Top Alternatives to EclecticIQ Intelligence Center

Threat Management

Threat intelligence platform for collecting, analyzing, and sharing CTI data

486 Alternatives to EclecticIQ Intelligence Center

Hudson Rock Cybercrime Intelligence Tools

Cybercrime intelligence tools for searching compromised credentials from infostealers

Threat Management

Free

Cybersec Feeds

A threat intelligence aggregation service that consolidates and summarizes security updates from multiple sources to provide comprehensive cybersecurity situational awareness.

Threat Management

Free

OSINTLeak Real-time OSINT Leak Intelligence

Real-time OSINT monitoring for leaked credentials, data, and infrastructure

Threat Management

CTIChef.com Detection Feeds

A tiered cyber threat intelligence service providing detection rules from public repositories with varying levels of analysis, processing, and guidance for security teams.

Threat Management

Stixview

Stixview is a JS library for embeddable interactive STIX2 graphs, aiming to bridge the gap between CTI stories and structured CTI snapshots.

Threat Management

Free

MITRE Cyber Analytics Repository

A knowledge base of analytics developed by MITRE based on the MITRE ATT&CK adversary model.

Threat Management

Free

libtaxii

A Python library for handling TAXII v1.x messages and services to enable automated threat intelligence sharing and indicator exchange.

Threat Management

Free

Non Human Identity Threat Center

A threat intelligence platform that monitors, analyzes, and provides detailed information about threat actors targeting non-human identities across various industries.

Threat Management

Free

Resecurity Nex-Gen Cybersecurity Platform

Next-gen cybersecurity platform for threat detection & digital risk mgmt.

Threat Management

Recorded Future Threat Intelligence

Enterprise threat intelligence platform for identifying and prioritizing threats

Threat Management

Orpheus Cyber Threat Intelligence

Cyber threat intelligence platform for threat-led risk management

Threat Management

AI SPERA Criminal IP

Global IP threat intelligence search engine with attack surface mgmt

Threat Management

CYJAX Cyber Threat Intelligence

Cyber threat intelligence platform providing actionable insights

Threat Management

Cymru RADAR

Real-time threat intelligence platform for external cyber threat defense

Threat Management

ThreatMon Cyber Threat Intelligence

AI-driven cyber threat intelligence platform for threat detection and analysis

Threat Management

Kaduu Dark Web Monitoring

Dark web monitoring platform for detecting data leaks and brand threats

Threat Management

HackNotice Superior Threat Intelligence

Real-time threat intelligence platform for monitoring attacks and breaches

Threat Management

DuskRise C25 Platform

Enterprise cyber threat intelligence platform with remote network protection

Threat Management

S2W XARVIS

AI-powered cybercrime intelligence platform monitoring dark web & covert channels

Threat Management

R-MOR RECONIZER™

Cyber intelligence platform for threat detection and security posture mgmt

Threat Management

CrowdStrike Threat Intelligence

Cyber threat intelligence platform with adversary tracking capabilities

Threat Management

Google Threat Intelligence

Threat intelligence platform combining Google, Mandiant, and VirusTotal data

Threat Management

Analyst1 Orchestrated Threat Intelligence Platform

Orchestrated threat intelligence platform for CTI and SOC teams

Threat Management

EclecticIQ Threat Intelligence Platform

Threat intelligence platform for aggregating, analyzing, and sharing CTI data

Threat Management

Cyware Quarterback AI

AI-powered threat intelligence platform for real-time threat intel management

Threat Management

ThreatQuotient ThreatQ Platform

Threat intelligence platform for detection, investigation, and response

Threat Management

Filigran eXtended Threat Management (XTM)

XTM portfolio for threat intel, attack surface visibility & adversary simulation

Threat Management

Cyble Blaze AI

AI-powered threat intelligence platform with agentic AI automation

Threat Management

Feedly Threat Intelligence

AI-powered platform for collecting and analyzing open source threat intelligence

Threat Management

ThreatBook Intelligence-First Detection & Response

Intelligence-driven threat detection & response platform with APAC focus

Threat Management

ThreatConnect Threat Intelligence Platform

AI-powered threat intel platform for operationalizing CTI and cyber risk mgmt

Threat Management

QuoIntelligence Threat Intelligence Services

European threat intelligence as-a-service provider with analyst support

Threat Management

Intel 471 Cyber Threat Intelligence

CTI platform combining automated collection with cyber HUMINT for threat intel

Threat Management

Cognyte Cyber Security

Investigative analytics platform for threat intelligence and security ops

Threat Management

GreyNoise Block

Real-time threat intel platform detecting malicious scanning & exploitation

Threat Management

Viettel Threat Intelligence (VCS-Threat Intelligence)

Threat intelligence service providing alerts, analysis, and support

Threat Management

Searchlight Cyber Cerberus

Dark web investigation platform with comprehensive database and analysis tools

Threat Management

Flashpoint Threat Intelligence

Threat intelligence platform with deep/dark web monitoring and OSINT data

Threat Management

Bitsight Cybersixgill

Cyber threat intelligence platform for monitoring threats, TTPs, and IOCs

Threat Management

CatchProbe Orchestration Platform

AI-driven cyber intelligence orchestration platform for threat intel & OSINT

Threat Management

Constella Threat Intelligence Data Signals API

API providing access to compromised identity data and threat signals

Threat Management

Filescan.io Malware Analysis

Malware analysis platform using emulation-based sandbox technology

Threat Management

Free

Safe Decision Safe CTI

Managed cyber threat intelligence service with org/adversary profiling

Threat Management

ThreatSTOP Protective DNS

DNS-layer threat blocking service with real-time threat intelligence feeds

Threat Management

Intrusion Applied Threat Intelligence

Network threat detection platform using applied threat intelligence

Threat Management

IronNet IronRadar

Proactive C2 threat intelligence feed for detecting adversary infrastructure

Threat Management

KELA Technical Cybercrime Intelligence

Technical threat intel feed of compromised IPs/domains from cybercrime sources

Threat Management

Infoblox Threat Defense

DNS-based threat defense using predictive intelligence to block threats

Threat Management

U.S.T.A. Cyber Threat Intelligence Platform

CTI platform monitoring deep/dark web, forums & threat actors for intel

Threat Management

Silobreaker Intelligence Platform

AI-powered threat intelligence platform for cyber, geopolitical & physical risks

Threat Management

Silent Push Preemptive Cyber Defense

Preemptive cyber defense platform using DNS, WHOIS, and web data for threat intel

Threat Management

HYAS Insight

Infrastructure intelligence platform for threat hunting and investigation

Threat Management

Darkscope AI Powered Cyber Security

AI-powered threat intelligence platform scanning internet, dark web & social media

Threat Management

Blackwired ThirdWatch

3D cyber threat visualization platform for external threat monitoring

Threat Management

SOC Radar Extended Threat Intelligence Platform

SOCRadar Extended Threat Intelligence Platform is a SaaS-based solution that provides real-time threat detection, digital risk protection, and AI-powered threat intelligence services across multiple environments including dark web, social media, and cloud platforms.

Threat Management

SOC Radar Cyber Threat Intelligence

SOC Radar Cyber Threat Intelligence is a comprehensive platform that provides dark web monitoring, vulnerability intelligence, and threat actor analysis to help organizations proactively defend against cyber threats.

Threat Management

SOC Radar Agentic Threat Intelligence

SOCRadar Agentic Threat Intelligence is an AI-powered cybersecurity platform that deploys autonomous agents to automate threat intelligence operations, analysis, and response without human intervention.

Threat Management

SOCRadar Advanced Dark Web Monitoring

Dark web monitoring platform for threat detection and fraud protection

Threat Management

Zeronsec Threat Intelligence

Threat intelligence platform for detection, hunting, and remediation

Threat Management

OPSWAT MetaDefender InSights C2

Real-time C2 infrastructure detection and disruption threat intelligence feed

Threat Management

Nucleon Malprob

AI-powered malware detection service with web interface and API access

Threat Management

isMalicious Threat Intelligence

Threat intelligence database with 500M+ malicious IPs, domains, and IOCs via API

Threat Management

PolySwarm Malware Intelligence

Malware intelligence marketplace aggregating multiple detection engines

Threat Management

PolySwarm Scan Files or URLs for threats

File and URL scanning service for malware and threat detection

Threat Management

Bitdefender Link Checker

Free URL scanner that checks links for malware, phishing, and fraud threats

Threat Management

Free

Bitdefender Operational Threat Intelligence

Threat intelligence platform providing global threat visibility and IoCs

Threat Management

Malware Patrol Cyber Threat Intelligence

Cyber threat intelligence feeds covering malware, phishing, C2s & more

Threat Management

Malware Patrol DNS RPZ Firewall

DNS RPZ firewall blocking malicious domains at DNS layer using threat intel

Threat Management

Malware Patrol Enterprise CTI

Enterprise threat intelligence feeds covering malware, phishing, C2, and IPs

Threat Management

Malware Patrol MCP Server

MCP server connecting LLMs to live threat intelligence via natural language

Threat Management

Malware Patrol Threat Intelligence

Threat intelligence feeds providing malware and threat data in multiple formats

Threat Management

ThreatSTOP DNS Defense Cloud

Cloud-based protective DNS service blocking threats via threat intelligence

Threat Management

MaxMind GeoIP

IP geolocation databases and APIs for location-based content and traffic analysis

Threat Management

MaxMind IP Geolocation API

API service providing IP geolocation data and intelligence for security use cases

Threat Management

MaxMind GeoIP Insights

IP intelligence platform for proxy/VPN detection and geolocation

Threat Management

Team Cymru Pure Signal™ Scout

Real-time threat intelligence platform for external threat visibility and IoC analysis

Threat Management

Anomali ThreatStream

Threat intelligence platform aggregating global threat data for detection

Threat Management

Anomali Integrator

Automates distribution of threat intel across security infrastructure

Threat Management

Upstream AutoThreat® PRO

Automotive-specific threat intelligence platform for mobility ecosystem

Threat Management

Seqrite Threat Intel

Real-time threat intelligence platform with STIX/TAXII compliance

Threat Management

ThreatBolt Intelligence

Threat intelligence platform for SOC/MSSP with AI/ML threat analysis

Threat Management

KELA Cyber Threat Intelligence Platform

Cyber threat intelligence platform monitoring external threats & cybercrime

Threat Management

KELA Identity Guard

Real-time identity protection monitoring compromised credentials on dark web

Threat Management

KELA Monitor

Cyber threat intel platform monitoring dark web & cybercrime for org assets

Threat Management

KELA Investigate

Threat intel platform for investigating cybercrime underground sources

Threat Management

Kela Proactive Defense

Threat intel platform combining CTI, DRPS, EASM & TPRM for exposure mgmt.

Threat Management

SpyCloud Investigations Module

AI-powered investigation tool for analyzing identity exposures from darknet data

Threat Management

ZeroFox Dedicated Threat Intelligence Analyst

Managed threat intelligence service with dedicated analysts for orgs

Threat Management

ZeroFox Security On-Demand Investigations

Custom threat intel investigations by analysts for security assessments

Threat Management

ZeroFox Dark Ops

Dark web intelligence service with human operatives for threat hunting

Threat Management

ZeroFox Threat Intelligence Feeds

Threat intelligence feeds for SOC teams from social, dark web & botnet sources

Threat Management

ZeroFox Intelligence Search

Threat intelligence search platform with correlated data graph

Threat Management

ZeroFox Physical Security

Physical security intelligence platform monitoring digital threats to locations

Threat Management

Infoblox Threat Intelligence

DNS-based threat intelligence platform for early threat detection

Threat Management

Prodaft CATALYST

Threat intelligence platform providing APT analysis and threat reports

Threat Management

Axur AI-Powered Cyber Threat Intelligence

AI-powered cyber threat intelligence platform with real-time monitoring

Threat Management

Axur Deep & Dark Web Monitoring

Monitors Deep & Dark Web for threats, credentials, and fraud schemes

Threat Management

Silent Push Community Edition

Free threat intel platform for DNS data analysis and infrastructure mapping

Threat Management

Free

MonitorApp AILabs

AI-based threat intelligence platform for analyzing and distributing threat data

Threat Management

HYAS Adversary Infrastructure Platform

Platform for tracking adversary infrastructure and C2 communications

Threat Management

NordLayer NordStellar

Threat intelligence platform combining network security and threat exposure mgmt

Threat Management

Flare PRISM

Visual interface for exploring threat intelligence data sources and datasets

Threat Management

StealthMole DarkWeb Monitoring

Dark web monitoring platform with AI-based crawling and real-time alerts

Threat Management

Cyfirma DeCYFIR

External threat landscape mgmt platform with predictive intelligence

Threat Management

Kaduu Data Breach Detection

Dark web monitoring platform for detecting data breaches and leaked data

Threat Management

Kaduu Darknet Monitoring

Swiss-made darknet monitoring platform providing real-time threat intel via API

Threat Management

DarknetSearch Dark Web Monitoring

Dark web monitoring platform for detecting exposed credentials and threats

Threat Management

Sec1 ZeroDefender

Real-time zero-day vulnerability detection and alerting platform

Threat Management

Analyst1 Threat Intelligence Platform

Platform for collecting, analyzing, and managing cyber threat intelligence data

Threat Management

Lookout Threat Intelligence Services

Mobile threat intelligence service providing threat data, research, and DFIR

Threat Management

TEHTRIS Threat Intelligence

Threat intelligence platform with 500M+ entries for real-time threat analysis

Threat Management

Resecurity Cyber Threat Intelligence

CTI platform for threat analysis, dark web monitoring, and data breach detection

Threat Management

CybrHawk HawkINT

AI-powered threat intelligence platform monitoring surface, deep, and dark web

Threat Management

CybrHawk Threat Intelligence

Threat intelligence platform for managing security data and threat info

Threat Management

CYJAX Real-Time Threat Intelligence

Real-time threat intelligence platform with analyst-enriched insights

Threat Management

CYJAX Investigative Intelligence

Investigative intelligence service for law enforcement agencies

Threat Management

CYJAX Physical Security Intelligence

Intelligence platform for physical security threats to people, places, and assets

Threat Management

CyCognito Exploit Intelligence

Threat intel platform for prioritizing vulnerabilities based on attacker TTPs

Threat Management

Bitsight Cyber Threat Intelligence

AI-driven threat intel platform monitoring clear, deep, and dark web sources

Threat Management

ThreatMon Threat Monitoring

Threat intelligence platform monitoring dark web, breaches & attack surface

Threat Management

ThreatMon Dark Web Intelligence

Dark web monitoring platform for detecting compromised credentials and threats

Threat Management

ThreatMon AI

AI-powered threat intelligence platform with search, risk assessment & alerts

Threat Management

Styx Threat Intelligence

Real-time threat intel platform tracking malware, breaches, and threat actors

Threat Management

ResilientX Credential Leak Monitoring

Monitors dark web, forums, and Telegram for compromised credentials and leaks

Threat Management

HackNotice

Platform for breach detection, dark web monitoring, and supply chain threat intel

Threat Management

HackNotice Services

Real-time threat intelligence platform monitoring dark web, breaches & supply chain

Threat Management

Resolver Threat Protection

Corporate threat protection software with case mgmt and expert services

Threat Management

Resolver Persons of Interest Investigations

Managed service for POI investigations with expert threat assessment teams.

Threat Management

NSFOCUS Threat Intelligence

Threat intelligence platform providing actionable insights from global sources

Threat Management

S2W QUAXAR

AI-powered CTI platform integrating ASM, DRP, and TI capabilities

Threat Management

S2W EYEZ

Virtual asset intelligence solution tracking cryptocurrency transactions

Threat Management

Nozomi Networks Threat Intelligence

OT/IoT threat intelligence feed for vulnerability and malware detection

Threat Management

Lumifi Cyber Cyber Threat Intelligence (CTI)

Curated threat intelligence service using Anomali ThreatStream platform

Threat Management

LMNTRIX Intelligence

Threat intelligence platform integrated into LMNTRIX XDR for threat detection

Threat Management

DeepSeas Threat Intelligence

Threat intelligence platform with automated detection logic deployment

Threat Management

Keepnet Threat Sharing

P2P threat intel sharing platform for collaborative defense communities

Threat Management

Keepnet Threat Intelligence

Monitors data breaches affecting company domains and employee credentials

Threat Management

EclecticIQ Threat Scout

Browser extension for automated threat intel collection from web content

Threat Management

Filigran OpenCTI

Open-source threat intelligence platform for organizing and operationalizing CTI

Threat Management

Cyble Vision

AI-powered cyber threat intelligence platform for threat monitoring & analysis

Threat Management

Cyble Hawk

Threat intelligence platform with AI-powered monitoring and analysis

Threat Management

Cyble Threat Intelligence Platform

Centralized threat intelligence platform for aggregating and operationalizing IOCs

Threat Management

Cyble Cyber Threat Intelligence Platform

AI-driven threat intelligence platform for threat detection and response

Threat Management

Cyble Dark Web Monitoring

Dark web monitoring platform for detecting leaked credentials and threats

Threat Management

ThreatBook Advanced Threat Intelligence (ATI)

Enterprise threat intelligence platform with APAC focus and adversary tracking

Threat Management

ThreatConnect Intel Hub

Platform combining threat intel, risk quantification, and sec ops integration

Threat Management

ThreatConnect Polarity

Overlay tool providing real-time threat intel & context across security tools

Threat Management

ThreatConnect Polarity Community Edition

Free contextual federated search tool for threat intelligence enrichment

Threat Management

Free

QuoIntelligence Risk Intelligence Service

Risk intelligence service for supply chain, geopolitical & compliance risks

Threat Management

QuoIntelligence Threat Intelligence

AI-powered threat intelligence service with expert analysis and geopolitics

Threat Management

GreyNoise Block: Fully configurable, real-time blocklists

Detects compromised assets via outbound traffic to GreyNoise sensors & malicious IPs

Threat Management

Searchlight Cyber DarkIQ

Dark web monitoring platform for detecting threats and cybercriminal activity

Threat Management

Flashpoint Ignite

Threat intelligence platform for cyber, physical, vulnerability & national sec

Threat Management

ReversingLabs Spectra Core

AI-powered file & software analysis platform for threat detection & risk assessment

Threat Management

ReversingLabs Spectra Detect

Enterprise file analysis platform for high-volume malware detection

Threat Management

ReversingLabs Spectra Intelligence

File and network threat intelligence repository with reputation lookups

Threat Management

CatchProbe DarkMap

Dark web and surface web crawler for content discovery and archiving

Threat Management

CatchProbe LeakMAP

Leaked data intelligence platform with 40TB+ database for breach tracking

Threat Management

CatchProbe ThreatWay

Cyber threat intelligence sharing platform with TAXII/STIX support

Threat Management

Sekoia Cyber Threat Intelligence

CTI platform providing structured threat intelligence and analysis

Threat Management

Ivanti Neurons for Vulnerability Knowledge Base

Vulnerability threat intelligence platform with risk-based scoring and CVE/CWE data

Threat Management

Filigran eXtended Threat Management Suite

Suite of open source platforms for threat intel, adversary simulation & GRC

Threat Management

Filigran XTM Hub

Central hub for accessing Filigran products, resources, and community content

Threat Management

Free

Filigran Threat Management

AI-powered threat management platform for detection, analysis, and response

Threat Management

Outpost24 Cyber Threat Intelligence

Modular CTI platform with DRP modules for external threat detection & intel

Threat Management

Talanos DARK WEB & DEEP WEB INTELLIGENCE

Dark web & deep web monitoring service for threat detection & response

Threat Management

Kaspersky Data Streams

Continuously updated threat indicator data streams via HTTPS protocol

Threat Management

Armis Centrix™ Early Warning

Proactive threat intelligence platform providing early warning alerts

Threat Management

BioCatch Trust™

Inter-bank real-time financial crime intelligence network for fraud prevention

Threat Management

Cloudmark Insight

Real-time threat intelligence API for IP, domain, URL, and content analysis

Threat Management

Cloudmark Threat Insight

Threat intelligence platform providing messaging threat data via API

Threat Management

Corelight Threat Intelligence

Network threat intel platform combining CrowdStrike IOCs with NDR evidence

Threat Management

CyberAdapt Internal Server Error

Network threat detection platform (product page unavailable)

Threat Management

Check Point Threat Intelligence

Threat intelligence platform providing strategic & tactical threat analysis

Threat Management

Cyberint Deep & Dark Web Monitoring

Deep & dark web monitoring platform for threat intelligence collection

Threat Management

Cybermerc Aushield

Australian cyber threat intelligence ecosystem for SMBs, enterprise & govt

Threat Management

Cybermerc Aushield Defend

Cyber threat intelligence sharing platform for Australian organizations

Threat Management

CyCraft CyberTotal

Global threat intelligence platform aggregating CTI sources with AI analysis

Threat Management

CyCraft ThreatWall

Threat intelligence gateway that blocks malicious traffic using global CTI

Threat Management

DarkOwl Ransomware API

API for monitoring ransomware sites to detect org compromises & extortion

Threat Management

DigitalStakeout OSINT Platform

OSINT platform for monitoring surface web, dark web, and social media sources

Threat Management

DigitalStakeout Data Breach Search

Search engine for investigating exposed data across surface, deep, and dark web

Threat Management

DomainTools Predictive Threat Feeds

DNS-based threat intelligence platform with predictive risk scoring

Threat Management

DomainTools Domain Intelligence

Domain intelligence platform for threat research and investigation

Threat Management

Dragos Neighborhood Keeper

Anonymous ICS threat intel sharing platform for collective defense

Threat Management

FireEye Detection On Demand

RESTful API for file/URL malware analysis via FireEye virtual execution engine

Threat Management

FraudLabs Pro Anonymous Proxy Detection

Detects anonymous proxies, VPNs, TOR, and other proxy types from IP addresses

Threat Management

FSISAC Intelligence

Cyber threat intel sharing platform for financial services sector members

Threat Management

FSISAC Security

Financial sector info sharing & analysis center for cyber threat intelligence

Threat Management

FS-ISAC Intelligence Exchange

Threat intel sharing platform for financial services sector collaboration

Threat Management

FSISAC Cybersecurity Intelligence

Financial sector threat intelligence and information sharing platform

Threat Management

Glasswall ReversingLabs

File threat intelligence integration combining hash lookups & malware detection

Threat Management

Hitachi Cyber Cyber Threat Intelligence Services

CTI services combining human expertise and AI for threat analysis

Threat Management

Hoplite HopliteDNS

DNS-based threat intelligence platform for security monitoring and enforcement

Threat Management

Hoplite Threat Intelligence

AI-powered threat intelligence platform collecting data from web sources

Threat Management

Hypernative Screener

Screens blockchain addresses for risk and provides allow/deny recommendations.

Threat Management

IP2Location IP2Proxy Proxy Detection Database

Database for detecting VPNs, proxies, Tor exits, and anonymization services

Threat Management

IP2Location IP-Country Database

IP geolocation database identifying VPN, proxy, Tor, and datacenter IP addresses

Threat Management

IP2Location IP-ProxyType-Country

IP geolocation database for detecting proxies, VPNs, and Tor exit nodes

Threat Management

IP2Location IP-ProxyType-Country-Region-City Database

IP geolocation database for detecting proxies, VPNs, Tor nodes & data centers

Threat Management

IP2Location IP-ProxyType-Country-Region-City-ISP Database

IP geolocation database for detecting proxies, VPNs, Tor nodes, and ISP info

Threat Management

IP2Location IP-ProxyType-Country-Region-City-ISP-Domain Database

IP geolocation database for detecting proxies, VPNs, Tor nodes & data centers

Threat Management

IP2Location PX6

IP geolocation database for detecting proxies, VPNs, Tor nodes & data centers

Threat Management

IP2Location IP-ProxyType-Country-Region-City-ISP-Domain-UsageType-ASN Database

IP geolocation database for detecting proxies, VPNs, Tor, and datacenter IPs

Threat Management

IP2Location PX8

IP database for detecting proxies, VPNs, Tor nodes & data center ranges

Threat Management

IP2Location IP-ProxyType-Country-Region-City-ISP-Domain-UsageType-ASN-LastSeen-Threat

IP geolocation database for proxy/VPN detection with threat intelligence

Threat Management

IP2Location IP-ProxyType-Country-Region-City-ISP-Domain-UsageType-ASN-LastSeen-Threat-Residential

IP database for detecting proxies, VPNs, Tor, and residential proxies

Threat Management

IP2Location IP-ProxyType-Country-Region-City-ISP-Domain-UsageType-ASN-LastSeen-Threat-Residential-Provider Database

IP geolocation database for detecting proxies, VPNs, Tor, and threat IPs

Threat Management

IP2Location IP-ProxyType-Country-Region-City-ISP-Domain-UsageType-ASN-LastSeen-Threat-Residential-Provider-FraudScore Database

IP geolocation database for proxy/VPN detection with fraud scoring

Threat Management

ISARR AVSEC Resilience Platform

Aviation security threat intelligence & risk mgmt platform for AVSEC pros

Threat Management

LimaCharlie Build CTI Capabilities

Platform for building CTI capabilities with centralized threat intelligence hub

Threat Management

LimaCharlie SnapAttack

Threat-informed detection rule platform for behavioral analytics

Threat Management

NETSCOUT ATLAS Intelligence Feed (AIF)

AI-powered threat intelligence feed for automated DDoS protection

Threat Management

Ontic Risk Intelligence

Physical security threat intel platform combining OSINT, location data & analysis

Threat Management

Peraton ThreatBoard

Cyber threat intelligence platform with AI-driven analysis and threat hunting

Threat Management

Picus Threat Library

Threat intelligence library with 30,000+ threats mapped to MITRE ATT&CK

Threat Management

Rawstream DNS Filtering

Cloud-based DNS filtering solution for blocking malicious sites and content

Threat Management

SecurityScorecard Intelligence Feeds

Cyber threat intelligence feeds for SOC and threat intelligence teams

Threat Management

Tarlogic Digital Surveillance Services

Cyber intelligence services for digital exposure monitoring and threat analysis

Threat Management

Tarlogic Threat Intelligence

Threat intelligence service analyzing attack scenarios for organizations

Threat Management

VerSprite Weekly Threat Intelligence

Weekly threat intelligence briefings published by VerSprite

Threat Management

VMRay UniqueSignal

Behavior-based threat intel feed delivering malware IOCs with context

Threat Management

VMRay Analyzer 3.0

Automated malware analysis and detection platform

Threat Management

zvelo Malicious Detailed Detection Feed™

Curated malicious threat intelligence feed with IOC detection and metadata

Threat Management

zvelo PhishBlocklist™

Curated phishing threat intelligence feed with predictive detection

Threat Management

Group-IB Threat Intelligence Platform

Enterprise threat intelligence platform for proactive threat detection

Threat Management

Group-IB Cyber Fraud Intelligence Platform

Real-time fraud intelligence sharing platform with GDPR-compliant tokenization

Threat Management

CloudSek Cybersecurity

Cybersecurity platform providing threat intelligence and digital risk protection

Threat Management

CloudSEK Predictive Cybersecurity

Predictive cybersecurity platform providing threat intelligence services

Threat Management

CloudSEK Cyber Intelligence

Cyber threat intelligence platform for external threat monitoring

Threat Management

Abstract Intel Gallery

Threat intel enrichment platform that correlates events with IOCs and actors

Threat Management

Nothreat ThreatShield

AI-driven threat intel feeds for automated blocking on 20+ firewall vendors

Threat Management

Nothreat Intelligent DNS

AI-driven DNS security service blocking malicious domains and C2 servers

Threat Management

OpenText Core DNS Protection

Cloud-native DNS filtering solution that blocks malicious domains and threats

Threat Management

Zynap Threat Intelligence

AI-driven threat intel platform for preemptive security & attack prevention

Threat Management

Cyberani Threat Intelligence

Managed threat intelligence service with dark web monitoring and analysis

Threat Management

Gambit KnightGuard

AI-driven platform that operationalizes threat intel into risk-prioritized actions

Threat Management

COGNNA Threat Intelligence

AI-driven threat intelligence platform with automated hunting and enrichment

Threat Management

Unit221B eWitness

Threat intel platform for discovering cybercrime on encrypted chat networks

Threat Management

Unit 221B Threat Intelligence

Threat intel service focused on adversary attribution and monitoring

Threat Management

VicOne xAurient

Automotive-focused threat intelligence platform with dark web monitoring

Threat Management

TIDAL ENTERPRISE

Threat intel platform providing daily defensive recommendations & coverage maps

Threat Management

Tidal Cyber Sandbox

SaaS platform for threat-informed defense using adversary tradecraft analysis

Threat Management

Red Canary Threat Intelligence

Threat intelligence service providing threat profiles and analytics for MDR

Threat Management

ZeroSpam Enterprise-Grade Reputation Engine

AI-powered reputation engine for blocking spam, bots, and malicious IPs via API.

Threat Management

SecurityZones SURBL BV

Domain reputation threat intelligence feeds for malicious domain detection

Threat Management

SecurityZones Real-Time Cyber Threat Intelligence

Real-time cyber threat intelligence for email filtering and network security

Threat Management

Securelynkx Networks LUMINAR AI-Powered External Threat Intelligence

AI-powered external threat intelligence platform for threat detection

Threat Management

SecAlliance Cyber Threat Intelligence Maturity Assessment

CTI maturity assessment service evaluating threat intelligence capabilities

Threat Management

CSIS Security Group ThreatMatch Intelligence Portal

Collaborative threat intel portal with MITRE ATT&CK mapping & sharing

Threat Management

Security Alliance Cyber Threat Assessment

Cyber threat intelligence assessment service for attack landscape analysis

Threat Management

SecAlliance Cyber Defence Feed

Real-time threat intel feed delivering IOCs with confidence scoring

Threat Management

SecAlliance Vulnerability Intelligence

Managed vulnerability intelligence service with real-time threat actor tracking

Threat Management

SecAlliance Managed Cyber Threat Intelligence Services

Managed CTI service providing threat monitoring, analysis, and reporting

Threat Management

BforeAI PreCrime Intelligence

AI-powered predictive threat intelligence feed identifying malicious infrastructure

Threat Management

BforeAI PreCrime Intelligence for MS Sentinel

Predictive threat intelligence platform for Microsoft Sentinel

Threat Management

Netcraft Scam Intelligence

AI-driven scam detection via victim emulation in peer-to-peer conversations

Threat Management

Netcraft Threat Feeds

Threat intelligence feeds covering 100+ attack types with 5-min updates

Threat Management

Netcraft Phishing Kit Analysis

Analyzes phishing kits to extract IOCs, attacker infrastructure & tactics

Threat Management

Netcraft Threat Intelligence

Threat intelligence platform detecting and blocking 100+ attack types globally

Threat Management

Maltego Graph

Visual link analysis platform for OSINT and threat investigations

Threat Management

Maltego Professional Lite

Visual link analysis platform for OSINT investigations and data correlation

Threat Management

Augur Preemptive Cybersecurity Platform

AI-powered platform identifying C2 and attack infrastructure pre-weaponization

Threat Management

Augur Black

Preemptive threat intelligence platform for incident response and hunting

Threat Management

Augur

ML-based threat intel platform that identifies attacker infrastructure preemptively

Threat Management

Blockaid Address Scanning

Real-time crypto address scanning for malicious activity and sanctions checks

Threat Management

Blockaid dApp Scanning

Detects and blocks malicious dApps through scanning and transaction validation

Threat Management

IPQS IP Address Abuse Feed

Daily threat intel feed identifying malicious IPs with abuse classifications

Threat Management

IPQS Proxy Detection Database

Database for detecting proxies, VPNs, Tor nodes, and high-risk IP addresses

Threat Management

IPQS Proxy Detection API

API service for detecting proxies, VPNs, Tor nodes, and malicious IPs

Threat Management

IPQualityScore IP Risk Score API

Real-time IP fraud detection and risk scoring API for identifying malicious IPs

Threat Management

IPQS IP Address Block List

IP address blocklist service for identifying and blocking fraudulent IPs

Threat Management

Cyberseer Google Threat Intelligence

Real-time threat intelligence service powered by Google's security ecosystem

Threat Management

DataVillage Detect Suspicious Accounts

Secure collaboration platform for detecting suspicious accounts via shared signals

Threat Management

VulnCheck

Vuln & exploit intelligence platform for prioritizing vulnerability response

Threat Management

RiskProfiler - Cyber Threat Intelligence

AI-powered cyber threat intelligence platform for IoC detection and analysis

Threat Management

Passguard Infostealer Scanner

Scans domains for infostealer infections and monitors criminal marketplaces.

Threat Management

Passguard Platform

Detects infostealer infections by monitoring criminal marketplaces

Threat Management

Malanta

Pre-attack threat intel platform detecting attacker infrastructure before launch

Threat Management

Threat Actor Intelligence

Threat actor intelligence capability within NodeZero autonomous pentest platform

Threat Management

Dataminr

AI platform for real-time event, threat & risk intelligence detection

Threat Management

Cybeta

Cyber risk analytics & external infrastructure intelligence platform

Threat Management

BreachX One

Zero-day threat intelligence platform with adversary monitoring & simulation

Threat Management

Abusix Guardian Intel

Real-time threat intel feeds sourced from honeypots & ISP abuse reports.

Threat Management

Abusix Threat Intelligence

Real-time threat intel platform with IP/domain reputation scoring and low false positives.

Threat Management

Allure Security Dark Web Monitoring

Managed dark web monitoring with human-vetted intelligence and actionable alerts.

Threat Management

alphaMountain Threat Intel & URL Classification

AI-powered URL classification & IP reputation feed/API for security vendors.

Threat Management

alphaMountain URL Classification

ML-based URL & domain classification API for threat and content scoring.

Threat Management

alphaMountain URL Classification API

First-party URL/IP classification & threat scoring API for security vendors.

Threat Management

alphaMountain Domain & IP Reputation

AI-based domain & IP threat scoring API for security product integration.

Threat Management

alphaMountain threatYeti

Free URL/domain/IP threat investigation tool with risk scoring & categorization.

Threat Management

Free

alphaMountain

First-party URL, domain & IP threat intelligence with real-time risk scoring.

Threat Management

Antiy High-level Threat Intelligence Svc

Subscription threat intel service with reports, translations & security notifications.

Threat Management

asvin CTI Layer

AI-powered CTI platform converting unstructured threat data into role-based intelligence.

Threat Management

Axiom Shield

Threat intelligence plugin for MikroTik RouterOS with real-time feed updates.

Threat Management

BeyGoo LeaX

Dark web credential leak monitoring with infostealer and combolist detection.

Threat Management

BeyGoo CTI

Managed CTI service with analyst-driven, on-demand investigations via a credit model.

Threat Management

Brandefense Cyber Threat Intelligence

CTI platform with 190+ global sensors providing real-time IoC feeds and enrichment.

Threat Management

Centripetal CleanINTERNET®

Real-time network threat prevention platform enforcing 10B+ threat indicators.

Threat Management

Certego Threat Intelligence Modules

IOC feeds, dark web monitoring & vuln alerts via Certego's intel platform.

Threat Management

Certego Threat Intelligence

Managed CTI service with IOC feeds, MDR enrichment, and Italian market focus.

Threat Management

Citalid Threat Exposure

Cyber threat exposure mgmt platform with CTI, TTP mapping & risk prioritization.

Threat Management

Cleafy LABS

Threat intel service for financial institutions focused on fraud & banking malware.

Threat Management

Cleafy ASK

Threat intelligence module for banks within Cleafy's FxDR platform.

Threat Management

Critical Start CTI

Managed CTI service monitoring dark web & open sources for emerging threats.

Threat Management

CrowdSec Live Exploit Tracker

Real-time CVE exploitation tracker with active IP feeds and IoC visibility.

Threat Management

CYBERA Signals

Free mule account alert feed for banks to detect scam-linked accounts.

Threat Management

Free

Cydome Maritime Threat Intelligence

AI-powered maritime-specific cyber threat intelligence for shipping companies.

Threat Management

CYSIAM Cyber Threat Intelligence (CTI)

Managed CTI service covering threat actor tracking, dark web monitoring & TTP analysis.

Threat Management

CYSIAM CTI as-a-Service (CTIaaS)

Managed CTI service delivering curated threat intel, IoCs, TTPs via TIP and MISP.

Threat Management

Cythereal MalWeb

Cloud-based platform that maps malware relationships for threat intelligence.

Threat Management

OpenAVN Data

Digital threat intel platform with 300TB+ of malware data, AI analytics & forecasting.

Threat Management

Disruptive Industries Keystone

Threat discovery platform using behavioral sequencing & geospatial analysis.

Threat Management

DNSSense Cyber X-Ray

AI-powered DNS domain threat intelligence service for DDR 2.0 solutions.

Threat Management

EfficientIP DNS Intelligence Center

Cloud-based DNS threat intelligence platform for SOC threat detection and investigation.

Threat Management

EfficientIP DNS Threat Pulse

AI-powered DNS threat intelligence feed for malicious domain detection.

Threat Management

ElastiFlow NetIntel

Enriched threat feed for identifying malicious IPs and actors in network traffic.

Threat Management

Elemendar READ

CTI analysis tool that filters threat data and reduces false positives.

Threat Management

Elemendar Compass

AI-driven tool mapping threat intelligence to org-specific risk landscapes.

Threat Management

Ermes Browser Guard CTI

AI-powered CTI API for real-time URL classification and phishing detection.

Threat Management

Farsight Security DNSDB

Passive DNS intelligence platform for threat detection and investigation.

Threat Management

Foresite Catalyst Command

AI-driven threat intel & forensics module for Google Cloud SOC teams.

Threat Management

HEROIC Data Breach Scanner

Scans email addresses against breach databases for personal data exposure.

Threat Management

Free

HEROIC Unified Cybersecurity Platform

AI-powered platform for breach monitoring & credential exposure detection.

Threat Management

IntelFinder

Automated SaaS platform monitoring web sources for brand and domain threats.

Threat Management

iVerify Threat Intelligence

Mobile-focused threat intelligence portal for detecting and analyzing mobile threats.

Threat Management

MegaplanIT Active Threat Intelligence

Managed threat intel service using feeds, OSINT & sandboxing via 24/7 SOC.

Threat Management

Muscope Dark Web

Dark web monitoring tool that tracks exposed company data and credentials.

Threat Management

Netacea Threat Intel Center

Managed CTI service monitoring criminal communities for bot threat intelligence.

Threat Management

OTIFYD Malevolent Threat Actor Monitoring

Managed dark/deep/surface web threat actor monitoring and intelligence service.

Threat Management

OWN Cyber Threat Intelligence Platform

Managed CTI platform with sector-specific threat reports and exposure monitoring.

Threat Management

PhishTank

Community-driven phishing URL archive operated by Cisco Talos.

Threat Management

Free

Provenance Cyber Security Solutions

Threat intel firm identifying human actors behind cyber threats.

Threat Management

Razorthorn Managed Threat Intelligence

Managed dark/deep/clear web threat monitoring with expert analyst review.

Threat Management

RiskAnalytics ShadowNet

Free threat intel feed blocking malicious IPs/domains via global sensors.

Threat Management

Free

S2T GoldenSpear Deep Fusion

Data fusion platform supporting the full intelligence cycle for security agencies.

Threat Management

Sesame IT HOSHI

Curated attack use case platform that feeds threat scenarios into Jizô AI.

Threat Management

Stairwell Analyze

Continuous, private malware analysis and threat intel platform for enterprises.

Threat Management

Stairwell Gather

Threat intel aggregation platform for file analysis, malware corpus & IOC hunting.

Threat Management

StealthMole Dark Web Monitoring

Real-time dark web monitoring for ransomware, data leaks, and govt threats.

Threat Management

StealthMole

Dark web threat intelligence platform for detecting & investigating cyber threats.

Threat Management

Free

StealthMole Darkweb Tracker

Deep & dark web intelligence platform for threat monitoring & investigation.

Threat Management

Tego Cyber

Threat detection, correlation, and intel feed platform for SecOps teams.

Threat Management

Uppsala Security

Blockchain threat intel & crypto forensics platform for AML and investigations.

Threat Management

Webz.io

Web data platform providing open, deep & dark web APIs and monitoring.

Threat Management

Mirai Tracker

A tracker that detects and logs SYN packets with a specific signature generated by the Mirai malware, providing real-time information on Mirai-based campaigns.

Threat Management

Free

threat_note

A comprehensive Threat Intelligence Program Management Solution for managing the entire CTI lifecycle.

Threat Management

Free

Crits

CRITs is an open source malware and threat repository for collaborative threat defense and analysis.

Threat Management

Free

SSLBL - SSL Blacklist

A project that detects malicious SSL connections by identifying and blacklisting SSL certificates used by botnet C&C servers and identifying JA3 fingerprints to detect and block malware botnet C&C communication.

Threat Management

Free

ThreatMiner

ThreatMiner is a threat intelligence portal that aggregates data from various sources and provides contextual information related to indicators of compromise (IOCs).

Threat Management

Free

vt-url

VirusTotal API v3 is a threat intelligence platform for scanning files, URLs, and IP addresses, and retrieving reports on threat reputation and context.

Threat Management

Free

BGP Ranking

A free software that calculates the security ranking of Internet Service Providers to detect malicious activities.

Threat Management

Free

FraudGuard

FraudGuard is a service that provides real-time internet traffic analysis and IP tracking to help validate usage and prevent fraud.

Threat Management

Free

InQuest Labs

The Trystero Project is a threat intelligence platform that measures email security efficacy and provides various tools and resources, while VMware Carbon Black offers endpoint protection and workload security solutions.

Threat Management

Free

Vulners

All-in-one vulnerability intelligence platform for prioritizing remediation efforts and driving security strategies.

Threat Management

Free

URLhaus

A project sharing malicious URLs used for malware distribution to help protect networks.

Threat Management

Free

Breach Report Collection

A curated collection of companies that have publicly disclosed adversary tactics, techniques, and procedures following security breaches.

Threat Management

Free

ShadowServer

A nonprofit security organization that collects and shares threat data to make the Internet more secure.

Threat Management

Free

Maldatabase

Maldatabase is a threat intelligence platform providing malware datasets and threat intelligence feeds for malware data science and threat intelligence.

Threat Management

Free

Maltiverse

Maltiverse automates Threat Intelligence for small and medium-sized SecOps teams, providing an effective and affordable service.

Threat Management

Free

Binary Defense IP Banlist

A free threat intelligence feed and banlist feed of known malicious IP addresses for public use only.

Threat Management

Free

Virustotal

Analyze suspicious files, domains, IPs, and URLs to detect malware and other breaches, and share results with the security community.

Threat Management

Free

DataPlane.org

Dataplane.org is a nonprofit organization providing free data, tools, and analysis to increase awareness of Internet trends, anomalies, threats, and misconfigurations.

Threat Management

Free

APT Groups and Operations

A comprehensive list of APT groups and operations for tracking and mapping different names and naming schemes used by cybersecurity companies and antivirus vendors.

Threat Management

Free

Pulsedive

Pulsedive is a threat intelligence platform that provides frictionless threat intelligence for growing teams, offering features such as indicator enrichment, threat research, and API integration.

Threat Management

Free

CISA Cybersecurity Alerts

The Cybersecurity and Infrastructure Security Agency (CISA) is a government agency that provides alerts, advisories, and resources to help protect the United States' critical infrastructure from cyber threats.

Threat Management

Free

MaxMind Fraud Prevention

IP intelligence, geolocation, proxy detection, and fraud prevention service

Threat Management

CI Army List

A comprehensive list of IP addresses for cybersecurity purposes, including threat intelligence, incident response, and security research.

Threat Management

Free

Yomi

Threat intelligence platform providing real-time threat data and insights.

Threat Management

Free

Tor Exit Addresses

A database of Tor exit nodes with their corresponding IP addresses and timestamps.

Threat Management

Free

CyberCure Advanced Cyber Threat Intelligence

Free cyber threat intelligence feeds for proactive threat detection

Threat Management

Free

IPsum

Daily feed of bad IPs with blacklist hit scores for cybersecurity professionals to stay informed about malicious IP addresses.

Threat Management

Free

AbuseIPDB

AbuseIPDB offers tools and APIs to report and check abusive IPs, enhancing network security.

Threat Management

Free

MISP Project

MISP is an open source threat intelligence platform that enhances threat information sharing and analysis.

Threat Management

Free

n6 (Network Security Incident eXchange)

n6 is a network security incident exchange system that collects, manages, and distributes threat and incident data through REST API and web interfaces for authorized users.

Threat Management

Free

Invoke-ATTACKAPI [DEPRECATED]

A PowerShell script to interact with the MITRE ATT&CK Framework via its own API using the deprecated MediaWiki API.

Threat Management

Free

APT & Cybercriminals Campaign Collection

A collection of APT and cybercriminals campaigns with various resources and references.

Threat Management

Free

CyBot Open Source Threat Intelligence Chat Bot

CyBot is a free and open source threat intelligence chat bot with a community-driven plugin framework.

Threat Management

Free

OpenTAXII

A robust Python implementation of TAXII Services with a friendly pythonic API.

Threat Management

Free

cabby

A Python library for interacting with TAXII servers

Threat Management

Free

yara-rust

Bindings for the Yara library from VirusTotal with support for Yara v4.2 and various features like rule compilation and scanning.

Threat Management

Free

Machinae Security Intelligence Collector

Machinae is a tool for collecting intelligence from public sites/feeds about various security-related pieces of data.

Threat Management

Free

ThreatIngestor

An extendable tool to extract and aggregate IOCs from threat feeds, integrates with ThreatKB and MISP.

Threat Management

Free

ThreatKB

Knowledge base workflow management dashboard for YARA rules and C2 artifacts.

Threat Management

Free

iocextract

A library and command line interface for extracting URLs, IP addresses, MD5/SHA hashes, email addresses, and YARA rules from text corpora.

Threat Management

Free

MISP Taxii Server

A set of configuration files to use with EclecticIQ's OpenTAXII implementation for MISP integration.

Threat Management

Free

MISP Workbench Tools

Tools to export data from MISP MySQL database for post-incident analysis and correlation.

Threat Management

Free

LOKI

LOKI is a simple IOC and YARA Scanner for Indicators of Compromise Detection.

Threat Management

Free

Munin

An online hash checker utility that retrieves information from various online sources, including Virustotal, HybridAnalysis, and more.

Threat Management

Free

Signature-Base

YARA signature and IOC database for LOKI and THOR Lite scanners with high quality rules and IOCs.

Threat Management

Free

YaraGuardian

A Django web interface for managing Yara rules with features like search, categorization, and bulk edits.

Threat Management

Free

OSTrICa

OSTrICa is an open source plugin-based framework that collects and visualizes threat intelligence data from various sources to help cybersecurity professionals correlate IoCs and enhance their defensive capabilities.

Threat Management

Free

QRadio

QRadio is a tool/framework designed to consolidate cyber threats intelligence sources.

Threat Management

Free

Hiryu

A visualization tool for threat analysis that organizes APT campaign information and visualizes relations of IOC.

Threat Management

Free

openioc-to-stix

Converts OpenIOC v1.0 XML files into STIX Indicators, generating STIX v1.2 and CybOX v2.1 content.

Threat Management

Free

SRA TAXII2 Server

Taxii2 server for interacting with taxii services.

Threat Management

Free

DailyIOC

A daily collection of IOCs from various sources, including articles and tweets.

Threat Management

Free

YETI

YETI is a proof-of-concept TAXII implementation that supports Inbox, Poll, and Discovery services for automated cyber threat intelligence indicator exchange.

Threat Management

Free

Hippocampe

Hippocampe is a threat feed aggregator with configurable confidence levels and a Hipposcore for determining maliciousness.

Threat Management

Free

ThreatConnect Developer Documentation

Developer documentation providing REST API and SDK resources for ThreatConnect platform integration across Python, Java, and JavaScript environments.

Threat Management

Free

Umbrella Investigate API

API for querying domain security information, categorization, and related data.

Threat Management

Free

Threat Intelligence Hunter (TIH)

TIH is an intelligence tool that helps you search for IOCs across multiple security feeds and APIs.

Threat Management

Free

AbuseHelper

AbuseHelper is an open-source framework for receiving and redistributing abuse feeds and threat intel.

Threat Management

Free

VT Code Similarity Yara Generator

Yara rule generator using VirusTotal code similarity feature code-similar-to.

Threat Management

Free

IOC Parser

A tool to extract indicators of compromise from security reports in PDF format.

Threat Management

Free

Malstrom

Cyber Intelligence Management Platform with threat tracking, forensic artifacts, and YARA rule storage.

Threat Management

Free

IntelMQ

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol, with a focus on incident handling automation and threat intelligence processing.

Threat Management

Free

GCTI Open Source Detection Signatures

GCTI's open-source detection signatures for malware and threat detection

Threat Management

Free

GOSINT

Open Source Threat Intelligence Gathering and Processing Framework

Threat Management

Free

Malware Signatures Overview

A collection of Yara signatures developed by Citizen Lab to detect malware used in targeted attacks against civil society organizations.

Threat Management

Free

Bearded Avenger

Bearded Avenger is a cybersecurity tool with various integrations and deployment instructions available.

Threat Management

Free

CIFv3

CIFv3 is the next version of the Cyber Intelligence Framework, developed against Ubuntu16, encouraging users to transition from CIFv2.

Threat Management

Free

Posh-VirusTotal PowerShell Module

A PowerShell module for interacting with VirusTotal to analyze suspicious files and URLs.

Threat Management

Free

ThreatNote

ThreatNote is a threat intelligence platform that provides real-time updates on emerging cybersecurity threats, vulnerabilities, and attack vectors to help organizations enhance their security posture.

Threat Management

Free

Malware Indicators of Compromise

Provides indicators of compromise (IOCs) to combat malware with Yara and Snort rules.

Threat Management

Free

bro-intel-generator

Generate Bro intel files from pdf or html reports.

Threat Management

Free

Harbinger

A threat intelligence domain/IP/hash threat feeds checker that checks IPVoid, URLVoid, Virustotal, and Cymon.

Threat Management

Free

Meta's ThreatExchange API Projects

Repository with projects for photo and video hashing, content moderation, and signal exchange.

Free

Parse IOCs from text

Free

A tool that checks if domains are present in Alexa or Cisco top one million domain lists for reputation assessment and threat analysis.

Threat Management

Free

FireEye IOCs

Repository of IOCs provided under the Apache 2.0 license

Threat Management

Free

FireEye Mandiant SunBurst Countermeasures

FireEye Mandiant SunBurst Countermeasures: freely available rules for detecting malicious files and activity

Threat Management

Free

Intel Owl

An Open Source solution for management of Threat Intelligence at scale, integrating multiple analyzers and malware analysis tools.

Threat Management

Free

PyIntelOwl

PyIntelOwl is a Python SDK and CLI client for interacting with IntelOwl's threat intelligence API to submit files and observables for automated security analysis.

Threat Management

Free

IOC Fanger Python Package

Python package for fanging and defanging indicators of compromise in text.

Threat Management

Free

ActorTrackr

ActorTrackr is an open source web application for storing, searching, and linking threat actor intelligence data from public repositories and user contributions.

Threat Management

Free

ThreatCmd

CLI tool for ThreatCrowd.org with multiple query functions.

Threat Management

Free

ThreatCrowd API

A Python library that provides an interface to query ThreatCrowd's API for threat intelligence data including email, IP, domain, and antivirus reports with built-in caching capabilities.

Threat Management

Free

IBM XForce Exchange Checker

Python-based client for IBM XForce Exchange with an improved version available.

Threat Management

Free

ThreatAggregator

Aggregates security threats from online sources and outputs to various formats.

Threat Management

Free

CyberOwl

CyberOwl aggregates and summarizes daily security advisories from multiple CERT organizations and threat intelligence sources into consolidated reports.

Threat Management

Free

FileIntel

A modular tool for collecting intelligence sources for files and outputting in CSV format.

Threat Management

Free

Hostintel

Collect various intelligence sources for hosts in CSV format.

Threat Management

Free

PasteHunter

A python3 application for querying sites hosting publicly pasted data and scanning for sensitive information.

Threat Management

Free

Poortego

A neo4j-based data management platform with command-line interface for analyzing cyber threat indicators and other data points through graph database traversal.

Threat Management

Free

ThreatTracker

An IOC tracker written in Python that queries Google Custom Search Engines for various cybersecurity indicators and monitors domain status using Google Safe Browsing APIs.

Threat Management

Free

ATT&CK® Navigator

A web-based visualization tool for navigating and annotating MITRE ATT&CK matrices to support threat analysis, defensive planning, and security coverage assessment.

Threat Management

Free

MITRE ATT&CK and CAPEC Datasets in STIX 2.0

Repository containing MITRE ATT&CK and CAPEC threat intelligence datasets formatted in STIX 2.0 standard for cybersecurity analysis and threat intelligence sharing.

Threat Management

Free

Combine

Gathers Threat Intelligence Feeds from publicly available sources and provides detailed output in CSV format.

Threat Management

Free

tiq-test

A data visualization and statistical analysis tool for measuring the quality and effectiveness of threat intelligence indicator feeds through various analytical tests.

Threat Management

Free

cti-python-stix2

Python APIs for serializing and de-serializing STIX2 JSON content with higher-level APIs for common tasks.

Threat Management

Free

Forager

Forager is a threat intelligence tool that simplifies the retrieval, storage, and maintenance of threat data with a user-friendly interface and support for various data sources.

Threat Management

Free

nyx Threat Intelligence artifact distribution

nyx is a threat intelligence artifact distribution system that facilitates the sharing of threat intelligence indicators from various sources to defensive security systems with configurable criticality levels.

Threat Management

Free

Hale

Hale is a modular botnet command and control monitoring tool that tracks C&C server communications across multiple protocols with web-based analysis interface and collaborative research capabilities.

Threat Management

Free

Rapid7 Labs Repository

A curated collection of Sigma & Yara rules and Indicators of Compromise (IOCs) for threat detection and malware identification.

Threat Management

Free

DShield

A Pythonic interface to the Internet Storm Center / DShield API

Threat Management

Free

JA3

A method for profiling SSL/TLS Clients with easy-to-produce client fingerprints.

Threat Management

Free

SSC-Threat-Intel-IoCs

Public access to Indicators of Compromise (IoCs) and other data for readers of Security Scorecard's technical blog posts and reports.

Threat Management

Free

MalPipe

A modular malware collection and processing framework with support for various threat intelligence feeds.

Threat Management

Free

VT_RuleMGR.py

Tool for managing Yara rules on VirusTotal

Threat Management

Free

FireHOL IP Aggregator

Aggregator of FireHOL IP lists with HTTP-based API service and Python client package.

Threat Management

Free

Cacador

A tool for extracting common indicators of compromise from a block of text.

Threat Management

Free

Jager

A tool for extracting IOCs from various input sources and converting them into JSON format.

Threat Management

Free

IOCextractor

A program to extract IOCs from text files using regular expressions

Threat Management

Free

BlueBox Malware Analysis Box and Cyber Threat Hunting

Open Source Intelligence solution for threat intelligence data enrichment and quick analysis of suspicious files or malware.

Threat Management

Free

Threatelligence v0.1

A tool for fetching and visualizing cyber threat intelligence data with Elasticsearch and Kibana integration.

Threat Management

Free

Telekom Security Malware Analysis Repository

Repository of scripts, signatures, and IOCs related to various malware analysis topics.

Threat Management

Free

Threat Bus

A threat intelligence dissemination layer for open-source security tools with STIX-2 support and plugin-based architecture.

Threat Management

Free

TypeDB CTI

An open source threat intelligence platform for storing and managing cyber threat intelligence knowledge.

Threat Management

Free

Volexity Threat Intelligence Repository

Repository containing IoCs related to Volexity's threat intelligence blog posts and tools.

Threat Management

Free

VERIS Community Database

A publicly available dataset of security incidents designed to support cybersecurity research and threat analysis.

Threat Management

Free

Python IOC Editor v0.9.8

PyIOCe is a Python-based OpenIOC editor that enables security professionals to create, edit, and manage Indicators of Compromise for threat intelligence and incident response operations.

Threat Management

Free

CINSscore.com

CINSscore.com provides Threat Intelligence database with accurate IP scores and collective defense through community and Sentinel IPS unit sourced data.

Threat Management

Free

Collective Intelligence Framework (CIF)

The FASTEST Way to Consume Threat Intelligence and make it actionable.

Threat Management

Free

IP Reputation Lookup

Check the reputation of an IP address to identify potential threats.

Threat Management

Free

The Pyramid of Pain

A cybersecurity concept categorizing indicators of compromise based on their level of difficulty for threat actors to change.

Threat Management

Free

MANTIS Cyber-Intelligence Management Framework

A framework for managing cyber threat intelligence in structured formats.

Threat Management

Free

Framework for Cybersecurity Info Sharing

A Microsoft framework for secure and efficient sharing of cybersecurity information between trusted parties to reduce cybersecurity risks.

Threat Management

Free

Cisco Umbrella Popularity List

A list of most queried domains based on passive DNS usage across the Umbrella global network.

Threat Management

Free

AT&T Alien Labs Open Threat Exchange

A platform for accessing threat intelligence and collaborating on cyber threats.

Threat Management

Free

botvrij.eu

Freely available network IOCs for monitoring and incident response

Threat Management

Free

RiskAnalytics Solutions Community Projects

RiskAnalytics Solutions offers community projects for cyber threat intelligence sharing and collaboration.

Threat Management

Free

NECOMA

NECOMA focuses on data collection, threat analysis, and developing new cyberdefense mechanisms to protect infrastructure and endpoints.

Threat Management

Free

WOMBAT Project

A project focusing on understanding and combating threats to the Internet economy and net citizens.

Threat Management

Free

Zero Day Initiative Published Advisories

List of publicly disclosed vulnerabilities with security filters and detailed advisories.

Threat Management

Free

abuse.ch

Platform providing community-driven threat intelligence on cyber threats with a focus on malware and botnets.

Threat Management

Free

Threat Intelligence Sharing Platforms

Facilitating exchange of information and knowledge to collectively protect against cyberattacks.

Threat Management

Free

AttackerKB

A platform providing an activity feed on exploited vulnerabilities.

Threat Management

Free

TeamTNT Targeting AWS, Alibaba

TeamTNT is modifying its malicious shell scripts after they were made public by security researchers.

Threat Management

Free

SANS Internet Storm Center

A collaborative platform that gathers and analyzes security data to help professionals identify and mitigate cyber threats.

Threat Management

Free

haktrails

Golang client for querying SecurityTrails API data

Threat Management

Free

Team Cymru Pure Signal Recon

Threat intelligence platform providing real-time data from 300bn+ daily IPs

Threat Management

Check Point ThreatCloud AI

AI-powered threat intelligence platform with generative AI capabilities

Threat Management

Rogueapps

A collaborative repository documenting TTPs and attack patterns associated with malicious OIDC/OAuth 2.0 applications.

Threat Management

Free

Ransomware Tool Matrix

The Ransomware Tool Matrix is a repository that lists and categorizes tools used by ransomware gangs, aiding in threat hunting, incident response, and adversary emulation.

Threat Management

Free

AIL Framework

AIL Framework is a modular system for analyzing and detecting information leaks from unstructured data sources, with capabilities for data extraction, correlation, and integration with threat intelligence platforms.

Threat Management

Free

Top Alternatives to EclecticIQ Intelligence Center

486 Alternatives to EclecticIQ Intelligence Center

Stay Updated with Mandos Brief

TRENDING CATEGORIES

POPULAR