New Lumen Threat Intelligence Brings Proactive Cloud Security to AWS
The solution extends Black Lotus Labs’ upstream threat intelligence into AWS Network Firewall, enabling organizations to detect and block cyber threats before they cause damage, without adding extra infrastructure or complexity.
Lumen Technologies has launched Lumen Defender Managed Rules for AWS Network Firewall, now available on AWS Marketplace, providing enterprises direct access to the same threat intelligence that protects Lumen’s global network. The solution extends Black Lotus Labs’ upstream threat intelligence into AWS Network Firewall, enabling organizations to detect and block cyber threats before they cause damage, without adding extra infrastructure or complexity.
The Managed Rules are available as a Managed Rule group on AWS Marketplace, allowing customers to subscribe and automatically apply rules to their AWS Network Firewalls. This provides rapid access to Black Lotus Labs’ threat intelligence, enabling enterprises to protect critical cloud deployments efficiently.
Traditional security tools often detect threats only at the point of intrusion, leaving enterprises exposed until an attack penetrates defenses. Lumen Defender addresses this by providing visibility across the global threat landscape, timely updates, high-confidence signals, and actionable context. This approach helps organizations move from reactive to proactive defense, reducing risks to enterprise assets, customer data, and operational continuity.
Black Lotus Labs, Lumen’s threat research arm, analyzes over 200 billion NetFlow sessions daily, leveraging advanced analytics, AI/ML-driven anomaly detection, and malware reverse engineering. The team maps botnet infrastructure and intercepts threats early, contributing to takedowns of advanced persistent threats and criminal proxy networks.
Lumen Defender Managed Rules for AWS Network Firewall enables organizations to block threats earlier in the kill chain, deploy continuously updated rules via AWS, and act with confidence using enriched indicators that provide severity, threat categories, and context, minimizing false positives and enabling focused response.

