Real-time email threat blocking via RBL/DNSBL blocklists for mail servers.
Abusix GuardianAbusix Guardian IntelAbusix Threat Intelligence
Global IP threat intelligence search engine with attack surface mgmt
AI SPERA Criminal IP
AI-based domain & IP threat scoring API for security product integration.
alphaMountain Domain & IP ReputationalphaMountain Threat Intel & URL ClassificationalphaMountain URL Classification
Orchestrated threat intelligence platform for CTI and SOC teams
Analyst1 Orchestrated Threat Intelligence Platform
Threat intelligence and detection.
Anomali Agentic SOC PlatformAnomali Agentic AIAnomali ThreatStream
Multi-layer defense platform combining network, traffic, and endpoint security.
Antiy High-level Threat Intelligence Svc
Managed threat intel service using SNOW to classify network anomalies.
Arc4dia Advanced Threat Intelligence
Asset visibility and security for OT/IoT/IT.
Armis Centrix™ Early WarningArmis Vulnerability Intelligence Database
AI-powered CTI platform converting unstructured threat data into role-based intelligence.
asvin CTI Layer
Preemptive threat intelligence platform for incident response and hunting
Augur BlackAugur Preemptive Cybersecurity Platform
Hardware network security device for home/SMB with continuous threat updates.
Axiom Shield
Location-based physical threat risk scoring platform for global sites.
Base Operations Street-level Threat Intel
Endpoint security and threat prevention.
Bitdefender Operational Threat Intelligence
Continuous monitoring platform for third-party cybersecurity risk assessment
Bitsight Cyber Threat IntelligenceBitsight Cybersixgill
3D cyber threat visualization platform for external threat monitoring
Blackwired ThirdWatch
Zero-day threat intelligence platform with adversary monitoring & simulation
BreachX One
Active Directory password monitoring against leaked credential databases
CatchProbe Orchestration PlatformCatchProbe ThreatWay
Network security and firewalls (Quantum).
Check Point Threat IntelligenceCheck Point ThreatCloud AI
Carrier-grade email security for ISPs blocking spam, phishing, and malware
Cloudmark Threat Insight
External attack surface management platform for discovering digital assets
CloudSEK Predictive Cybersecurity
Investigative analytics platform for threat intelligence and security ops
Cognyte Cyber Security
Digital risk protection and identity threat intelligence.
Constella Dark Web MonitoringConstella HunterConstella Intelligence APIConstella Threat Intelligence Data Signals API
AI-accelerated MDR on the CORR platform: prioritized investigation queue, 24/7 SOC, broad bidirectional integrations, MobileSOC, and an agentic AI investigation pipeline.
Critical Start CTI
Real-time CVE exploitation tracker with active IP feeds and IoC visibility.
CrowdSec Live Exploit Tracker
SaaS security posture management (CrowdStrike).
CrowdStrike Falcon Threat IntelligenceCrowdStrike Threat Intelligence
A tiered cyber threat intelligence service providing detection rules from public repositories with varying levels of analysis, processing, and guidance for security teams.
CTIChef.com Detection Feeds
Continuously maps digital footprint, identifies exposures & validates exploitability
Check Point Threat Intelligence
Cyber threat intelligence sharing platform for Australian organizations
Cybermerc Aushield Defend
Brand protection platform detecting & taking down phishing, impersonation threats
ThreatBolt Intelligence
Cyber risk analytics & external infrastructure intelligence platform
Cybeta
AI-powered threat intelligence: the Vision intelligence platform, a threat-intel platform (TIP), agentic AI hunting, internet-scale ASM, and dark-web monitoring.
Cyble AmIBreachedCyble Blaze AICyble Cyber Threat Intelligence PlatformCyble HawkCyble OdinCyble Threat Intelligence PlatformCyble TIPCyble Vision
Global threat intelligence platform aggregating CTI sources with AI analysis
CyCraft CyberTotal
Real-time maritime GPS/GNSS spoofing & jamming detection without hardware.
Cydome Maritime Threat Intelligence
External threat landscape mgmt platform with predictive intelligence
Cyfirma DeCYFIR
Cyber threat intelligence platform providing actionable insights
CYJAX Cyber Threat IntelligenceCYJAX Investigative IntelligenceCYJAX Real-Time Threat Intelligence
Continuous threat intelligence and exposure management across dark, deep & clear web.
Cypho
AI-powered threat intelligence platform for real-time threat intel management
Cyware Quarterback AI
API for monitoring ransomware sites to detect org compromises & extortion
DarkOwl Ransomware API
AI platform for real-time event, threat & risk intelligence detection
DataminrThreatConnect PlatformThreatConnect PolarityThreatConnect Threat Intelligence Platform
AI-powered distributed antivirus platform for Windows home & business users.
OpenAVN Data
AI-powered DNS domain threat intelligence service for DDR 2.0 solutions.
DNSSense Cyber X-Ray
Domain intelligence platform for threat research and investigation
DomainTools Domain IntelligenceDomainTools Domain Tools
Industrial (ICS/OT) cybersecurity.
Dragos Neighborhood KeeperDragos WorldView
Enterprise cyber threat intelligence platform with remote network protection
DuskRise C25 Platform
Threat intelligence platform for collecting, analyzing, and sharing CTI data
EclecticIQ Intelligence CenterEclecticIQ Threat Intelligence Platform
AI-driven tool mapping threat intelligence to org-specific risk landscapes.
Elemendar Compass
Threat intel platform detecting mass exploitation & recon via deception nets
ELLIO New Historical IP Timeline
Passive DNS intelligence platform for threat detection and investigation.
Farsight Security DNSDB
AI-powered platform for collecting and analyzing open source threat intelligence
Feedly Threat Intelligence
XTM portfolio for threat intel, attack surface visibility & adversary simulation
Filigran eXtended Threat Management (XTM)Filigran OpenCTIFiligran Threat Management
Threat exposure mgmt platform monitoring dark/clear web for leaked credentials
Flare PRISM
Threat intelligence combining human expertise and AI: the Ignite platform spanning cyber, vulnerability, and physical security intelligence plus managed services.
Flashpoint Cyber Threat IntelligenceFlashpoint IgniteFlashpoint Ignite PlatformFlashpoint Managed IntelligenceFlashpoint Physical Security IntelligenceFlashpoint Threat IntelligenceFlashpoint Vulnerability Intelligence
AI-driven platform that operationalizes threat intel into risk-prioritized actions
Gambit KnightGuard
Google's zero trust implementation for secure access without VPN
Google Threat IntelligenceMandiant Platform
Real-time, verifiable network threat intelligence from primary-sourced internet scanning: blocklists, C2 detection, CVE early warning, and event-driven feeds.
GreyNoise BlockGreyNoise Block: Fully configurable, real-time blocklistsGreyNoise C2 DetectionGreyNoise CVE Early WarningGreyNoise FeedsGreyNoise Platform
External attack surface management platform with threat intelligence
Group-IB Cyber Fraud Intelligence PlatformGroup-IB Threat Intelligence Platform
Platform for breach detection, dark web monitoring, and supply chain threat intel
HackNoticeHackNotice ServicesHackNotice Superior Threat Intelligence
Healthcare-specific cyber threat intelligence & situational awareness platform.
HEAL Security
CTI services combining human expertise and AI for threat analysis
Hitachi Cyber Cyber Threat Intelligence Services
SIEM/SOAR platform for threat detection, response automation, and compliance
Hoplite Border Gateway Protocol DefenseHoplite Threat Intelligence
AI Cyber Threat Intelligence
Houdin.io
Infrastructure intelligence platform for threat hunting and investigation
HYAS Insight
Onchain firewall that blocks malicious blockchain transactions in real-time
Hypernative Screener
Threat intel & TPRM platform detecting adversary intent before exploitation.
iCOUNTER CTOS
Internet infrastructure intelligence platform for adversary detection & response.
Infrawatch Beta Access
Cyber threat intelligence from the criminal underground: curated CTI, threat exposure, threat hunting, adversary, malware, credential, and vulnerability intelligence.
Intel 471 Adversary IntelligenceIntel 471 Cyber Threat ExposureIntel 471 Cyber Threat HuntingIntel 471 Cyber Threat IntelligenceIntel 471 Vulnerability Intelligence
Internet 2.0, an Australian company founded in 2018, combines threat intelligence with secure browsing and VPN technology.
Internet 2.0
Intrinsec, founded in France in 1995, provides cybersecurity consulting, managed security services, and threat intelligence.
Intrinsec
Generates geo-based firewall rules to block/allow traffic by country or ASN
IP2Location IP2Proxy Proxy Detection Database
API for IP reputation lookup and email validation with fraud risk scoring.
IPASIS Bot Detection and Fraud Prevention API
Daily threat intel feed identifying malicious IPs with abuse classifications
IPQS IP Address Abuse FeedIPQS IP Address Block ListIPQS Proxy Detection APIIPQS Proxy Detection DatabaseIPQualityScore IP Risk Score API
Network detection and response platform for threat detection and visibility
IronNet IronRadar
Irregular Platform
Threat intelligence database with 500M+ malicious IPs, domains, and IOCs via API
isMalicious Threat Intelligence
Remote access VPN with zero trust security and unified client access
Ivanti Neurons for Vulnerability Knowledge Base
AI-powered Android bug report analyzer that translates logs into readable insights.
iVerify Threat Intelligence
iZOOlogic, founded in the UK in 2010, focuses on phishing detection, brand protection, and broader digital risk protection.
Kaspersky Lab, a large (5,000+ employee) Russian company founded in 1997, provides antivirus, endpoint protection, and threat intelligence for consumers and enterprises worldwide.
AI-powered email incident response platform for phishing threat detection
Keepnet Threat Sharing
Security platform for LLM applications with red teaming and threat protection
KELA Cyber Threat Intelligence PlatformKELA InvestigateKela Proactive DefenseKELA Technical Cybercrime Intelligence
KELA, founded in Israel in 2009, provides cybercrime intelligence and dark-web threat monitoring to protect organizations from targeted attacks.
Kela Targeted Cyber Intelligence
Vulnerability intel platform with pre-NVD CVE enrichment, AI scoring & alerts.
Loginsoft VuInerability Intelligence LOVI
Automated mobile app risk analysis and reputation scoring service
Lookout Threat Intelligence Services
Pre-attack threat intel platform detecting attacker infrastructure before launch
Malanta
Visual link analysis platform for OSINT and threat investigations
Maltego GraphMaltego Professional Lite
Automated threat intel service with IoC search, feeds, and SIEM/SOAR integrations.
Maltiverse
Enterprise threat intelligence feeds covering malware, phishing, C2, and IPs
Malware Patrol Enterprise CTIMalware Patrol MCP ServerMalware Patrol Threat Intelligence
Massive Alliance, founded in 2013, monitors brands and protects against digital risk online.
IP intelligence, geolocation, proxy detection, and fraud prevention service
MaxMind Fraud PreventionMaxMind GeoIP InsightsMaxMind IP Geolocation API
Mollitiam Industries, a Spanish company founded in 2015, provides open-source intelligence (OSINT) and cyber-intelligence technology for governments and enterprises.
MOLLITIAM INDUSTRIES
Managed ruleset service for cloud-native WAFs across AWS, Azure, and GCP
MonitorApp AILabs
Cloud-based DDoS mitigation service with hybrid on-premise protection
NETSCOUT ATLAS Intelligence Feed (AIF)
Enterprise real-time cyber threat intelligence platform.
Ninja Signal
AI-powered edge firewall for IIoT devices with zero-day threat detection
Nothreat ThreatShield
OT and IoT security.
Nozomi Networks Threat IntelligenceNozomi Threat Intelligence
On-premises DDoS mitigation appliance for service providers
NSFOCUS Threat Intelligence
Government and enterprise investigators use Ntrepid's anonymous internet-access technology, built since the company's 2003 founding.
Ntrepid
Nucleon, an early-stage Bulgarian company founded in 2018, provides threat-intelligence and IP-reputation data feeds.
Nucleon
Adversary-generated threat intelligence platform for attack surface visibility.
Nucleon Cyber AGTI Platform
Software for conducting behavioral threat assessments using standardized frameworks
Ontic Risk Intelligence
Critical-infrastructure and OT protection on the MetaDefender platform: file security/CDR, OT security, industrial firewall, optical diode, and network access control.
OPSWAT MetaDefender InSights C2
Orange Cyberdefense, part of the Orange Group and dating to 1988, provides managed security services, threat intelligence, and cybersecurity consulting across Europe.
Cyber risk assessment platform for insurance underwriting and portfolio mgmt.
Orpheus Cyber Threat Intelligence
AI-powered platform for detecting and countering information threats.
Osavul
PeakMetrics, an early-stage company founded in 2019, provides disinformation and narrative-intelligence monitoring technology.
PeakMetrics
PhishTank, dating to 2006 and run by Cisco Talos, is a free, community-driven database of known phishing sites.
Phishtank
Security validation: breach and attack simulation, autonomous penetration testing, exposure validation, and an AI-agent swarm uniting them into one loop.
Picus Threat Library
Malware intelligence marketplace aggregating multiple detection engines
PolySwarm Scan Files or URLs for threats
Risk intelligence platform for supply chain cyber risk assessment & monitoring
Prodaft CATALYSTU.S.T.A. Cyber Threat Intelligence Platform
Profero Platform
The Honeynet Project, a nonprofit dating to 1999, studies cyber threats through honeypot technology and publishes its tools as open source.
Project Honeynet
Threat intel firm identifying human actors behind cyber threats.
Provenance Cyber Security Solutions
Q6 Cyber, founded in 2011, monitors the dark web for cybercrime intelligence focused on financial fraud.
Q6 Cyber
QuoIntelligence, a German company founded in 2018, provides cyber threat intelligence and geopolitical risk analysis.
QuoIntelligence
Cyber intelligence platform for threat detection and security posture mgmt
R-MOR RECONIZER™
Threat intelligence platform.
Recorded Future PlatformRecorded Future Threat IntelligenceSecurityTrails API
Cloud-based IoT/OT asset intelligence engine for device profiling and OEM detection.
Redinent Threat Intelligence
CTI platform for threat analysis, dark web monitoring, and data breach detection
Resecurity Cyber Threat IntelligenceResecurity Nex-Gen Cybersecurity Platform
Ripjar, founded in the UK in 2014 and backed by Long Ridge Equity Partners, provides AI-driven data intelligence and financial-crime detection.
Ripjar
RiskAnalytics, founded in 2015, feeds third-party risk intelligence and threat data to security teams.
AI-powered EASM platform for discovering and prioritizing external risks
RiskProfiler - Cyber Threat Intelligence
AI-powered data lake for structured/unstructured data discovery & analysis.
S2T GoldenSpear Deep Fusion
Virtual asset intelligence solution tracking cryptocurrency transactions
S2W EYEZS2W QUAXAR
AI-driven CSPM for multi-cloud risk detection and compliance monitoring
Sec1 ZeroDefender
Seclytics, founded in 2015, provides predictive threat intelligence aimed at spotting emerging attack infrastructure before it's weaponized.
Seclytics
Attack surface intelligence platform for threat hunting and asset discovery
SecurityScorecard Intelligence Feeds
API providing historical & current DNS, WHOIS, and domain intelligence data.
SecurityTrails API™
Domain reputation threat intelligence feeds for malicious domain detection
SecurityZones SURBL BV
CTI platform providing structured threat intelligence and analysis
Sekoia Cyber Threat Intelligence
BYOD management solution for securing corporate data on employee-owned devices
Seqrite Threat Intel
OSINT tool for digital identity investigation across 600+ public sources.
ShadowDragon Investigate
Shadowserver, a nonprofit founded in 2004, provides cyber threat intelligence and internet-scale security monitoring.
Shadowserver
Preemptive threat intelligence built on DNS/infrastructure data: track malicious infrastructure before it's weaponized, brand protection, and traffic-origin unmasking.
Silent Push Preemptive Cyber DefenseSilent Push Automated IntelligenceSilent Push Brand ProtectionSilent Push Feeds APISilent Push Threat HuntingSilent Push Traffic Origin
AI-powered threat intelligence platform for cyber, geopolitical & physical risks
Silobreaker Intelligence Platform
Dark web monitoring platform for threat detection and fraud protection
SOC Radar Agentic Threat IntelligenceSOC Radar Cyber Threat IntelligenceSOC Radar Extended Threat Intelligence Platform
Custom automation workflows for identity exposure data integration into SIEM/SOAR
SpyCloud Investigations Module
Phishing threat intel platform detecting phishing URLs, kits & brand impersonation.
StalkPhish.io
Real-time threat intelligence platform for external cyber threat defense
Cymru RADARTeam Cymru Pure Signal™ Scout
Threat detection, correlation, and intel feed platform for SecOps teams.
Tego Cyber
EDR solution with automated threat detection, remediation, and integrated NGAV
TEHTRIS Threat Intelligence
Terrogence, founded in Israel in 2004, provides cyber threat intelligence and OSINT investigation services.
Terrogence Ltd.
Threat Intelligence, an Australian company founded in 2011, provides cybersecurity consulting, penetration testing, and managed detection services.
Threat Intelligence
Converts unstructured OSINT & darknet signals into structured STIX 2.1 threat intelligence
Threat Intelligence Platform
Enterprise threat intelligence platform with APAC focus and adversary tracking
ThreatBook Advanced Threat Intelligence (ATI)
ThreatFabric, a Dutch company founded in 2016, provides a mobile fraud-detection and malware-intelligence platform.
ThreatFabric
AI-powered threat intelligence platform with search, risk assessment & alerts
ThreatMon Cyber Threat IntelligenceThreatMon AI
Threat intelligence platform for detection, investigation, and response
ThreatQuotient ThreatQ Platform
Cloud service that automates threat blocking on firewalls, routers & switches
ThreatSTOP IP Defense
Automates security tool stack optimization based on threat profiles
Tidal Cyber Sandbox
Threat intel service focused on adversary attribution and monitoring
Unit 221B Threat IntelligenceUnit221B eWitness
Cloud security for connected vehicles and mobility.
Upstream AutoThreat PROUpstream AutoThreat® PRO
Vannevar Labs, a large (100+ employee) company founded in 2019, provides a national-security AI and data-analytics platform.
Vannevar Labs
Weekly threat intelligence briefings published by VerSprite
VerSprite Weekly Threat Intelligence
GenAI-powered automotive security platform for risk mgmt & threat detection
VicOne xAurient
Proactive service scanning systems for signs of past/ongoing breaches & malware
Viettel Threat Intelligence (VCS-Threat Intelligence)
Virus Bulletin, founded in the UK in 1989, is an independent malware-research and testing publication.
VirusBTN
VirusTotal, founded in Spain in 2004 and later acquired by Google (Chronicle), is a free online aggregator for scanning files and URLs for malware.
Virustotal
Malware sandboxing platform for threat analysis and detection in SOCs
VMRay UniqueSignal
Vuln & exploit intelligence platform for prioritizing vulnerability response
VulnCheck
Webroot, a large (250+ employee) company founded in 1997 and now part of OpenText, provides cloud-based endpoint antivirus and threat intelligence.
Free breach monitoring platform for compromised credential detection & alerting.
Webz.io
External cybersecurity and digital risk protection.
ZeroFox Dark Web IntelligenceZeroFox Intelligence SearchZeroFox Threat Intelligence Feeds
SIEM platform with real-time threat detection, log analysis, and visualization
Zeronsec Threat Intelligence
Curated phishing threat intelligence feed with predictive detection
zvelo PhishBlocklist™
AI-powered workflow automation platform for cybersecurity operations
Zynap Threat Intelligence
