SSLBL - SSL Blacklist is a free threat intel feeds solution. ZeroFox Threat Intelligence Feeds is a commercial threat intel feeds solution by ZeroFox. Features, integrations, deployment and the company behind each one, side by side.
A project that detects malicious SSL connections by identifying and blacklisting SSL certificates used by botnet C&C servers and identifying JA3 fingerprints to detect and block malware botnet C&C communication.
Threat intelligence feeds for SOC teams from social, dark web & botnet sources
See more solutions in this category, or build a security stack from your picks.
Based on what each listing shows: deployment, company size, price and open source.
SSLBL - SSL Blacklist fits if you are a startup and you need a free product.
Common questions when comparing SSLBL - SSL Blacklist vs ZeroFox Threat Intelligence Feeds for threat intel feeds.
SSLBL - SSL Blacklist: A project that detects malicious SSL connections by identifying and blacklisting SSL certificates used by botnet C&C servers and identifying JA3 fingerprints to detect and block malware botnet C&C communication.
ZeroFox Threat Intelligence Feeds: Threat intelligence feeds for SOC teams from social, dark web & botnet sources, built by ZeroFox.
The table above shows where their features, integrations, deployment and company size fit differ.
Often, yes. SSLBL - SSL Blacklist and ZeroFox Threat Intelligence Feeds are both Threat Intel Feeds products, and both cover Botnet. Key differences: SSLBL - SSL Blacklist is Free while ZeroFox Threat Intelligence Feeds is Commercial. Use the table above to see where features, deployment and company size fit differ.
No Threat Intel Feeds shortlist yet. This is the closest one.
Updated 2026-11-01
See the shortlist
