# ZeroFox Threat Intelligence Feeds alternatives and competitors (2026) The closest ZeroFox Threat Intelligence Feeds alternatives are [Webz.io](https://cybersectools.com/tools/webzio), [Constella Threat Intelligence Data Signals API](https://cybersectools.com/tools/constella-threat-intelligence-data-signals-api) and [Netacea Threat Intel Center](https://cybersectools.com/tools/netacea-threat-intel-center). Picking a ZeroFox Threat Intelligence Feeds alternative comes down to fit: Threat Intel Feeds coverage, your environment, your integrations and your budget. So each option below shows what it covers, how it deploys, its pricing model and the company behind it. 42 alternatives. Closest matches: Webz.io, Constella Threat Intelligence Data Signals API, Netacea Threat Intel Center. ## The product [ZeroFox Threat Intelligence Feeds](https://cybersectools.com/tools/zerofox-threat-intelligence-feeds) by ZeroFox Threat intelligence feeds for SOC teams from social, dark web & botnet sources Category: [Threat Intelligence](https://cybersectools.com/categories/threat-intelligence) · Pricing model: Commercial ## ZeroFox Threat Intelligence Feeds alternatives and competitors ZeroFox Threat Intelligence Feeds is a commercial [Threat Intel Feeds](https://cybersectools.com/categories/threat-intel-feeds) solution made by ZeroFox. The closest matches by shared tags and NIST CSF 2.0 coverage are [Webz.io](https://cybersectools.com/tools/webzio), [Constella Threat Intelligence Data Signals API](https://cybersectools.com/tools/constella-threat-intelligence-data-signals-api), [Netacea Threat Intel Center](https://cybersectools.com/tools/netacea-threat-intel-center), [SecurityScorecard Intelligence Feeds](https://cybersectools.com/tools/securityscorecard-intelligence-feeds), and [SecurityZones SURBL BV](https://cybersectools.com/tools/securityzones-surbl-bv). All 42 alternatives on this page are ranked the same way. ## The closest ZeroFox Threat Intelligence Feeds alternatives These 8 solutions overlap most with ZeroFox Threat Intelligence Feeds. Each one says what the product does and, when the overlap is big enough, which capabilities it shares. ### 1. [Webz.io](https://cybersectools.com/tools/webzio) (Featured) Web data platform providing open, deep & dark web APIs and monitoring. [Threat Intel Feeds](https://cybersectools.com/categories/threat-intel-feeds) · Commercial Key features: Dark Web API for accessing deep and dark web data, Data Breach Detection API for identifying exposed credentials and breached data, Open Web APIs covering news, blogs, forums, and reviews, Lunar platform for dark web monitoring and incident response, Account takeover protection via stolen credential tracking Shares 4 capabilities with ZeroFox Threat Intelligence Feeds: Data Breach, Fraud Detection, Cyber Threat Intelligence, Dark Web Monitoring [Webz.io alternatives](https://cybersectools.com/alternatives/webzio) · [ZeroFox Threat Intelligence Feeds vs Webz.io](https://cybersectools.com/compare/webzio-vs-zerofox-threat-intelligence-feeds) ### 2. [Constella Threat Intelligence Data Signals API](https://cybersectools.com/tools/constella-threat-intelligence-data-signals-api) API providing access to compromised identity data and threat signals [Threat Intel Feeds](https://cybersectools.com/categories/threat-intel-feeds) · Commercial Key features: 9 listed. See them on the [Constella Threat Intelligence Data Signals API page](https://cybersectools.com/tools/constella-threat-intelligence-data-signals-api#features). Shares 4 capabilities with ZeroFox Threat Intelligence Feeds: Data Breach, Fraud Detection, Cyber Threat Intelligence, Dark Web Monitoring [Constella Threat Intelligence Data Signals API alternatives](https://cybersectools.com/alternatives/constella-threat-intelligence-data-signals-api) · [ZeroFox Threat Intelligence Feeds vs Constella Threat Intelligence Data Signals API](https://cybersectools.com/compare/constella-threat-intelligence-data-signals-api-vs-zerofox-threat-intelligence-feeds) ### 3. [Netacea Threat Intel Center](https://cybersectools.com/tools/netacea-threat-intel-center) Netacea Threat Intel Center is a managed cyber threat intelligence (CTI) service focused on automated threats and bot attacks. It monitors criminal communities, dark web forums, marketplaces, and channels such as Telegram and Discord to gather intelligence on bot threat actors targeting a specific business. The service is delivered through a combination of managed threat research, professional services for specific intelligence-gathering or disruption tasks, and human-curated threat feeds summarizing discussions about a customer's brand or sector. It provides pre- and post-attack intelligence covering areas such as credential stuffing configurations, stolen accounts, cracked cards, fake accounts, stolen loyalty points, scalper bots and modules, scraping tools, and refund fraud schemes. Reports and alerts are intended to support SOC, legal, fraud, and executive teams by providing reconnaissance on attacker plans, defense bypass techniques, and information usable for disruption or prosecution of threat actors. Managed threat intelligence service focused on bot attacks and automated threats [Threat Intel Feeds](https://cybersectools.com/categories/threat-intel-feeds) · Commercial Key features: 10 listed. See them on the [Netacea Threat Intel Center page](https://cybersectools.com/tools/netacea-threat-intel-center#features). Shares 4 capabilities with ZeroFox Threat Intelligence Feeds: Fraud Detection, Cyber Threat Intelligence, Threat Feed, Dark Web Monitoring [Netacea Threat Intel Center alternatives](https://cybersectools.com/alternatives/netacea-threat-intel-center) · [ZeroFox Threat Intelligence Feeds vs Netacea Threat Intel Center](https://cybersectools.com/compare/netacea-threat-intel-center-vs-zerofox-threat-intelligence-feeds) ### 4. [SecurityScorecard Intelligence Feeds](https://cybersectools.com/tools/securityscorecard-intelligence-feeds) Cyber threat intelligence feeds for SOC and threat intelligence teams [Threat Intel Feeds](https://cybersectools.com/categories/threat-intel-feeds) · Commercial Key features: 10 listed. See them on the [SecurityScorecard Intelligence Feeds page](https://cybersectools.com/tools/securityscorecard-intelligence-feeds#features). Shares 3 capabilities with ZeroFox Threat Intelligence Feeds: Cyber Threat Intelligence, Threat Feed, Dark Web Monitoring [SecurityScorecard Intelligence Feeds alternatives](https://cybersectools.com/alternatives/securityscorecard-intelligence-feeds) · [ZeroFox Threat Intelligence Feeds vs SecurityScorecard Intelligence Feeds](https://cybersectools.com/compare/securityscorecard-intelligence-feeds-vs-zerofox-threat-intelligence-feeds) ### 5. [SecurityZones SURBL BV](https://cybersectools.com/tools/securityzones-surbl-bv) Domain reputation threat intelligence feeds for malicious domain detection [Threat Intel Feeds](https://cybersectools.com/categories/threat-intel-feeds) · Commercial Key features: 10 listed. See them on the [SecurityZones SURBL BV page](https://cybersectools.com/tools/securityzones-surbl-bv#features). Shares 3 capabilities with ZeroFox Threat Intelligence Feeds: Botnet, Cyber Threat Intelligence, Threat Feed [SecurityZones SURBL BV alternatives](https://cybersectools.com/alternatives/securityzones-surbl-bv) · [ZeroFox Threat Intelligence Feeds vs SecurityZones SURBL BV](https://cybersectools.com/compare/securityzones-surbl-bv-vs-zerofox-threat-intelligence-feeds) ### 6. [Netcraft Threat Feeds](https://cybersectools.com/tools/netcraft-threat-feeds) Threat intelligence feeds covering 100+ attack types with 5-min updates [Threat Intel Feeds](https://cybersectools.com/categories/threat-intel-feeds) · Commercial Key features: 8 listed. See them on the [Netcraft Threat Feeds page](https://cybersectools.com/tools/netcraft-threat-feeds#features). Shares 3 capabilities with ZeroFox Threat Intelligence Feeds: Fraud Detection, Cyber Threat Intelligence, Threat Feed [Netcraft Threat Feeds alternatives](https://cybersectools.com/alternatives/netcraft-threat-feeds) · [ZeroFox Threat Intelligence Feeds vs Netcraft Threat Feeds](https://cybersectools.com/compare/netcraft-threat-feeds-vs-zerofox-threat-intelligence-feeds) ### 7. [IPQS IP Address Abuse Feed](https://cybersectools.com/tools/ipqs-ip-address-abuse-feed) Daily threat intel feed identifying malicious IPs with abuse classifications [Threat Intel Feeds](https://cybersectools.com/categories/threat-intel-feeds) · Commercial Key features: 10 listed. See them on the [IPQS IP Address Abuse Feed page](https://cybersectools.com/tools/ipqs-ip-address-abuse-feed#features). Shares 3 capabilities with ZeroFox Threat Intelligence Feeds: Fraud Detection, Cyber Threat Intelligence, Threat Feed [IPQS IP Address Abuse Feed alternatives](https://cybersectools.com/alternatives/ipqs-ip-address-abuse-feed) · [ZeroFox Threat Intelligence Feeds vs IPQS IP Address Abuse Feed](https://cybersectools.com/compare/ipqs-ip-address-abuse-feed-vs-zerofox-threat-intelligence-feeds) ### 8. [CYJAX Investigative Intelligence](https://cybersectools.com/tools/cyjax-investigative-intelligence) Investigative intelligence service for law enforcement agencies [Threat Intel Feeds](https://cybersectools.com/categories/threat-intel-feeds) · Commercial Key features: 10 listed. See them on the [CYJAX Investigative Intelligence page](https://cybersectools.com/tools/cyjax-investigative-intelligence#features). Shares 3 capabilities with ZeroFox Threat Intelligence Feeds: Fraud Detection, Cyber Threat Intelligence, Dark Web Monitoring [CYJAX Investigative Intelligence alternatives](https://cybersectools.com/alternatives/cyjax-investigative-intelligence) · [ZeroFox Threat Intelligence Feeds vs CYJAX Investigative Intelligence](https://cybersectools.com/compare/cyjax-investigative-intelligence-vs-zerofox-threat-intelligence-feeds) ## All 42 products like ZeroFox Threat Intelligence Feeds The 8 above, plus: - [OpenAVN Data](https://cybersectools.com/tools/openavn-data): Digital threat intel platform with 300TB+ of malware data, AI analytics & forecasting. (Commercial) - [CyberSafe Feed](https://cybersectools.com/tools/cybersafe-feed): Aggregates and normalizes threat intel IOCs into a scored feed for SIEM ingestion (Commercial) - [Vultara Threat Intelligence](https://cybersectools.com/tools/vultara-threat-intelligence): Automotive-focused threat intelligence service producing ISO/SAE 21434 compliant (Commercial) - [KELA Technical Cybercrime Intelligence](https://cybersectools.com/tools/kela-technical-cybercrime-intelligence): Technical threat intel feed of compromised IPs/domains from cybercrime sources (Commercial) - [Malware Patrol Enterprise CTI](https://cybersectools.com/tools/malware-patrol-enterprise-cti): Enterprise threat intelligence feeds covering malware, phishing, C2, and IPs (Commercial) - [NETSCOUT ATLAS Intelligence Feed (AIF)](https://cybersectools.com/tools/netscout-atlas-intelligence-feed-aif): AI-powered threat intelligence feed for automated DDoS protection (Commercial) - [VMRay UniqueSignal](https://cybersectools.com/tools/vmray-uniquesignal): Behavior-based threat intel feed delivering malware IOCs with context (Commercial) - [zvelo PhishBlocklist™](https://cybersectools.com/tools/zvelo-phishblocklisttm): Curated phishing threat intelligence feed with predictive detection (Commercial) - [Abusix Guardian Intel](https://cybersectools.com/tools/abusix-guardian-intel): Real-time threat intel feeds sourced from honeypots & ISP abuse reports. (Commercial) - [CrowdSec Live Exploit Tracker](https://cybersectools.com/tools/crowdsec-live-exploit-tracker): Real-time CVE exploitation tracker with active IP feeds and IoC visibility. (Commercial) - [Previdian](https://cybersectools.com/tools/previdian): Early-warning feed of exploited CVEs with sensor evidence, compared against CISA KEV. (Commercial) - [IronNet IronRadar](https://cybersectools.com/tools/ironnet-ironradar): Proactive C2 threat intelligence feed for detecting adversary infrastructure (Commercial) - [Bitdefender Operational Threat Intelligence](https://cybersectools.com/tools/bitdefender-operational-threat-intelligence): Threat intelligence platform providing global threat visibility and IoCs (Commercial) - [IP2Location IP2Proxy Proxy Detection Database](https://cybersectools.com/tools/ip2location-ip2proxy-proxy-detection-database): Database for detecting VPNs, proxies, Tor exits, and anonymization services (Commercial) - [VerSprite Weekly Threat Intelligence](https://cybersectools.com/tools/versprite-weekly-threat-intelligence): Weekly threat intelligence briefings published by VerSprite (Commercial) - [Nothreat ThreatShield](https://cybersectools.com/tools/nothreat-threatshield): AI-driven threat intel feeds for automated blocking on 20+ firewall vendors (Commercial) - [alphaMountain Threat Intel & URL Classification](https://cybersectools.com/tools/alphamountain-threat-intel-and-url-classification): AI-powered URL classification & IP reputation feed/API for security vendors. (Commercial) - [Critical Start CTI](https://cybersectools.com/tools/critical-start-cti): Managed CTI service monitoring dark web & open sources for emerging threats. (Commercial) - [Packet Forensics Cyber Intelligence](https://cybersectools.com/tools/packet-forensics-cyber-intelligence): Commercial threat intel service for enrichment, attribution (Commercial) - [CTIChef.com Detection Feeds](https://cybersectools.com/tools/ctichefcom-detection-feeds): A tiered cyber threat intelligence service providing detection rules from public repositories with varying levels of analysis, processing, and guidance for security teams. (Commercial) - [OPSWAT MetaDefender InSights C2](https://cybersectools.com/tools/opswat-metadefender-insights-c2): Real-time C2 infrastructure detection and disruption threat intelligence feed (Commercial) - [MaxMind GeoIP Insights](https://cybersectools.com/tools/maxmind-geoip-insights): IP intelligence platform for proxy/VPN detection and geolocation (Commercial) - [Sec1 ZeroDefender](https://cybersectools.com/tools/sec1-zerodefender): Real-time zero-day vulnerability detection and alerting platform (Commercial) - [Nozomi Networks Threat Intelligence](https://cybersectools.com/tools/nozomi-networks-threat-intelligence): OT/IoT threat intelligence feed for vulnerability and malware detection (Commercial) - [DarkOwl Ransomware API](https://cybersectools.com/tools/darkowl-ransomware-api): API for monitoring ransomware sites to detect org compromises & extortion (Commercial) - [Hitachi Cyber Cyber Threat Intelligence Services](https://cybersectools.com/tools/hitachi-cyber-cyber-threat-intelligence-services): CTI services combining human expertise and AI for threat analysis (Commercial) - [DNSSense Cyber X-Ray](https://cybersectools.com/tools/dnssense-cyber-x-ray): AI-powered DNS domain threat intelligence service for DDR 2.0 solutions. (Commercial) - [Farsight Security DNSDB](https://cybersectools.com/tools/farsight-security-dnsdb): Passive DNS intelligence platform for threat detection and investigation. (Commercial) - [Broadsheet](https://cybersectools.com/tools/broadsheet): Vulnerability intel service tracking CVEs for your specific vendor/product stack. (Commercial) - [Antiy High-level Threat Intelligence Svc](https://cybersectools.com/tools/antiy-high-level-threat-intelligence-svc): Subscription threat intel service with reports, translations & security notifications. (Commercial) - [SecurityTrails API™](https://cybersectools.com/tools/securitytrails-apitm): API providing historical & current DNS, WHOIS, and domain intelligence data. (Commercial) - [Mobile Threat Intelligence](https://cybersectools.com/tools/lookout-mobile-threat-intelligence): Mobile-focused threat intel covering apps, devices, URLs, APTs, and malware. (Commercial) - [Cyberwatch Vulnerability Encyclopedia](https://cybersectools.com/tools/cyberwatch-vulnerability-encyclopedia): Searchable database of vulnerabilities, alerts, and attack kits (Commercial) - [Ivanti Neurons for Vulnerability Knowledge Base](https://cybersectools.com/tools/ivanti-neurons-for-vulnerability-knowledge-base): Vulnerability threat intelligence platform with risk-based scoring and CVE/CWE data (Commercial) ## Alternatives to each of these [Webz.io alternatives](https://cybersectools.com/alternatives/webzio) · [Constella Threat Intelligence Data Signals API alternatives](https://cybersectools.com/alternatives/constella-threat-intelligence-data-signals-api) · [Netacea Threat Intel Center alternatives](https://cybersectools.com/alternatives/netacea-threat-intel-center) · [SecurityScorecard Intelligence Feeds alternatives](https://cybersectools.com/alternatives/securityscorecard-intelligence-feeds) · [SecurityZones SURBL BV alternatives](https://cybersectools.com/alternatives/securityzones-surbl-bv) · [Netcraft Threat Feeds alternatives](https://cybersectools.com/alternatives/netcraft-threat-feeds) · [IPQS IP Address Abuse Feed alternatives](https://cybersectools.com/alternatives/ipqs-ip-address-abuse-feed) · [CYJAX Investigative Intelligence alternatives](https://cybersectools.com/alternatives/cyjax-investigative-intelligence) · [OpenAVN Data alternatives](https://cybersectools.com/alternatives/openavn-data) · [CyberSafe Feed alternatives](https://cybersectools.com/alternatives/cybersafe-feed) · [Vultara Threat Intelligence alternatives](https://cybersectools.com/alternatives/vultara-threat-intelligence) · [KELA Technical Cybercrime Intelligence alternatives](https://cybersectools.com/alternatives/kela-technical-cybercrime-intelligence) ## Other ZeroFox products [ZeroFox alternatives](https://cybersectools.com/alternatives/zerofox) · [ZeroFox Brand Protection alternatives](https://cybersectools.com/alternatives/zerofox-brand-protection) · [ZeroFox Dark Ops alternatives](https://cybersectools.com/alternatives/zerofox-dark-ops) · [ZeroFox Dark Web Monitoring alternatives](https://cybersectools.com/alternatives/zerofox-dark-web-monitoring) · [ZeroFox Digital Risk Protection alternatives](https://cybersectools.com/alternatives/zerofox-protection) · [ZeroFox Domain and Phishing Protection alternatives](https://cybersectools.com/alternatives/zerofox-domain-and-phishing-protection) · [ZeroFox Intelligence Search alternatives](https://cybersectools.com/alternatives/zerofox-intelligence-search) · [ZeroFox Universal Takedowns alternatives](https://cybersectools.com/alternatives/zerofox-universal-takedowns) ## Compare ZeroFox Threat Intelligence Feeds with - [ZeroFox Threat Intelligence Feeds vs Webz.io](https://cybersectools.com/compare/webzio-vs-zerofox-threat-intelligence-feeds) - [ZeroFox Threat Intelligence Feeds vs Constella Threat Intelligence Data Signals API](https://cybersectools.com/compare/constella-threat-intelligence-data-signals-api-vs-zerofox-threat-intelligence-feeds) - [ZeroFox Threat Intelligence Feeds vs Netacea Threat Intel Center](https://cybersectools.com/compare/netacea-threat-intel-center-vs-zerofox-threat-intelligence-feeds) - [ZeroFox Threat Intelligence Feeds vs SecurityScorecard Intelligence Feeds](https://cybersectools.com/compare/securityscorecard-intelligence-feeds-vs-zerofox-threat-intelligence-feeds) - [ZeroFox Threat Intelligence Feeds vs SecurityZones SURBL BV](https://cybersectools.com/compare/securityzones-surbl-bv-vs-zerofox-threat-intelligence-feeds) - [ZeroFox Threat Intelligence Feeds vs Netcraft Threat Feeds](https://cybersectools.com/compare/netcraft-threat-feeds-vs-zerofox-threat-intelligence-feeds) - [ZeroFox Threat Intelligence Feeds vs IPQS IP Address Abuse Feed](https://cybersectools.com/compare/ipqs-ip-address-abuse-feed-vs-zerofox-threat-intelligence-feeds) - [ZeroFox Threat Intelligence Feeds vs CYJAX Investigative Intelligence](https://cybersectools.com/compare/cyjax-investigative-intelligence-vs-zerofox-threat-intelligence-feeds) ## ZeroFox Threat Intelligence Feeds Alternatives FAQ ### What are the closest alternatives to ZeroFox Threat Intelligence Feeds? The closest matches to ZeroFox Threat Intelligence Feeds by shared tags and NIST CSF 2.0 coverage are Webz.io, Constella Threat Intelligence Data Signals API, Netacea Threat Intel Center, SecurityScorecard Intelligence Feeds, and SecurityZones SURBL BV. All of them are Threat Intel Feeds products. ### How many alternatives to ZeroFox Threat Intelligence Feeds are available? This page shows 42 alternatives to ZeroFox Threat Intelligence Feeds, all in the Threat Intel Feeds category. Each one is matched on shared tags and NIST CSF 2.0 areas, and the closest matches rank first. ### Is ZeroFox Threat Intelligence Feeds free or commercial? ZeroFox Threat Intelligence Feeds is a commercial Threat Intel Feeds product. It needs a paid license or subscription. Only commercial alternatives are listed here. Free and open source products are under /free. ### What type of solution is ZeroFox Threat Intelligence Feeds? ZeroFox Threat Intelligence Feeds is a Threat Intel Feeds product in the Threat Intelligence category. You can compare it with the 42 other Threat Intel Feeds products on this page. --- Source: https://cybersectools.com/alternatives/zerofox-threat-intelligence-feeds For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any product or compare page has a Markdown copy too (add .md to its URL). More on ZeroFox Threat Intelligence Feeds and its alternatives: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=alternatives-md