Cybolt priority brands for RankPage brand_boost (Mother LATAM/MX)

README.md

Cybolt priority brands (RankPage)

Lista unificada de marcas para brand_boost / priorización de mercado en Mother ↔ RankPage.

Uso previsto

• Config por Project en RankPage (ej. config.priority_brands).
• Match sobre título + vendor/producto extraído (evitar chrome HTML / nav de CISA/GitHub).
• Contribuye a prioridad de negocio; no sustituye señales de exploit (KEV real, PoC, trending).

Campos

Campo	Descripción
name	Marca canónica
aliases	Variantes / productos / nombres comerciales
weight	Intensidad sugerida 0..1 del boost

Fuentes

• prompts.py (briefing Mother: Microsoft, Cisco, Palo Alto, Fortinet)
• skills/cybolt-presales/ (portafolio + vendors frecuentes MX/LATAM)

Semántica sugerida (contrato)

brand_boost ∈ [0, 1]  # max weight de marcas matcheadas
priority = clamp(base + 0.20 * operator_boost + α * brand_boost - noise_penalty)

α tipico: 0.10–0.15 (menor que operator_boost para no opacar feedback humano).

cybolt-priority-brands.json

{
  "version": "1.0.0",
  "project": "mother",
  "description": "Marcas prioritarias Cybolt (LATAM/MX) para RankPage brand_boost. Fuente: prompts Mother + skills cybolt-presales.",
  "sources": [
    "backend/apps/integrations/prompts.py",
    "skills/cybolt-presales/"
  ],
  "notes": [
    "Lista unificada: portafolio Cybolt + vendors frecuentes en briefing/prompts.",
    "weight 0..1: intensidad sugerida del brand_boost (no reemplaza exploit/KEV).",
    "Match recomendado: título + vendor/producto extraído, no HTML/nav scrapeado.",
    "Aliases case-insensitive; preferir match de palabra/frase completa."
  ],
  "priority_brands": [
    {
      "name": "Cisco",
      "aliases": [
        "cisco talos",
        "talos",
        "secure firewall",
        "firepower",
        "ftd",
        "duo",
        "meraki",
        "splunk",
        "umbrella",
        "ise",
        "secure access",
        "secure endpoint",
        "secure client",
        "hypershield"
      ],
      "weight": 1.0
    },
    {
      "name": "Palo Alto Networks",
      "aliases": [
        "palo alto",
        "paloaltonetworks",
        "cortex",
        "cortex xdr",
        "cortex xsoar",
        "prisma",
        "prisma access",
        "prisma cloud",
        "unit 42",
        "unit42"
      ],
      "weight": 1.0
    },
    {
      "name": "Microsoft",
      "aliases": [
        "msrc",
        "defender",
        "microsoft defender",
        "mde",
        "defender for endpoint",
        "microsoft sentinel",
        "m365",
        "office 365",
        "entra",
        "entra id",
        "azure ad",
        "azure",
        "intune"
      ],
      "weight": 1.0
    },
    {
      "name": "Fortinet",
      "aliases": [
        "fortigate",
        "fortios",
        "fortiweb",
        "fortisiem",
        "fortinet ot",
        "fortigate rugged"
      ],
      "weight": 0.9
    },
    {
      "name": "Broadcom",
      "aliases": [
        "symantec",
        "carbon black",
        "vmware carbon black",
        "symantec dlp",
        "symantec endpoint",
        "cloudsoc"
      ],
      "weight": 0.9
    },
    {
      "name": "Trend Micro",
      "aliases": [
        "trendmicro",
        "vision one",
        "deep security",
        "apex one",
        "cloud one"
      ],
      "weight": 0.9
    },
    {
      "name": "SentinelOne",
      "aliases": [
        "sentinel one",
        "singularity"
      ],
      "weight": 0.9
    },
    {
      "name": "Claroty",
      "aliases": [
        "medigate"
      ],
      "weight": 1.0
    },
    {
      "name": "TXOne",
      "aliases": [
        "txone networks",
        "stellar",
        "edge ips"
      ],
      "weight": 1.0
    },
    {
      "name": "Zscaler",
      "aliases": [
        "zia",
        "zpa"
      ],
      "weight": 0.85
    },
    {
      "name": "Cloudflare",
      "aliases": [
        "cloudflare waf",
        "magic transit",
        "magic wan"
      ],
      "weight": 0.85
    },
    {
      "name": "Proofpoint",
      "aliases": [
        "proofpoint tap",
        "proofpoint dlp"
      ],
      "weight": 0.8
    },
    {
      "name": "Imperva",
      "aliases": [
        "imperva waf",
        "imperva dam"
      ],
      "weight": 0.8
    },
    {
      "name": "Netscout",
      "aliases": [
        "arbor",
        "ngenius",
        "ngeniusone",
        "omnis",
        "omnis cyber intelligence",
        "sightline"
      ],
      "weight": 0.8
    },
    {
      "name": "Check Point",
      "aliases": [
        "checkpoint",
        "check point quantum",
        "harmony"
      ],
      "weight": 0.7
    },
    {
      "name": "CrowdStrike",
      "aliases": [
        "crowdstrike falcon",
        "falcon"
      ],
      "weight": 0.7
    },
    {
      "name": "Exabeam",
      "aliases": [],
      "weight": 0.75
    },
    {
      "name": "LogRhythm",
      "aliases": [],
      "weight": 0.7
    },
    {
      "name": "IBM",
      "aliases": [
        "qradar",
        "ibm qradar"
      ],
      "weight": 0.75
    },
    {
      "name": "Stellar Cyber",
      "aliases": [
        "stellar cyber"
      ],
      "weight": 0.7
    },
    {
      "name": "Elastic",
      "aliases": [
        "elasticsearch",
        "elk",
        "elastic security",
        "elastic observability"
      ],
      "weight": 0.7
    },
    {
      "name": "Dynatrace",
      "aliases": [],
      "weight": 0.7
    },
    {
      "name": "GitLab",
      "aliases": [],
      "weight": 0.65
    },
    {
      "name": "Veracode",
      "aliases": [],
      "weight": 0.65
    },
    {
      "name": "Checkmarx",
      "aliases": [
        "cxsast",
        "cxsca",
        "kics"
      ],
      "weight": 0.65
    },
    {
      "name": "Jamf",
      "aliases": [
        "jamf pro",
        "jamf protect",
        "jamf connect"
      ],
      "weight": 0.65
    },
    {
      "name": "Apple",
      "aliases": [
        "macos",
        "ios",
        "ipados"
      ],
      "weight": 0.5
    },
    {
      "name": "Opscura",
      "aliases": [],
      "weight": 0.8
    },
    {
      "name": "Phosphorus",
      "aliases": [],
      "weight": 0.8
    },
    {
      "name": "CyberArk",
      "aliases": [
        "cyberark pam",
        "privilege cloud"
      ],
      "weight": 0.7
    },
    {
      "name": "i2",
      "aliases": [
        "i2 group",
        "harris",
        "analyst's notebook",
        "analysts notebook",
        "analysis hub",
        "i2 connect",
        "brevis"
      ],
      "weight": 0.65
    },
    {
      "name": "Forcepoint",
      "aliases": [
        "forcepoint one",
        "forcepoint dlp"
      ],
      "weight": 0.55
    },
    {
      "name": "Fortra",
      "aliases": [
        "digital guardian"
      ],
      "weight": 0.55
    },
    {
      "name": "Tenable",
      "aliases": [
        "nessus",
        "tenable.io",
        "tenable.sc"
      ],
      "weight": 0.65
    }
  ]
}