Best IOCextractor Alternatives & Competitors in 2026

Python IOC Editor v0.9.8

PyIOCe is a Python-based OpenIOC editor that enables security professionals to create, edit, and manage Indicators of Compromise for threat intelligence and incident response operations.

Google Threat Intelligence

Threat intelligence platform combining Google, Mandiant, and VirusTotal data

Feedly Threat Intelligence

AI-powered platform for collecting and analyzing open source threat intelligence

Bitsight Cybersixgill

Cyber threat intelligence platform for monitoring threats, TTPs, and IOCs

HYAS Insight

Infrastructure intelligence platform for threat hunting and investigation

SOC Radar Cyber Threat Intelligence

SOC Radar Cyber Threat Intelligence is a comprehensive platform that provides dark web monitoring, vulnerability intelligence, and threat actor analysis to help organizations proactively defend against cyber threats.

Zeronsec Threat Intelligence

Threat intelligence platform for detection, hunting, and remediation

isMalicious Threat Intelligence

Threat intelligence database with 500M+ malicious IPs, domains, and IOCs via API

Malware Patrol MCP Server

MCP server connecting LLMs to live threat intelligence via natural language

Team Cymru Pure Signal™ Scout

Real-time threat intelligence platform for external threat visibility and IoC analysis

Anomali ThreatStream

Threat intelligence platform aggregating global threat data for detection

Anomali Integrator

Automates distribution of threat intel across security infrastructure

Seqrite Threat Intel

Real-time threat intelligence platform with STIX/TAXII compliance

KELA Cyber Threat Intelligence Platform

Cyber threat intelligence platform monitoring external threats & cybercrime

ZeroFox Intelligence Search

Threat intelligence search platform with correlated data graph

EclecticIQ Intelligence Center

Threat intelligence platform for collecting, analyzing, and sharing CTI data

Cyble Threat Intelligence Platform

Centralized threat intelligence platform for aggregating and operationalizing IOCs

Cyble Cyber Threat Intelligence Platform

AI-driven threat intelligence platform for threat detection and response

ThreatBook Advanced Threat Intelligence (ATI)

Enterprise threat intelligence platform with APAC focus and adversary tracking

Check Point Threat Intelligence

Threat intelligence platform providing strategic & tactical threat analysis

CyCraft CyberTotal

Global threat intelligence platform aggregating CTI sources with AI analysis

Group-IB Threat Intelligence Platform

Enterprise threat intelligence platform for proactive threat detection

Abstract Intel Gallery

Threat intel enrichment platform that correlates events with IOCs and actors

Netcraft Phishing Kit Analysis

Analyzes phishing kits to extract IOCs, attacker infrastructure & tactics

Augur Black

Preemptive threat intelligence platform for incident response and hunting

RiskProfiler - Cyber Threat Intelligence

AI-powered cyber threat intelligence platform for IoC detection and analysis

Maltiverse

Automated threat intel service with IoC search, feeds, and SIEM/SOAR integrations.

Ninja Signal

Enterprise real-time cyber threat intelligence platform.

ELLIO New Historical IP Timeline

Threat intel platform detecting mass exploitation & recon via deception nets

Threat Intelligence Platform

Converts unstructured OSINT & darknet signals into structured STIX 2.1 threat intelligence

iCOUNTER CTOS

Threat intel & TPRM platform detecting adversary intent before exploitation.

Nucleon Cyber AGTI Platform

Adversary-generated threat intelligence platform for attack surface visibility.

Loginsoft VuInerability Intelligence LOVI

Vulnerability intel platform with pre-NVD CVE enrichment, AI scoring & alerts.

MISP TAXII Server

OpenTAXII config enabling TAXII-based threat intel sharing with MISP.

vt-url

VirusTotal API v3 is a threat intelligence platform for scanning files, URLs, and IP addresses, and retrieving reports on threat reputation and context.

Maltiverse

Maltiverse automates Threat Intelligence for small and medium-sized SecOps teams, providing an effective and affordable service.

ThreatIngestor

An extendable tool to extract and aggregate IOCs from threat feeds, integrates with ThreatKB and MISP.

OSTrICa

OSTrICa is an open source plugin-based framework that collects and visualizes threat intelligence data from various sources to help cybersecurity professionals correlate IoCs and enhance their defensive capabilities.

Threat Intelligence Hunter (TIH)

TIH is an intelligence tool that helps you search for IOCs across multiple security feeds and APIs.

Intel Owl

An Open Source solution for management of Threat Intelligence at scale, integrating multiple analyzers and malware analysis tools.

PyIntelOwl

PyIntelOwl is a Python SDK and CLI client for interacting with IntelOwl's threat intelligence API to submit files and observables for automated security analysis.

IOC Fanger Python Package

Python package for fanging and defanging indicators of compromise in text.

ThreatCrowd API

A Python library that provides an interface to query ThreatCrowd's API for threat intelligence data including email, IP, domain, and antivirus reports with built-in caching capabilities.

Forager

Forager is a threat intelligence tool that simplifies the retrieval, storage, and maintenance of threat data with a user-friendly interface and support for various data sources.

Threat Bus

A threat intelligence dissemination layer for open-source security tools with STIX-2 support and plugin-based architecture.

Collective Intelligence Framework (CIF)

The FASTEST Way to Consume Threat Intelligence and make it actionable.

Cypho

Continuous threat intelligence and exposure management across dark, deep & clear web.