# URLhaus alternatives and competitors (2026)

The closest URLhaus alternatives are [Webz.io](https://cybersectools.com/tools/webzio), [zvelo PhishBlocklist™](https://cybersectools.com/tools/zvelo-phishblocklisttm) and [SecurityZones SURBL BV](https://cybersectools.com/tools/securityzones-surbl-bv). Picking an URLhaus alternative comes down to fit: Threat Intel Feeds coverage, your environment, your integrations and your budget. So each option below shows what it covers, how it deploys, its pricing model and the company behind it.

Closest 48 alternatives shown. Closest matches: Webz.io, zvelo PhishBlocklist™, SecurityZones SURBL BV.

## The product

[URLhaus](https://cybersectools.com/tools/urlhaus)

A project sharing malicious URLs used for malware distribution to help protect networks.

Category: [Threat Intelligence](https://cybersectools.com/categories/threat-intelligence) · Pricing model: Free

## URLhaus alternatives and competitors

URLhaus is a free [Threat Intel Feeds](https://cybersectools.com/categories/threat-intel-feeds) solution. The closest matches by shared tags and NIST CSF 2.0 coverage are [Webz.io](https://cybersectools.com/tools/webzio), [zvelo PhishBlocklist™](https://cybersectools.com/tools/zvelo-phishblocklisttm), [SecurityZones SURBL BV](https://cybersectools.com/tools/securityzones-surbl-bv), [Netcraft Threat Feeds](https://cybersectools.com/tools/netcraft-threat-feeds), and [alphaMountain Threat Intel & URL Classification](https://cybersectools.com/tools/alphamountain-threat-intel-and-url-classification). All 48 alternatives on this page are ranked the same way.

Want a free option? See [free and open source threat intelligence solutions](https://cybersectools.com/free), plus free picks in other categories.

## The closest URLhaus alternatives

These 8 solutions overlap most with URLhaus. Each one says what the product does and, when the overlap is big enough, which capabilities it shares.

### 1. [Webz.io](https://cybersectools.com/tools/webzio) (Featured)

Web data platform providing open, deep & dark web APIs and monitoring.

[Threat Intel Feeds](https://cybersectools.com/categories/threat-intel-feeds) · Commercial

Key features: Dark Web API for accessing deep and dark web data, Data Breach Detection API for identifying exposed credentials and breached data, Open Web APIs covering news, blogs, forums, and reviews, Lunar platform for dark web monitoring and incident response, Account takeover protection via stolen credential tracking

[Webz.io alternatives](https://cybersectools.com/alternatives/webzio) · [URLhaus vs Webz.io](https://cybersectools.com/compare/urlhaus-vs-webzio)

### 2. [zvelo PhishBlocklist™](https://cybersectools.com/tools/zvelo-phishblocklisttm)

Curated phishing threat intelligence feed with predictive detection

[Threat Intel Feeds](https://cybersectools.com/categories/threat-intel-feeds) · Commercial

Key features: 10 listed. See them on the [zvelo PhishBlocklist™ page](https://cybersectools.com/tools/zvelo-phishblocklisttm#features).

[zvelo PhishBlocklist™ alternatives](https://cybersectools.com/alternatives/zvelo-phishblocklisttm) · [URLhaus vs zvelo PhishBlocklist™](https://cybersectools.com/compare/urlhaus-vs-zvelo-phishblocklisttm)

### 3. [SecurityZones SURBL BV](https://cybersectools.com/tools/securityzones-surbl-bv)

Domain reputation threat intelligence feeds for malicious domain detection

[Threat Intel Feeds](https://cybersectools.com/categories/threat-intel-feeds) · Commercial

Key features: 10 listed. See them on the [SecurityZones SURBL BV page](https://cybersectools.com/tools/securityzones-surbl-bv#features).

[SecurityZones SURBL BV alternatives](https://cybersectools.com/alternatives/securityzones-surbl-bv) · [URLhaus vs SecurityZones SURBL BV](https://cybersectools.com/compare/securityzones-surbl-bv-vs-urlhaus)

### 4. [Netcraft Threat Feeds](https://cybersectools.com/tools/netcraft-threat-feeds)

Threat intelligence feeds covering 100+ attack types with 5-min updates

[Threat Intel Feeds](https://cybersectools.com/categories/threat-intel-feeds) · Commercial

Key features: 8 listed. See them on the [Netcraft Threat Feeds page](https://cybersectools.com/tools/netcraft-threat-feeds#features).

[Netcraft Threat Feeds alternatives](https://cybersectools.com/alternatives/netcraft-threat-feeds) · [URLhaus vs Netcraft Threat Feeds](https://cybersectools.com/compare/netcraft-threat-feeds-vs-urlhaus)

### 5. [alphaMountain Threat Intel & URL Classification](https://cybersectools.com/tools/alphamountain-threat-intel-and-url-classification)

AI-powered URL classification & IP reputation feed/API for security vendors.

[Threat Intel Feeds](https://cybersectools.com/categories/threat-intel-feeds) · Commercial

Key features: 6 listed. See them on the [alphaMountain Threat Intel & URL Classification page](https://cybersectools.com/tools/alphamountain-threat-intel-and-url-classification#features).

[alphaMountain Threat Intel & URL Classification alternatives](https://cybersectools.com/alternatives/alphamountain-threat-intel-and-url-classification) · [URLhaus vs alphaMountain Threat Intel & URL Classification](https://cybersectools.com/compare/alphamountain-threat-intel-and-url-classification-vs-urlhaus)

### 6. [alphaMountain URL Classification](https://cybersectools.com/tools/alphamountain-url-classification)

ML-based URL & domain classification API for threat and content scoring.

[Threat Intel Feeds](https://cybersectools.com/categories/threat-intel-feeds) · Commercial

Key features: 5 listed. See them on the [alphaMountain URL Classification page](https://cybersectools.com/tools/alphamountain-url-classification#features).

[alphaMountain URL Classification alternatives](https://cybersectools.com/alternatives/alphamountain-url-classification) · [URLhaus vs alphaMountain URL Classification](https://cybersectools.com/compare/alphamountain-url-classification-vs-urlhaus)

### 7. [alphaMountain Domain & IP Reputation](https://cybersectools.com/tools/alphamountain-domain-and-ip-reputation)

AI-based domain & IP threat scoring API for security product integration.

[Threat Intel Feeds](https://cybersectools.com/categories/threat-intel-feeds) · Commercial

Key features: 7 listed. See them on the [alphaMountain Domain & IP Reputation page](https://cybersectools.com/tools/alphamountain-domain-and-ip-reputation#features).

[alphaMountain Domain & IP Reputation alternatives](https://cybersectools.com/alternatives/alphamountain-domain-and-ip-reputation) · [URLhaus vs alphaMountain Domain & IP Reputation](https://cybersectools.com/compare/alphamountain-domain-and-ip-reputation-vs-urlhaus)

### 8. [CTIChef.com Detection Feeds](https://cybersectools.com/tools/ctichefcom-detection-feeds)

A tiered cyber threat intelligence service providing detection rules from public repositories with varying levels of analysis, processing, and guidance for security teams.

[Threat Intel Feeds](https://cybersectools.com/categories/threat-intel-feeds) · Commercial

Key features: 3 listed. See them on the [CTIChef.com Detection Feeds page](https://cybersectools.com/tools/ctichefcom-detection-feeds#features).

[CTIChef.com Detection Feeds alternatives](https://cybersectools.com/alternatives/ctichefcom-detection-feeds) · [URLhaus vs CTIChef.com Detection Feeds](https://cybersectools.com/compare/ctichefcom-detection-feeds-vs-urlhaus)

## The closest 48 products like URLhaus

The 8 above, plus:

- [Constella Threat Intelligence Data Signals API](https://cybersectools.com/tools/constella-threat-intelligence-data-signals-api): API providing access to compromised identity data and threat signals (Commercial)
- [KELA Technical Cybercrime Intelligence](https://cybersectools.com/tools/kela-technical-cybercrime-intelligence): Technical threat intel feed of compromised IPs/domains from cybercrime sources (Commercial)
- [OPSWAT MetaDefender InSights C2](https://cybersectools.com/tools/opswat-metadefender-insights-c2): Real-time C2 infrastructure detection and disruption threat intelligence feed (Commercial)
- [Malware Patrol Enterprise CTI](https://cybersectools.com/tools/malware-patrol-enterprise-cti): Enterprise threat intelligence feeds covering malware, phishing, C2, and IPs (Commercial)
- [ZeroFox Threat Intelligence Feeds](https://cybersectools.com/tools/zerofox-threat-intelligence-feeds): Threat intelligence feeds for SOC teams from social, dark web & botnet sources (Commercial)
- [Sec1 ZeroDefender](https://cybersectools.com/tools/sec1-zerodefender): Real-time zero-day vulnerability detection and alerting platform (Commercial)
- [Nozomi Networks Threat Intelligence](https://cybersectools.com/tools/nozomi-networks-threat-intelligence): OT/IoT threat intelligence feed for vulnerability and malware detection (Commercial)
- [Hitachi Cyber Cyber Threat Intelligence Services](https://cybersectools.com/tools/hitachi-cyber-cyber-threat-intelligence-services): CTI services combining human expertise and AI for threat analysis (Commercial)
- [NETSCOUT ATLAS Intelligence Feed (AIF)](https://cybersectools.com/tools/netscout-atlas-intelligence-feed-aif): AI-powered threat intelligence feed for automated DDoS protection (Commercial)
- [SecurityScorecard Intelligence Feeds](https://cybersectools.com/tools/securityscorecard-intelligence-feeds): Cyber threat intelligence feeds for SOC and threat intelligence teams (Commercial)
- [VMRay UniqueSignal](https://cybersectools.com/tools/vmray-uniquesignal): Behavior-based threat intel feed delivering malware IOCs with context (Commercial)
- [IPQS IP Address Abuse Feed](https://cybersectools.com/tools/ipqs-ip-address-abuse-feed): Daily threat intel feed identifying malicious IPs with abuse classifications (Commercial)
- [Abusix Guardian Intel](https://cybersectools.com/tools/abusix-guardian-intel): Real-time threat intel feeds sourced from honeypots & ISP abuse reports. (Commercial)
- [Abusix Threat Intelligence](https://cybersectools.com/tools/abusix-threat-intelligence): Real-time threat intel platform with IP/domain reputation scoring and low false positives. (Commercial)
- [CrowdSec Live Exploit Tracker](https://cybersectools.com/tools/crowdsec-live-exploit-tracker): Real-time CVE exploitation tracker with active IP feeds and IoC visibility. (Commercial)
- [DNSSense Cyber X-Ray](https://cybersectools.com/tools/dnssense-cyber-x-ray): AI-powered DNS domain threat intelligence service for DDR 2.0 solutions. (Commercial)
- [Farsight Security DNSDB](https://cybersectools.com/tools/farsight-security-dnsdb): Passive DNS intelligence platform for threat detection and investigation. (Commercial)
- [Netacea Threat Intel Center](https://cybersectools.com/tools/netacea-threat-intel-center) (Commercial)
- [Previdian](https://cybersectools.com/tools/previdian): Early-warning feed of exploited CVEs with sensor evidence, compared against CISA KEV. (Commercial)
- [IronNet IronRadar](https://cybersectools.com/tools/ironnet-ironradar): Proactive C2 threat intelligence feed for detecting adversary infrastructure (Commercial)
- [Bitdefender Operational Threat Intelligence](https://cybersectools.com/tools/bitdefender-operational-threat-intelligence): Threat intelligence platform providing global threat visibility and IoCs (Commercial)
- [Malware Patrol Threat Intelligence](https://cybersectools.com/tools/malware-patrol-threat-intelligence): Threat intelligence feeds providing malware and threat data in multiple formats (Commercial)
- [MaxMind IP Geolocation API](https://cybersectools.com/tools/maxmind-ip-geolocation-api): API service providing IP geolocation data and intelligence for security use cases (Commercial)
- [CYJAX Investigative Intelligence](https://cybersectools.com/tools/cyjax-investigative-intelligence): Investigative intelligence service for law enforcement agencies (Commercial)
- [IP2Location IP2Proxy Proxy Detection Database](https://cybersectools.com/tools/ip2location-ip2proxy-proxy-detection-database): Database for detecting VPNs, proxies, Tor exits, and anonymization services (Commercial)
- [VerSprite Weekly Threat Intelligence](https://cybersectools.com/tools/versprite-weekly-threat-intelligence): Weekly threat intelligence briefings published by VerSprite (Commercial)
- [Nothreat ThreatShield](https://cybersectools.com/tools/nothreat-threatshield): AI-driven threat intel feeds for automated blocking on 20+ firewall vendors (Commercial)
- [IPQS IP Address Block List](https://cybersectools.com/tools/ipqs-ip-address-block-list): IP address blocklist service for identifying and blocking fraudulent IPs (Commercial)
- [Antiy High-level Threat Intelligence Svc](https://cybersectools.com/tools/antiy-high-level-threat-intelligence-svc): Subscription threat intel service with reports, translations & security notifications. (Commercial)
- [Critical Start CTI](https://cybersectools.com/tools/critical-start-cti): Managed CTI service monitoring dark web & open sources for emerging threats. (Commercial)
- [OpenAVN Data](https://cybersectools.com/tools/openavn-data): Digital threat intel platform with 300TB+ of malware data, AI analytics & forecasting. (Commercial)
- [SecurityTrails API™](https://cybersectools.com/tools/securitytrails-apitm): API providing historical & current DNS, WHOIS, and domain intelligence data. (Commercial)
- [Mobile Threat Intelligence](https://cybersectools.com/tools/lookout-mobile-threat-intelligence): Mobile-focused threat intel covering apps, devices, URLs, APTs, and malware. (Commercial)
- [CyberSafe Feed](https://cybersectools.com/tools/cybersafe-feed): Aggregates and normalizes threat intel IOCs into a scored feed for SIEM ingestion (Commercial)
- [Packet Forensics Cyber Intelligence](https://cybersectools.com/tools/packet-forensics-cyber-intelligence): Commercial threat intel service for enrichment, attribution (Commercial)
- [Vultara Threat Intelligence](https://cybersectools.com/tools/vultara-threat-intelligence): Automotive-focused threat intelligence service producing ISO/SAE 21434 compliant (Commercial)
- [MaxMind GeoIP Insights](https://cybersectools.com/tools/maxmind-geoip-insights): IP intelligence platform for proxy/VPN detection and geolocation (Commercial)
- [DarkOwl Ransomware API](https://cybersectools.com/tools/darkowl-ransomware-api): API for monitoring ransomware sites to detect org compromises & extortion (Commercial)
- [Picus Threat Library](https://cybersectools.com/tools/picus-threat-library): Threat intelligence library with 30,000+ threats mapped to MITRE ATT&CK (Commercial)
- [Abusix Guardian](https://cybersectools.com/tools/abusix-guardian): Suite for abuse desk mgmt, email blocklisting & threat intel for ISPs. (Commercial)

## Alternatives to each of these

[Webz.io alternatives](https://cybersectools.com/alternatives/webzio) · [zvelo PhishBlocklist™ alternatives](https://cybersectools.com/alternatives/zvelo-phishblocklisttm) · [SecurityZones SURBL BV alternatives](https://cybersectools.com/alternatives/securityzones-surbl-bv) · [Netcraft Threat Feeds alternatives](https://cybersectools.com/alternatives/netcraft-threat-feeds) · [alphaMountain Threat Intel & URL Classification alternatives](https://cybersectools.com/alternatives/alphamountain-threat-intel-and-url-classification) · [alphaMountain URL Classification alternatives](https://cybersectools.com/alternatives/alphamountain-url-classification) · [alphaMountain Domain & IP Reputation alternatives](https://cybersectools.com/alternatives/alphamountain-domain-and-ip-reputation) · [CTIChef.com Detection Feeds alternatives](https://cybersectools.com/alternatives/ctichefcom-detection-feeds) · [Constella Threat Intelligence Data Signals API alternatives](https://cybersectools.com/alternatives/constella-threat-intelligence-data-signals-api) · [KELA Technical Cybercrime Intelligence alternatives](https://cybersectools.com/alternatives/kela-technical-cybercrime-intelligence) · [OPSWAT MetaDefender InSights C2 alternatives](https://cybersectools.com/alternatives/opswat-metadefender-insights-c2) · [Malware Patrol Enterprise CTI alternatives](https://cybersectools.com/alternatives/malware-patrol-enterprise-cti)

## Compare URLhaus with

- [URLhaus vs Webz.io](https://cybersectools.com/compare/urlhaus-vs-webzio)
- [URLhaus vs zvelo PhishBlocklist™](https://cybersectools.com/compare/urlhaus-vs-zvelo-phishblocklisttm)
- [URLhaus vs SecurityZones SURBL BV](https://cybersectools.com/compare/securityzones-surbl-bv-vs-urlhaus)
- [URLhaus vs Netcraft Threat Feeds](https://cybersectools.com/compare/netcraft-threat-feeds-vs-urlhaus)
- [URLhaus vs alphaMountain Threat Intel & URL Classification](https://cybersectools.com/compare/alphamountain-threat-intel-and-url-classification-vs-urlhaus)
- [URLhaus vs alphaMountain URL Classification](https://cybersectools.com/compare/alphamountain-url-classification-vs-urlhaus)
- [URLhaus vs alphaMountain Domain & IP Reputation](https://cybersectools.com/compare/alphamountain-domain-and-ip-reputation-vs-urlhaus)
- [URLhaus vs CTIChef.com Detection Feeds](https://cybersectools.com/compare/ctichefcom-detection-feeds-vs-urlhaus)

## URLhaus Alternatives FAQ

### What are the closest alternatives to URLhaus?

The closest matches to URLhaus by shared tags and NIST CSF 2.0 coverage are Webz.io, zvelo PhishBlocklist™, SecurityZones SURBL BV, Netcraft Threat Feeds, and alphaMountain Threat Intel & URL Classification. All of them are Threat Intel Feeds products.

### How many alternatives to URLhaus are available?

This page shows 48 alternatives to URLhaus, all in the Threat Intel Feeds category. Each one is matched on shared tags and NIST CSF 2.0 areas, and the closest matches rank first.

### Is URLhaus free or commercial?

URLhaus is a free Threat Intel Feeds product. You can use it at no cost. Only commercial alternatives are listed here. Free and open source products are under /free.

### What type of solution is URLhaus?

URLhaus is a Threat Intel Feeds product in the Threat Intelligence category. You can compare it with the 48 other Threat Intel Feeds products on this page.

---

Source: https://cybersectools.com/alternatives/urlhaus

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any product or compare page has a Markdown copy too (add .md to its URL).

More on URLhaus and its alternatives: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=alternatives-md