isMalicious

isMalicious is a French-based threat intelligence platform that provides a comprehensive database of over 500 million malicious entities including IPs, domains, phishing sites, malware, adware, and tracking domains. The platform aggregates data from multiple security sources including VirusTotal, Shodan, GreyNoise, AbuseIPDB, AlienVault OTX, and URLhaus to provide cross-referenced threat intelligence.

The company offers both a web-based interface and a RESTful API that enables security teams to query IPs and domains for real-time threat assessment. The platform provides reputation scores, geolocation data, WHOIS information, SSL certificate details, vulnerability intelligence, and historical threat patterns.

Results include AI-generated summaries that transform raw enrichment data into actionable intelligence, along with automatic mapping to MITRE ATT&CK techniques based on threat indicators.

isMalicious features asset monitoring capabilities that allow organizations to track critical infrastructure and receive email notifications when watched IPs or domains exhibit suspicious activity. The platform includes similarity search functionality to identify related threats and coordinated attack patterns.

An on-premise CLI solution is available for air-gapped environments and CI/CD pipeline integration, enabling offline database operations with local JSON databases.

The service operates on a tiered subscription model ranging from free accounts with limited API access to enterprise plans with unlimited checks and custom rate limits. The database receives hourly updates with new threats added within minutes of discovery. The platform is used by organizations including HKCERT, Houston University, National Grid, and various security operations centers.