The closest ZeroFox Threat Intelligence Feeds alternatives are Webz.io, Constella Threat Intelligence Data Signals API and Netacea Threat Intel Center. Picking a ZeroFox Threat Intelligence Feeds alternative comes down to fit: Threat Intel Feeds coverage, your environment, your integrations and your budget. So each option below shows what it covers, how it deploys, its pricing model and the company behind it.
42 alternativesClosest matches: Webz.io, Constella Threat Intelligence Data Signals API, Netacea Threat Intel CenterPage updated Nov 2026
The product
ZeroFox Threat Intelligence Feeds
by ZeroFox
Threat intelligence feeds for SOC teams from social, dark web & botnet sources
ZeroFox Threat Intelligence Feeds is a commercial Threat Intel Feeds solution made by ZeroFox. The closest matches by shared tags and NIST CSF 2.0 coverage are Webz.io, Constella Threat Intelligence Data Signals API, Netacea Threat Intel Center, SecurityScorecard Intelligence Feeds, and SecurityZones SURBL BV. All 42 alternatives on this page are ranked the same way.
Hi Citrix. Hide VPNs. Hide Windows on a LAN. Knocknoc solves this. Just in time identity linked allow-listing. DIY, on-premise or SaaS. Prevent attacks fast.
VisitThese 8 solutions overlap most with ZeroFox Threat Intelligence Feeds. Each row says what the product does and, when the overlap is big enough, which capabilities it shares.
Web data platform providing open, deep & dark web APIs and monitoring.
Key features: Dark Web API for accessing deep and dark web data, Data Breach Detection API for identifying exposed credentials and breached data, Open Web APIs covering news, blogs, forums, and reviews, Lunar platform for dark web monitoring and incident response, Account takeover protection via stolen credential tracking
API providing access to compromised identity data and threat signals
Cyber threat intelligence feeds for SOC and threat intelligence teams
Domain reputation threat intelligence feeds for malicious domain detection
Threat intelligence feeds covering 100+ attack types with 5-min updates
Daily threat intel feed identifying malicious IPs with abuse classifications
Investigative intelligence service for law enforcement agencies
Digital threat intel platform with 300TB+ of malware data, AI analytics & forecasting.
Aggregates and normalizes threat intel IOCs into a scored feed for SIEM ingestion
Automotive-focused threat intelligence service producing ISO/SAE 21434 compliant
Technical threat intel feed of compromised IPs/domains from cybercrime sources
Enterprise threat intelligence feeds covering malware, phishing, C2, and IPs
AI-powered threat intelligence feed for automated DDoS protection
Behavior-based threat intel feed delivering malware IOCs with context
Curated phishing threat intelligence feed with predictive detection
Real-time threat intel feeds sourced from honeypots & ISP abuse reports.
Real-time CVE exploitation tracker with active IP feeds and IoC visibility.
Early-warning feed of exploited CVEs with sensor evidence, compared against CISA KEV.
Proactive C2 threat intelligence feed for detecting adversary infrastructure
Threat intelligence platform providing global threat visibility and IoCs
Database for detecting VPNs, proxies, Tor exits, and anonymization services
Weekly threat intelligence briefings published by VerSprite
AI-driven threat intel feeds for automated blocking on 20+ firewall vendors
AI-powered URL classification & IP reputation feed/API for security vendors.
Managed CTI service monitoring dark web & open sources for emerging threats.
Commercial threat intel service for enrichment, attribution
A tiered cyber threat intelligence service providing detection rules from public repositories with varying levels of analysis, processing, and guidance for security teams.
Real-time C2 infrastructure detection and disruption threat intelligence feed
IP intelligence platform for proxy/VPN detection and geolocation
OT/IoT threat intelligence feed for vulnerability and malware detection
API for monitoring ransomware sites to detect org compromises & extortion
CTI services combining human expertise and AI for threat analysis
AI-powered DNS domain threat intelligence service for DDR 2.0 solutions.
Passive DNS intelligence platform for threat detection and investigation.
Vulnerability intel service tracking CVEs for your specific vendor/product stack.
Subscription threat intel service with reports, translations & security notifications.
API providing historical & current DNS, WHOIS, and domain intelligence data.
Mobile-focused threat intel covering apps, devices, URLs, APTs, and malware.
Searchable database of vulnerabilities, alerts, and attack kits
Vulnerability threat intelligence platform with risk-based scoring and CVE/CWE data
Common questions when weighing alternatives to ZeroFox Threat Intelligence Feeds.
The closest matches to ZeroFox Threat Intelligence Feeds by shared tags and NIST CSF 2.0 coverage are Webz.io, Constella Threat Intelligence Data Signals API, Netacea Threat Intel Center, SecurityScorecard Intelligence Feeds, and SecurityZones SURBL BV. All of them are Threat Intel Feeds products.
This page shows 42 alternatives to ZeroFox Threat Intelligence Feeds, all in the Threat Intel Feeds category. Each one is matched on shared tags and NIST CSF 2.0 areas, and the closest matches rank first.
ZeroFox Threat Intelligence Feeds is a commercial Threat Intel Feeds product. It needs a paid license or subscription. Only commercial alternatives are listed here. Free and open source products are under /free.
ZeroFox Threat Intelligence Feeds is a Threat Intel Feeds product in the Threat Intelligence category. You can compare it with the 42 other Threat Intel Feeds products on this page.
Shares 4 capabilities with ZeroFox Threat Intelligence Feeds: Data Breach, Fraud Detection, Cyber Threat Intelligence, Dark Web Monitoring
API providing access to compromised identity data and threat signals
Key features: 9 listed. See them on the Constella Threat Intelligence Data Signals API page.
Shares 4 capabilities with ZeroFox Threat Intelligence Feeds: Data Breach, Fraud Detection, Cyber Threat Intelligence, Dark Web Monitoring
View Constella Threat Intelligence Data Signals APIConstella Threat Intelligence Data Signals API alternativesZeroFox Threat Intelligence Feeds vs Constella Threat Intelligence Data Signals API
Netacea Threat Intel Center is a managed cyber threat intelligence (CTI) service focused on automated threats and bot attacks. It monitors criminal communities, dark web forums, marketplaces, and channels such as Telegram and Discord to gather intelligence on bot threat actors targeting a specific business. The service is delivered through a combination of managed threat research, professional services for specific intelligence-gathering or disruption tasks, and human-curated threat feeds summarizing discussions about a customer's brand or sector. It provides pre- and post-attack intelligence covering areas such as credential stuffing configurations, stolen accounts, cracked cards, fake accounts, stolen loyalty points, scalper bots and modules, scraping tools, and refund fraud schemes. Reports and alerts are intended to support SOC, legal, fraud, and executive teams by providing reconnaissance on attacker plans, defense bypass techniques, and information usable for disruption or prosecution of threat actors.</description> <parameter name="summary">Managed threat intelligence service focused on bot attacks and automated threats
Key features: 10 listed. See them on the Netacea Threat Intel Center page.
Shares 4 capabilities with ZeroFox Threat Intelligence Feeds: Fraud Detection, Cyber Threat Intelligence, Threat Feed, Dark Web Monitoring
View Netacea Threat Intel CenterNetacea Threat Intel Center alternativesZeroFox Threat Intelligence Feeds vs Netacea Threat Intel Center
Cyber threat intelligence feeds for SOC and threat intelligence teams
Key features: 10 listed. See them on the SecurityScorecard Intelligence Feeds page.
Shares 3 capabilities with ZeroFox Threat Intelligence Feeds: Cyber Threat Intelligence, Threat Feed, Dark Web Monitoring
View SecurityScorecard Intelligence FeedsSecurityScorecard Intelligence Feeds alternativesZeroFox Threat Intelligence Feeds vs SecurityScorecard Intelligence Feeds
Domain reputation threat intelligence feeds for malicious domain detection
Key features: 10 listed. See them on the SecurityZones SURBL BV page.
Shares 3 capabilities with ZeroFox Threat Intelligence Feeds: Botnet, Cyber Threat Intelligence, Threat Feed
View SecurityZones SURBL BVSecurityZones SURBL BV alternativesZeroFox Threat Intelligence Feeds vs SecurityZones SURBL BV
Threat intelligence feeds covering 100+ attack types with 5-min updates
Key features: 8 listed. See them on the Netcraft Threat Feeds page.
Shares 3 capabilities with ZeroFox Threat Intelligence Feeds: Fraud Detection, Cyber Threat Intelligence, Threat Feed
View Netcraft Threat FeedsNetcraft Threat Feeds alternativesZeroFox Threat Intelligence Feeds vs Netcraft Threat Feeds
Daily threat intel feed identifying malicious IPs with abuse classifications
Key features: 10 listed. See them on the IPQS IP Address Abuse Feed page.
Shares 3 capabilities with ZeroFox Threat Intelligence Feeds: Fraud Detection, Cyber Threat Intelligence, Threat Feed
View IPQS IP Address Abuse FeedIPQS IP Address Abuse Feed alternativesZeroFox Threat Intelligence Feeds vs IPQS IP Address Abuse Feed
Investigative intelligence service for law enforcement agencies
Key features: 10 listed. See them on the CYJAX Investigative Intelligence page.
Shares 3 capabilities with ZeroFox Threat Intelligence Feeds: Fraud Detection, Cyber Threat Intelligence, Dark Web Monitoring
View CYJAX Investigative IntelligenceCYJAX Investigative Intelligence alternativesZeroFox Threat Intelligence Feeds vs CYJAX Investigative Intelligence
No Threat Intel Feeds shortlist yet. This is the closest one.
Updated 2026-11-01
See the shortlist