
Top picks: Webz.io, zvelo PhishBlocklist™, SecurityZones SURBL BV — plus 45 more compared.
Threat & Vulnerability ManagementEvaluating URLhaus alternatives comes down to matching Threat & Vulnerability Management capabilities to your environment, integrations, and budget rather than chasing feature parity. The options below are compared on what actually drives a switch: coverage, deployment fit, pricing, and real reviews from security teams. Independent and vendor-neutral: we never sell rankings.
URLhaus is a free Threat Intel Feeds tool. Security professionals most commonly compare it with Webz.io, zvelo PhishBlocklist™, SecurityZones SURBL BV, Netcraft Threat Feeds, and alphaMountain Threat Intel & URL Classification. All 48 alternatives are matched by shared capabilities, tags, and NIST CSF 2.0 coverage.
A closer look at the 8 most relevant alternatives and competitors to URLhaus, including their key features and shared capabilities.
Web data platform providing open, deep & dark web APIs and monitoring.
Curated phishing threat intelligence feed with predictive detection
Domain reputation threat intelligence feeds for malicious domain detection
Threat intelligence feeds covering 100+ attack types with 5-min updates
AI-powered URL classification & IP reputation feed/API for security vendors.
ML-based URL & domain classification API for threat and content scoring.
AI-based domain & IP threat scoring API for security product integration.
Community-driven phishing URL archive operated by Cisco Talos.
Curated phishing threat intelligence feed with predictive detection
Domain reputation threat intelligence feeds for malicious domain detection
Threat intelligence feeds covering 100+ attack types with 5-min updates
AI-powered URL classification & IP reputation feed/API for security vendors.
ML-based URL & domain classification API for threat and content scoring.
AI-based domain & IP threat scoring API for security product integration.
RiskAnalytics Solutions offers community projects for cyber threat intelligence sharing and collaboration.
A tiered cyber threat intelligence service providing detection rules from public repositories with varying levels of analysis, processing, and guidance for security teams.
API providing access to compromised identity data and threat signals
Proactive C2 threat intelligence feed for detecting adversary infrastructure
Technical threat intel feed of compromised IPs/domains from cybercrime sources
Real-time C2 infrastructure detection and disruption threat intelligence feed
Threat intelligence platform providing global threat visibility and IoCs
Enterprise threat intelligence feeds covering malware, phishing, C2, and IPs
Threat intelligence feeds providing malware and threat data in multiple formats
API service providing IP geolocation data and intelligence for security use cases
IP intelligence platform for proxy/VPN detection and geolocation
Threat intelligence feeds for SOC teams from social, dark web & botnet sources
Mobile threat intelligence service providing threat data, research, and DFIR
Investigative intelligence service for law enforcement agencies
OT/IoT threat intelligence feed for vulnerability and malware detection
CTI services combining human expertise and AI for threat analysis
Database for detecting VPNs, proxies, Tor exits, and anonymization services
AI-powered threat intelligence feed for automated DDoS protection
Threat intelligence library with 30,000+ threats mapped to MITRE ATT&CK
Cyber threat intelligence feeds for SOC and threat intelligence teams
Weekly threat intelligence briefings published by VerSprite
Behavior-based threat intel feed delivering malware IOCs with context
AI-driven threat intel feeds for automated blocking on 20+ firewall vendors
Daily threat intel feed identifying malicious IPs with abuse classifications
Database for detecting proxies, VPNs, Tor nodes, and high-risk IP addresses
API service for detecting proxies, VPNs, Tor nodes, and malicious IPs
Real-time IP fraud detection and risk scoring API for identifying malicious IPs
IP address blocklist service for identifying and blocking fraudulent IPs
Real-time threat intel feeds sourced from honeypots & ISP abuse reports.
Real-time threat intel platform with IP/domain reputation scoring and low false positives.
Subscription threat intel service with reports, translations & security notifications.
Managed CTI service monitoring dark web & open sources for emerging threats.
Real-time CVE exploitation tracker with active IP feeds and IoC visibility.
Digital threat intel platform with 300TB+ of malware data, AI analytics & forecasting.
AI-powered DNS domain threat intelligence service for DDR 2.0 solutions.
Passive DNS intelligence platform for threat detection and investigation.
API providing historical & current DNS, WHOIS, and domain intelligence data.
A threat intelligence aggregation service that consolidates and summarizes security updates from multiple sources to provide comprehensive cybersecurity situational awareness.
IP reputation & threat intel API backed by honeypot sensors and community reports.
Common questions security professionals ask when evaluating alternatives and competitors to URLhaus.
The most popular alternatives to URLhaus include Webz.io, zvelo PhishBlocklist™, SecurityZones SURBL BV, Netcraft Threat Feeds, and alphaMountain Threat Intel & URL Classification. These Threat Intel Feeds tools offer similar capabilities and are frequently compared by security professionals evaluating their options.
There are 48 alternatives to URLhaus listed on CybersecTools, all within the Threat Intel Feeds category. Each alternative is matched based on shared capabilities, tags, and NIST CSF coverage areas.
URLhaus is a free Threat Intel Feeds tool. You can use it at no cost. Both free and commercial alternatives are available for comparison.
URLhaus is a Threat Intel Feeds tool within the broader Threat & Vulnerability Management category. It is used by security professionals for threat intel feeds capabilities and can be compared against 48 similar tools.