PhishTank vs ZeroFox Threat Intelligence Feeds: Side-by-Side Comparison (2026)

PhishTank: Community-driven phishing URL archive operated by Cisco Talos. built by PhishTank. Core capabilities include Phishing URL archive with unique ID tracking per submission, Community-based phishing URL submission, Crowd-sourced validity voting on submitted phishing URLs..

ZeroFox Threat Intelligence Feeds: Threat intelligence feeds for SOC teams from social, dark web & botnet sources. built by ZeroFox. Core capabilities include Botnet monitoring for compromised credentials and stealer data, Dark web intelligence collection from forums and encrypted channels, Compromised credential detection from data breaches..

Both serve the Threat Intel Feeds market but differ in approach, feature depth, and target audience.

PhishTank differentiates with Phishing URL archive with unique ID tracking per submission, Community-based phishing URL submission, Crowd-sourced validity voting on submitted phishing URLs. ZeroFox Threat Intelligence Feeds differentiates with Botnet monitoring for compromised credentials and stealer data, Dark web intelligence collection from forums and encrypted channels, Compromised credential detection from data breaches.

PhishTank is developed by PhishTank. ZeroFox Threat Intelligence Feeds is developed by ZeroFox. Vendor maturity, funding stage, and team size can be important factors when evaluating long-term viability and support quality.

PhishTank and ZeroFox Threat Intelligence Feeds serve similar Threat Intel Feeds use cases: both are Threat Intel Feeds tools, both cover Threat Feed, Cyber Threat Intelligence. Key differences: PhishTank is Free while ZeroFox Threat Intelligence Feeds is Commercial. Review the feature comparison above to determine which fits your requirements.