Celerium

Celerium builds infrastructure for automated cyber threat intelligence sharing, centered on a Cyber Threat Intelligence (CTI) Router that ingests, normalizes, and routes structured threat indicators between organizations using the STIX and TAXII standards. The core problem it solves is one most individual security teams can’t solve alone: getting a threat indicator observed in one organization’s environment into the hands of other organizations in near-real time, in a machine-readable format their own tools can act on, rather than as a static PDF report read hours or days later. Celerium also offers CMMC compliance tooling aimed at the U.S. defense industrial base, reflecting its customer base’s heavy concentration in defense, retail, aviation, automotive, and financial services sectors that operate through Information Sharing and Analysis Organizations (ISAOs).

The company traces back to NC4, a crisis-and-threat-information-sharing firm founded in 2002 in the aftermath of the September 11 attacks. NC4 spun off its cybersecurity business unit as the independently branded Celerium in 2019, the same year NC4’s broader business was acquired by Everbridge. Headquartered in El Segundo, California, Celerium has operated as a privately held company with no publicly reported external funding round, instead building on two decades of threat-sharing infrastructure and government/ISAO relationships inherited from NC4.

Celerium’s threat-routing technology was an early mover in operationalizing STIX/TAXII-based sharing at the ISAO level, and its continued role as the technical backbone for multiple sector-specific ISAOs is a genuine, if narrow, form of validation. Because its business model depends heavily on ISAO membership and government/critical-infrastructure relationships rather than open-market SaaS sales, growth is likely to track the health of those sharing communities rather than typical enterprise software adoption curves.