforma i dati grezzi in segnali; gli analisti trasformano i segnali in decisioni. Fortgale ha sviluppato internamente gli strumenti AI che amplificano le capacit\u00e0 del proprio team \u2014 senza cedere il controllo a piattaforme\n esterne e senza compromettere l’indipendenza delle analisi.\n <\/p>\n\n <div class=\"two-col\">\n <div>\n <div class=\"feature-list\">\n <div class=\"feature-item\">\n <div class=\"feature-num\">01<\/div>\n <div class=\"feature-text\">\n <h4>Correlazione automatizzata su larga scala<\/h4>\n <p>Sistemi AI interni correlano milioni di eventi di rete, endpoint e threat feed in tempo reale, identificando pattern che richiederebbero ore di analisi manuale. Gli analisti ricevono segnali gi\u00e0 prioritizzati, non rumore\n grezzo.<\/p>\n <\/div>\n <\/div>\n <div class=\"feature-item\">\n <div class=\"feature-num\">02<\/div>\n <div class=\"feature-text\">\n <h4>Pattern recognition su campagne note<\/h4>\n <p>I modelli interni riconoscono le fingerprint dei threat actor tracciati \u2014 infrastrutture, toolset, comportamenti \u2014 accelerando l’attribuzione e riducendo i tempi di risposta da ore a minuti.<\/p>\n <\/div>\n <\/div>\n <div class=\"feature-item\">\n <div class=\"feature-num\">03<\/div>\n <div class=\"feature-text\">\n <h4>Analisi indipendente, verificabile<\/h4>\n <p>Fortgale non dipende da algoritmi black-box di terze parti. Ogni analisi \u00e8 prodotta dal team, con metodi documentati e risultati verificabili. Quando Fortgale attribuisce una campagna a un threat actor, \u00e8 perch\u00e9 ha le\n prove tecniche \u2014 non perch\u00e9 un vendor esterno lo ha suggerito.<\/p>\n <\/div>\n <\/div>\n <div class=\"feature-item\">\n <div class=\"feature-num\">04<\/div>\n <div class=\"feature-text\">\n <h4>Intelligence che migliora nel tempo<\/h4>\n <p>Ogni nuovo incidente arricchisce i modelli interni. La CTI Fortgale diventa progressivamente pi\u00f9 accurata per i clienti che hanno una relazione continuativa: il contesto storico della loro infrastruttura \u00e8 parte integrante\n dell’analisi di ogni nuovo evento.<\/p>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n\n <div>\n <div class=\"intel-box\">\n <span class=\"section-tag section-tag-light\" style=\"margin-bottom:16px; display:block;\">Indipendenza come standard<\/span>\n <h3 style=\"font-size:22px; font-weight:800; color:var(--white); margin-bottom:20px; line-height:1.3;\">\n Le nostre analisi non passano\n <br>da nessun vendor.\n <\/h3>\n <p style=\"font-size:14px; color:rgba(240,246,252,0.68); line-height:1.8; margin-bottom:20px;\">\n Molti provider di CTI aggregano dati acquistati da VirusTotal, Recorded Future, Mandiant o altri aggregatori globali. Il valore aggiunto \u00e8 minimo \u2014 e lo stesso feed \u00e8 venduto a centinaia di clienti contemporaneamente.\n <\/p>\n <p style=\"font-size:14px; color:rgba(240,246,252,0.68); line-height:1.8; margin-bottom:28px;\">\n Fortgale produce analisi originali perch\u00e9 \u00e8 l’unico modo per generare intelligence che vale davvero: quella che i tuoi avversari non sanno che hai.\n <\/p>\n <div>\n <span class=\"cert-badge\">ISO 27001<\/span>\n <span class=\"cert-badge\">MITRE ATT&CK<\/span>\n <span class=\"cert-badge\">STIX \/ TAXII<\/span>\n <span class=\"cert-badge\">OSINT avanzata<\/span>\n <span class=\"cert-badge\">NIS2 Ready<\/span>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 SERVIZI CORRELATI \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section\">\n <div class=\"section-narrow\">\n <span class=\"section-tag\">Intelligence applicata<\/span>\n <h2>La CTI non \u00e8 un servizio isolato.\n <br>\u00c8 il motore di tutta la difesa.<\/h2>\n <p class=\"section-lead\">\n L’intelligence ha valore solo quando si traduce in protezione concreta. Fortgale integra la CTI direttamente nel SOC e nel servizio MDR, creando un ciclo continuo: rilevamento \u2192 intelligence \u2192 difesa migliorata.\n <\/p>\n\n <div class=\"services-grid\">\n <div class=\"service-card\">\n <div class=\"service-card-tag\">Presidio operativo<\/div>\n <h3>SOC Gestito<\/h3>\n <p>Il SOC Fortgale applica l’intelligence CTI alle regole di detection in tempo reale. Ogni nuovo IOC o TTP identificato viene distribuito immediatamente ai sistemi di tutti i clienti monitorati.<\/p>\n <a href=\"https:\/\/fortgale.com\/it\/soc-gestito\/\">Scopri il SOC \u2192<\/a>\n <\/div>\n <div class=\"service-card\">\n <div class=\"service-card-tag\">Rilevamento avanzato<\/div>\n <h3>Managed Detection & Response<\/h3>\n <p>L’MDR Fortgale non usa solo le regole del vendor EDR: le arricchisce con l’intelligence proprietaria sui threat actor attivi, aumentando il tasso di rilevamento e riducendo i falsi positivi.<\/p>\n <a href=\"https:\/\/fortgale.com\/it\/managed-detection-and-response\/\">Scopri MDR \u2192<\/a>\n <\/div>\n <div class=\"service-card\">\n <div class=\"service-card-tag\">Risposta all’emergenza<\/div>\n <h3>Incident Response<\/h3>\n <p>Durante un incidente, la CTI accelera l’attribuzione e il contenimento. Sapere chi sta attaccando e come opera riduce drasticamente il tempo di risposta e limita il danno complessivo.<\/p>\n <a href=\"https:\/\/fortgale.com\/it\/#contatti\/\">Contatta il team IR \u2192<\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 FAQ \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-alt\">\n <div class=\"section-narrow\">\n <span class=\"section-tag\">Domande frequenti<\/span>\n <h2>Tutto quello che devi sapere\n <br>sulla CTI Fortgale<\/h2>\n\n <div class=\"faq-list\">\n <div class=\"faq-item open\">\n <button class=\"faq-question\" onclick=\"toggleFaq(this)\">\n Cosa distingue la CTI Fortgale dai feed di intelligence commerciali?\n <span class=\"faq-icon\">+<\/span>\n <\/button>\n <div class=\"faq-answer\">\n La maggior parte dei vendor di Cyber Threat Intelligence vende feed generici acquistati da aggregatori globali. Fortgale genera la propria intelligence da tre fonti primarie: gli incidenti gestiti quotidianamente (che producono IOC e TTP osservati in\n condizioni reali), la ricerca indipendente su threat actor e campagne attive, e il monitoraggio continuativo di ambienti deep e dark web. Questa intelligence \u00e8 contestuale, aggiornata e applicabile immediatamente all’infrastruttura\n delle aziende clienti.\n <\/div>\n <\/div>\n <div class=\"faq-item\">\n <button class=\"faq-question\" onclick=\"toggleFaq(this)\">\n Cosa sono gli IOC e come vengono applicati alla protezione aziendale?\n <span class=\"faq-icon\">+<\/span>\n <\/button>\n <div class=\"faq-answer\">\n Gli Indicatori di Compromissione (IOC) sono elementi tecnici \u2014 indirizzi IP, domini, hash di file, URL \u2014 che identificano infrastrutture offensive o malware noti. Fortgale produce IOC direttamente dagli incidenti gestiti e dalla ricerca su threat actor.\n Questi indicatori vengono applicati preventivamente ai sistemi di difesa dei clienti (SIEM, EDR, firewall) in modo da bloccare automaticamente le minacce note prima che raggiungano l’infrastruttura.\n <\/div>\n <\/div>\n <div class=\"faq-item\">\n <button class=\"faq-question\" onclick=\"toggleFaq(this)\">\n Cosa include il monitoraggio dark web di Fortgale?\n <span class=\"faq-icon\">+<\/span>\n <\/button>\n <div class=\"faq-answer\">\n Il servizio di monitoraggio dark web Fortgale include: ricerca di credenziali aziendali compromesse in vendita nei marketplace criminali, monitoraggio dei forum dove i threat actor discutono o pianificano attacchi verso specifici settori o aziende, rilevamento\n di dati aziendali (documenti, database, codice sorgente) pubblicati o messi all’asta dopo una violazione, e tracking dei leak site dei principali gruppi ransomware per rilevare tempestivamente la comparsa di dati clienti.\n <\/div>\n <\/div>\n <div class=\"faq-item\">\n <button class=\"faq-question\" onclick=\"toggleFaq(this)\">\n A chi sono destinati i report di threat intelligence Fortgale?\n <span class=\"faq-icon\">+<\/span>\n <\/button>\n <div class=\"faq-answer\">\n Fortgale produce due tipi di report: report tecnici dettagliati destinati ai team di sicurezza (analisti SOC, threat hunter, CISO tecnici), che includono IOC, TTP mappati su MITRE ATT&CK e indicazioni operative; e report esecutivi destinati al management\n aziendale, che traducono le minacce in termini di rischio business, impatto potenziale e azioni prioritarie. Entrambi sono disponibili in italiano e inglese.\n <\/div>\n <\/div>\n <div class=\"faq-item\">\n <button class=\"faq-question\" onclick=\"toggleFaq(this)\">\n La CTI Fortgale \u00e8 accessibile anche senza il servizio SOC gestito?\n <span class=\"faq-icon\">+<\/span>\n <\/button>\n <div class=\"faq-answer\">\n S\u00ec. Il servizio di Cyber Threat Intelligence Fortgale \u00e8 disponibile sia come componente integrata del SOC gestito (nel qual caso l’intelligence viene applicata automaticamente alle regole di detection), sia come servizio standalone per aziende che dispongono\n gi\u00e0 di un team di sicurezza interno e vogliono arricchirlo con intelligence proprietaria, IOC feed applicabili e report su threat actor. Contattaci per una valutazione delle opzioni pi\u00f9 adatte alla tua struttura.\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 CTA FINALE \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"cta-section\">\n <span class=\"section-tag section-tag-light\" style=\"display:block; margin-bottom:16px;\">Inizia con la CTI<\/span>\n <h2>Cosa sa il tuo avversario\n <br>che tu non sai ancora?<\/h2>\n <p>Il monitoraggio dark web, gli IOC proprietari e i report Fortgale ti danno accesso all’intelligence che normalmente solo i grandi enterprise possono permettersi. Parla con il nostro team e scopri cosa stiamo tracciando oggi.<\/p>\n <div class=\"cta-buttons\">\n <a href=\"https:\/\/fortgale.com\/it\/#contatti\/\" class=\"btn-primary\">Richiedi una briefing CTI<\/a>\n <a href=\"https:\/\/fortgale.com\/blog\/\" class=\"btn-secondary\">Leggi i report pubblici \u2192<\/a>\n <\/div>\n <\/section>\n\n <script>\n function toggleFaq(btn) {\n btn.closest('.faq-item').classList.toggle('open');\n }\n <\/script>\n\n\n\n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Cyber Threat Intelligence Proprietaria | IOC, Report e Advisory \u2014 Fortgale Intelligence proprietaria \u00b7 Non acquistata \u00b7 Generata ogni giorno Sapere prima che l’attacco accada. Fortgale non acquista feed di intelligence generici. La genera: dagli incidenti gestiti ogni giorno, dalla ricerca indipendente su threat actor globali e dal monitoraggio continuativo di ambienti che nessun vendor […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"page-templates\/full-width-page.php","meta":{"footnotes":""},"class_list":["post-13727","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages\/13727","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/comments?post=13727"}],"version-history":[{"count":10,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages\/13727\/revisions"}],"predecessor-version":[{"id":13802,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages\/13727\/revisions\/13802"}],"wp:attachment":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/media?parent=13727"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}