Best Q-Feeds OPNsense Integration Alternatives & Competitors in 2026

ZeroFox Threat Intelligence Feeds

Threat intelligence feeds for SOC teams from social, dark web & botnet sources

Vultara Threat Intelligence

Automotive-focused threat intelligence service producing ISO/SAE 21434 compliant

RiskAnalytics ShadowNet

Free threat intel feed blocking malicious IPs/domains via global sensors.

NETSCOUT ATLAS Intelligence Feed (AIF)

AI-powered threat intelligence feed for automated DDoS protection

SecurityScorecard Intelligence Feeds

Cyber threat intelligence feeds for SOC and threat intelligence teams

SecurityZones SURBL BV

Domain reputation threat intelligence feeds for malicious domain detection

IPQS IP Address Abuse Feed

Daily threat intel feed identifying malicious IPs with abuse classifications

IPQS IP Address Block List

IP address blocklist service for identifying and blocking fraudulent IPs

OpenAVN Data

Digital threat intel platform with 300TB+ of malware data, AI analytics & forecasting.

CyberSafe Feed

Aggregates and normalizes threat intel IOCs into a scored feed for SIEM ingestion

Cyberwatch Vulnerability Encyclopedia

Searchable database of vulnerabilities, alerts, and attack kits

SikkerAPI

IP reputation & threat intel API backed by honeypot sensors and community reports.

Spamhaus Policy Blocklist (PBL)

DNSBL of end-user IP ranges that should not send email directly to MX servers.

BadBot Gateway

IP reputation lookup service with scored indicators and community reports.

CyberOwl

CyberOwl aggregates and summarizes daily security advisories from multiple CERT organizations and threat intelligence sources into consolidated reports.

Constella Threat Intelligence Data Signals API

API providing access to compromised identity data and threat signals

IronNet IronRadar

Proactive C2 threat intelligence feed for detecting adversary infrastructure

KELA Technical Cybercrime Intelligence

Technical threat intel feed of compromised IPs/domains from cybercrime sources

Bitdefender Operational Threat Intelligence

Threat intelligence platform providing global threat visibility and IoCs

Malware Patrol Enterprise CTI

Enterprise threat intelligence feeds covering malware, phishing, C2, and IPs

Malware Patrol Threat Intelligence

Threat intelligence feeds providing malware and threat data in multiple formats

ThreatSTOP IP Defense

Cloud service that automates threat blocking on firewalls, routers & switches

MaxMind IP Geolocation API

API service providing IP geolocation data and intelligence for security use cases

MaxMind GeoIP Insights

IP intelligence platform for proxy/VPN detection and geolocation

CYJAX Investigative Intelligence

Investigative intelligence service for law enforcement agencies

Ivanti Neurons for Vulnerability Knowledge Base

Vulnerability threat intelligence platform with risk-based scoring and CVE/CWE data

DarkOwl Ransomware API

API for monitoring ransomware sites to detect org compromises & extortion

IP2Location IP2Proxy Proxy Detection Database

Database for detecting VPNs, proxies, Tor exits, and anonymization services

VerSprite Weekly Threat Intelligence

Weekly threat intelligence briefings published by VerSprite

VMRay UniqueSignal

Behavior-based threat intel feed delivering malware IOCs with context

zvelo PhishBlocklist™

Curated phishing threat intelligence feed with predictive detection

Nothreat ThreatShield

AI-driven threat intel feeds for automated blocking on 20+ firewall vendors

Netcraft Threat Feeds

Threat intelligence feeds covering 100+ attack types with 5-min updates

Abusix Guardian Intel

Real-time threat intel feeds sourced from honeypots & ISP abuse reports.

Abusix Threat Intelligence

Real-time threat intel platform with IP/domain reputation scoring and low false positives.

alphaMountain Threat Intel & URL Classification

AI-powered URL classification & IP reputation feed/API for security vendors.

Critical Start CTI

Managed CTI service monitoring dark web & open sources for emerging threats.

CrowdSec Live Exploit Tracker

Real-time CVE exploitation tracker with active IP feeds and IoC visibility.

SecurityTrails API™

API providing historical & current DNS, WHOIS, and domain intelligence data.

Mobile Threat Intelligence

Mobile-focused threat intel covering apps, devices, URLs, APTs, and malware.

Broadsheet

Vulnerability intel service tracking CVEs for your specific vendor/product stack.

Packet Forensics Cyber Intelligence

Commercial threat intel service for enrichment, attribution

Cybersec Feeds

A threat intelligence aggregation service that consolidates and summarizes security updates from multiple sources to provide comprehensive cybersecurity situational awareness.

PhishTank

Community-driven phishing URL archive operated by Cisco Talos.

defend.network

Free daily cyber threat briefings and CVE tracking, verified against NVD and CISA KEV.