# ZeroFox Threat Intelligence Feeds

ZeroFox Threat Intelligence Feeds is a Threat Intel Feeds product by ZeroFox. It runs in the cloud. Pricing is commercial (contact sales).

Threat intelligence feeds for SOC teams from social, dark web & botnet sources

Checked October 2026.

## What is ZeroFox Threat Intelligence Feeds?

ZeroFox Threat Intelligence Feeds provides threat intelligence data collected from social media, messaging platforms, code repositories, dark web forums, and botnets. The service processes over 12 billion daily data points and delivers intelligence through API integration with security tools.

The product offers three feed bundles: Identity and Fraud Intelligence Feeds containing compromised credentials, stolen credit card numbers, SSNs, national IDs, and botnet stealer data; Network and Vulnerability Intelligence Feeds; and Covert Communications Intelligence Feeds focused on dark web activities.

The feeds integrate with SIEM, SOAR, TIP, XDR, IAM, firewalls, email gateways, proxy servers, and EDR/XDR platforms. Intelligence is correlated and enriched using machine learning and analyst expertise to reduce manual analysis requirements.

The service monitors underground forums, encrypted channels, data breaches, and botnet activity to identify threats at their source. Intelligence is customized based on industry, digital footprint, and risk profile. The feeds support compliance requirements including KYC and PCI DSS.

Data is delivered in real-time through API access, enabling integration into existing security infrastructure and workflows.

Tags: Botnet, Dark Web Monitoring, Fraud Detection, Threat Feed, Data Breach, Cyber Threat Intelligence

## Where it fits in your security program (NIST CSF 2.0)

- [Detect](https://cybersectools.com/guides/building-detect-program-small-team): helps you spot attacks and unusual activity.

## Quick facts

- Category: [Threat Intelligence](https://cybersectools.com/categories/threat-intelligence) · [Threat Intel Feeds](https://cybersectools.com/categories/threat-intel-feeds)
- Vendor: [ZeroFox](https://cybersectools.com/companies/zerofox)
- Deployment: Cloud
- Company size fit: SMB, Mid-Market, Enterprise
- Pricing model: Commercial (contact sales)
- Features: 10 listed
- Integrations: 12 listed
- Website: zerofox.com

The full feature and integration lists are on the page for signed-in visitors.

## Where it ranks

No shortlist covers this product's category yet. The closest is [Best Threat Intelligence Platform Solutions for Business](https://cybersectools.com/shortlists/best-threat-intelligence-platforms).

## ZeroFox Threat Intelligence Feeds FAQ

### What is ZeroFox Threat Intelligence Feeds?

ZeroFox Threat Intelligence Feeds is a product by ZeroFox in the Threat Intel Feeds category. It covers Botnet, Dark Web Monitoring and Fraud Detection.

### What is the pricing for ZeroFox Threat Intelligence Feeds?

ZeroFox Threat Intelligence Feeds is a commercial product. For pricing, visit https://www.zerofox.com/solutions/cyber-threat-intelligence/threat-intelligence-feeds/ or contact ZeroFox.

### What are alternatives to ZeroFox Threat Intelligence Feeds?

Alternatives to ZeroFox Threat Intelligence Feeds listed on CybersecTools:

1. [Webz.io](https://cybersectools.com/tools/webzio) - Web data platform providing open, deep & dark web APIs and monitoring. (Commercial)
2. [Constella Threat Intelligence Data Signals API](https://cybersectools.com/tools/constella-threat-intelligence-data-signals-api) - API providing access to compromised identity data and threat signals (Commercial)
3. [Netacea Threat Intel Center](https://cybersectools.com/tools/netacea-threat-intel-center) (Commercial)
4. [SecurityScorecard Intelligence Feeds](https://cybersectools.com/tools/securityscorecard-intelligence-feeds) - Cyber threat intelligence feeds for SOC and threat intelligence teams (Commercial)
5. [SecurityZones SURBL BV](https://cybersectools.com/tools/securityzones-surbl-bv) - Domain reputation threat intelligence feeds for malicious domain detection (Commercial)

Compare all ZeroFox Threat Intelligence Feeds alternatives at [https://cybersectools.com/alternatives/zerofox-threat-intelligence-feeds](https://cybersectools.com/alternatives/zerofox-threat-intelligence-feeds)

### What deployment and organization size does ZeroFox Threat Intelligence Feeds fit?

ZeroFox Threat Intelligence Feeds is available as a cloud service. It is listed for small businesses, mid-market companies and enterprises. Pricing is commercial. Ask ZeroFox for pricing and support terms.

## Compare ZeroFox Threat Intelligence Feeds with similar solutions

- [ZeroFox Threat Intelligence Feeds vs Webz.io](https://cybersectools.com/compare/webzio-vs-zerofox-threat-intelligence-feeds)
- [ZeroFox Threat Intelligence Feeds vs Constella Threat Intelligence Data Signals API](https://cybersectools.com/compare/constella-threat-intelligence-data-signals-api-vs-zerofox-threat-intelligence-feeds)
- [ZeroFox Threat Intelligence Feeds vs Netacea Threat Intel Center](https://cybersectools.com/compare/netacea-threat-intel-center-vs-zerofox-threat-intelligence-feeds)

All alternatives to ZeroFox Threat Intelligence Feeds: [/alternatives/zerofox-threat-intelligence-feeds](https://cybersectools.com/alternatives/zerofox-threat-intelligence-feeds)

---

Source: https://cybersectools.com/tools/zerofox-threat-intelligence-feeds

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on ZeroFox Threat Intelligence Feeds and ZeroFox: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md