The product
Gathers Threat Intelligence Feeds from publicly available sources and provides detailed output in CSV format.
The closest Combine alternatives are Webz.io, Packet Forensics Cyber Intelligence and Vultara Threat Intelligence. Picking a Combine alternative comes down to fit: Threat Intel Feeds coverage, your environment, your integrations and your budget. So each option below shows what it covers, how it deploys, its pricing model and the company behind it.
Closest 48 alternatives shownClosest matches: Webz.io, Packet Forensics Cyber Intelligence, Vultara Threat IntelligencePage updated Nov 2026
The product
Gathers Threat Intelligence Feeds from publicly available sources and provides detailed output in CSV format.
Combine is a free Threat Intel Feeds solution. The closest matches by shared tags and NIST CSF 2.0 coverage are Webz.io, Packet Forensics Cyber Intelligence, Vultara Threat Intelligence, IronNet IronRadar, and Bitdefender Operational Threat Intelligence. All 48 alternatives on this page are ranked the same way.
These 8 solutions overlap most with Combine. Each row says what the product does and, when the overlap is big enough, which capabilities it shares.
Web data platform providing open, deep & dark web APIs and monitoring.
Key features: Dark Web API for accessing deep and dark web data, Data Breach Detection API for identifying exposed credentials and breached data, Open Web APIs covering news, blogs, forums, and reviews, Lunar platform for dark web monitoring and incident response, Account takeover protection via stolen credential tracking
Commercial threat intel service for enrichment, attribution
Key features: 1 listed. See them on the Packet Forensics Cyber Intelligence page.
Shares 3 capabilities with Combine: OSINT, Cyber Threat Intelligence, Threat Feed
View Packet Forensics Cyber IntelligencePacket Forensics Cyber Intelligence alternativesCombine vs Packet Forensics Cyber Intelligence
Automotive-focused threat intelligence service producing ISO/SAE 21434 compliant
Key features: 6 listed. See them on the Vultara Threat Intelligence page.
Shares 3 capabilities with Combine: OSINT, Cyber Threat Intelligence, Threat Feed
View Vultara Threat IntelligenceVultara Threat Intelligence alternativesCombine vs Vultara Threat Intelligence
Proactive C2 threat intelligence feed for detecting adversary infrastructure
Key features: 5 listed. See them on the IronNet IronRadar page.
View IronNet IronRadarIronNet IronRadar alternativesCombine vs IronNet IronRadar
Threat intelligence platform providing global threat visibility and IoCs
Key features: 10 listed. See them on the Bitdefender Operational Threat Intelligence page.
View Bitdefender Operational Threat IntelligenceBitdefender Operational Threat Intelligence alternativesCombine vs Bitdefender Operational Threat Intelligence
Enterprise threat intelligence feeds covering malware, phishing, C2, and IPs
Key features: 10 listed. See them on the Malware Patrol Enterprise CTI page.
View Malware Patrol Enterprise CTIMalware Patrol Enterprise CTI alternativesCombine vs Malware Patrol Enterprise CTI
Threat intelligence feeds providing malware and threat data in multiple formats
Key features: 6 listed. See them on the Malware Patrol Threat Intelligence page.
View Malware Patrol Threat IntelligenceMalware Patrol Threat Intelligence alternativesCombine vs Malware Patrol Threat Intelligence
Threat intelligence feeds for SOC teams from social, dark web & botnet sources
Key features: 10 listed. See them on the ZeroFox Threat Intelligence Feeds page.
View ZeroFox Threat Intelligence FeedsZeroFox Threat Intelligence Feeds alternativesCombine vs ZeroFox Threat Intelligence Feeds
Commercial threat intel service for enrichment, attribution
Automotive-focused threat intelligence service producing ISO/SAE 21434 compliant
Proactive C2 threat intelligence feed for detecting adversary infrastructure
Threat intelligence platform providing global threat visibility and IoCs
Enterprise threat intelligence feeds covering malware, phishing, C2, and IPs
Threat intelligence feeds providing malware and threat data in multiple formats
Threat intelligence feeds for SOC teams from social, dark web & botnet sources
Cyber threat intelligence feeds for SOC and threat intelligence teams
Weekly threat intelligence briefings published by VerSprite
Behavior-based threat intel feed delivering malware IOCs with context
Curated phishing threat intelligence feed with predictive detection
AI-driven threat intel feeds for automated blocking on 20+ firewall vendors
Domain reputation threat intelligence feeds for malicious domain detection
Threat intelligence feeds covering 100+ attack types with 5-min updates
Daily threat intel feed identifying malicious IPs with abuse classifications
Real-time threat intel feeds sourced from honeypots & ISP abuse reports.
Real-time threat intel platform with IP/domain reputation scoring and low false positives.
AI-powered URL classification & IP reputation feed/API for security vendors.
Real-time CVE exploitation tracker with active IP feeds and IoC visibility.
Digital threat intel platform with 300TB+ of malware data, AI analytics & forecasting.
Early-warning feed of exploited CVEs with sensor evidence, compared against CISA KEV.
Aggregates and normalizes threat intel IOCs into a scored feed for SIEM ingestion
A tiered cyber threat intelligence service providing detection rules from public repositories with varying levels of analysis, processing, and guidance for security teams.
API providing access to compromised identity data and threat signals
Technical threat intel feed of compromised IPs/domains from cybercrime sources
Real-time C2 infrastructure detection and disruption threat intelligence feed
Investigative intelligence service for law enforcement agencies
OT/IoT threat intelligence feed for vulnerability and malware detection
CTI services combining human expertise and AI for threat analysis
AI-powered threat intelligence feed for automated DDoS protection
AI-based domain & IP threat scoring API for security product integration.
Subscription threat intel service with reports, translations & security notifications.
Managed CTI service monitoring dark web & open sources for emerging threats.
AI-powered DNS domain threat intelligence service for DDR 2.0 solutions.
Passive DNS intelligence platform for threat detection and investigation.
API providing historical & current DNS, WHOIS, and domain intelligence data.
Mobile-focused threat intel covering apps, devices, URLs, APTs, and malware.
Vulnerability intel service tracking CVEs for your specific vendor/product stack.
API service providing IP geolocation data and intelligence for security use cases
IP intelligence platform for proxy/VPN detection and geolocation
Vulnerability threat intelligence platform with risk-based scoring and CVE/CWE data
Database for detecting VPNs, proxies, Tor exits, and anonymization services
Threat intelligence library with 30,000+ threats mapped to MITRE ATT&CK
IP address blocklist service for identifying and blocking fraudulent IPs
ML-based URL & domain classification API for threat and content scoring.
Common questions when weighing alternatives to Combine.
The closest matches to Combine by shared tags and NIST CSF 2.0 coverage are Webz.io, Packet Forensics Cyber Intelligence, Vultara Threat Intelligence, IronNet IronRadar, and Bitdefender Operational Threat Intelligence. All of them are Threat Intel Feeds products.
This page shows 48 alternatives to Combine, all in the Threat Intel Feeds category. Each one is matched on shared tags and NIST CSF 2.0 areas, and the closest matches rank first.
Combine is a free Threat Intel Feeds product. You can use it at no cost. Only commercial alternatives are listed here. Free and open source products are under /free.
Combine is a Threat Intel Feeds product in the Threat Intelligence category. You can compare it with the 48 other Threat Intel Feeds products on this page.
No Threat Intel Feeds shortlist yet. This is the closest one.
Updated 2026-11-01
See the shortlist
