Threat intel &amp; deception

Report abusive IP addresses+10

AbuseIPDB provides high-fidelity IP reputation data and a massive crowd-sourced database of reported malicious infrastructure.

Abusix

Email Security

Abusix is the essential solution in today's network security landscape, enabling fast and reliable mitigation of network abuse and cyber threats.

Acalvio Technologies

Deploy dynamic enterprise decoys+10

Acalvio is the leader in autonomous cyber deception, defending against APTs, insider threats, and ransomware.

Alpha Level

Alpha Level is a next-generation cybersecurity company transforming how Security Operations Centers (SOCs) detect and respond to threats.

alphaMountain.ai

Domain and IP reputation scoring+9

alphaMountain.ai provides AI-driven domain and IP threat intelligence focuses on web reputation and content classification.

Anomali

Threat intelligence lookup service+10

Anomali ThreatStream is a threat intelligence platform that aggregates IOCs and IOAs from hundreds of global sources including Anomali Labs curated feeds, OSINT, premium feeds, and ISACs.

ANY.RUN helps security teams detect malware and phishing earlier and respond with confidence.

Arctic Security

Continuous vulnerability monitoring+9

Arctic EWS provides a comprehensive and international early warning service for distributed organizations, expanding on the scope of services available from the government.

AttackIQ

Pentest & Red Team

Automate adversary emulation tests+11

The leading platform for Adversarial Exposure Validation (AEV) We help security teams make better decisions by continuously measuring how adversaries can exploit gaps across people, processes, and technology.

Axur

AI-driven threat intelligence mapping+11

Axur focuses on External Threat Protection (ETP) and brand protection by monitoring the digital landscape for brand abuse, data leaks, and fraudulent activities.

BitSight

Compliance Management

Risk now moves across enterprises, supply chains, cloud environments, and digital identities, and AI is accelerating how quickly vulnerabilities can be exploited.

+10

BlackCloak

Data broker removal services+10

BlackCloak is a digital executive protection vendor whose closest fit for the Privacy & Consent Management category is its online privacy and identity-defense capability for high-profile individuals, executives, and family

Blumira

SIEM

Blumira is a cloud-native SIEM and XDR platform designed for mid-market organizations and MSPs.

+10

Bolster AI

Multi-channel phishing protection+11

Bolster AI is a brand and phishing protection vendor that focuses on detecting and removing phishing, impersonation, and scam activity across email and other external digital channels.

BrandShield

Real-time external threat monitoring+10

BrandShield is a Digital Risk Protection (DRP) and External Threat Management platform that secures brands against online fraud, impersonation, and phishing.

Cellebrite

Digital evidence extraction+10

Cellebrite is the global leader in partnering with public and private organizations to transform how data is managed in investigations to protect and save lives, accelerate justice and ensure data privacy.

Censys

EASM

Continuous internet exposure discovery+11

Censys provides Attack Surface Management focused on external internet visibility: it continuously scans the public Internet, attributes discovered assets to an organization, and tracks changes in hosts, ports, certificates,

CertiK

Blockchain & Smart Contract Security

Blockchain & Smart Contract Security

Founded in 2017 by professors from Columbia and Yale, CertiK is a New York-based leader in Web3 security.

+11

Chainalysis

8 products

Chainalysis is the blockchain data platform. We provide data, AI-powered software, services, and research to government agencies, exchanges, financial institutions, and cybersecurity companies in over 70 countries.

Check Point

CSPM

Multi-cloud posture management+11

Check Point Software Technologies is a global leader in cyber security solutions, dedicated to protecting corporate enterprises and governments worldwide.

Cisco

SASE

14 products

Cisco Umbrella is a cloud-delivered DNS-layer and network security platform providing Secure Internet Access, Security Service Edge (SSE), and Cloud Access Security Broker (CASB) capabilities for hybrid workforces.

CASBCisco SD-WAN integration+16

CloudSEK Research Pte. Ltd.

Real-time threat intelligence monitoring+8

CloudSEK is a digital risk protection platform (DRPP) that utilizes AI to monitor the deep, dark, and open web for external threats.

Cofense

Security Awareness & Phishing Simulation

Post-delivery phishing threat detectionThreat remediation and containment+10

Smarter Phishing Defense. Stronger Human Security.

Cognyte

External threat intelligence collection+10

We are a market leader in investigative analytics software that empowers a variety of government and other organizations with Actionable Intelligence for a Safer World™.

CounterCraft

Replicate the network as a digital twin+10

CounterCraft provides the Cyber Deception Platform, a scalable distributed system that deploys digital twin replicas of organizational IT and OT environments to lure attackers into controlled decoys.

Criminal IP

IP address threat analysis+8

Criminal IP delivers Decision-Ready Intelligence powered by AI and OSINT, enabling precise threat analysis and deep investigations into IPs, domains, and URLs with reputation data, threat scoring, along with real-time detection

CrowdStrike

EDR

9 products

CrowdStrike Falcon is a cloud-native endpoint detection and response (EDR) platform that unifies endpoint protection, threat hunting, and managed response services to defend against advanced adversaries.

Adversary intelligence profiles+14

Cybereason

EDR

Automated deep and dark web collection+10

Cybereason provides Endpoint Detection and Response (EDR) that correlates endpoint telemetry across machines into MalOp™ narratives, revealing full attack chains from initial compromise to lateral movement.

Cybersixgill is a deep and dark web threat intelligence provider acquired by Bitsight, delivering automated collection and analysis across cybercriminal underground forums, markets, and messaging platforms.

Cyble

Deep, Dark, and Surface Web Monitoring+7

Cyble is an AI-native threat intelligence provider that delivers deep visibility into dark web activities, brand exposure, and digital risks.

CybrHawk

Agentic SOC & Investigations

Natural-language SOC investigation+8

CybrHawk is a leading provider of cybersecurity solutions. Our offerings help organizations to get their cyber-defences attuned to stall, manage, mitigate and prevent breaches.

Verified · Managed by the vendor

CYJAX

Real-time threat intelligence, curated analysis, and actionable insights. All in one unified platform.

Cylerian

Security Operations

By consolidating visibility and control across your organization and providing everything you need out of the box, Cylerian makes IT simpler and safer.

Cymulate

Simulate full attack kill chains+11

Cymulate provides a SaaS-based Breach and Attack Simulation (BAS) platform that automates cyberattack simulations across the full APT kill-chain, validating security controls in email, browser, network, endpoint, and cloud

Cyware

Cyware enables security teams at leading global organizations to operationalize threat intelligence data and execute real-time actions by integrating intelligence management, automating workflows, and promoting secure

Dataminr

Multi-Modal Threat Detection+8

DarkInvader is a modern cyber security company specialising in External Attack Surface Management (EASM).

DeleteMe

Remove personal data from data brokers+11

DeleteMe offers a specialized privacy-as-a-service platform that automates the removal of employee PII from data broker sites and public search engines.

Digital Shadows SearchLight

Monitor open, deep, and dark web sources+11

Digital Shadows SearchLight is a digital risk protection service that monitors over 100 million data sources across the open, deep, and dark web in 27 languages for cyber threats, data exposure, brand abuse, infrastructure

Doppel

Multi-channel phishing simulations+11

The Doppel Platform elevates your social engineering defense from reactive to strategic, combining AI precision, human expertise, and real-time intel to protect what matters most.

Dragos

OT & IoT Security

OT and IoT asset visibility+9

We make the industry's most intelligent and intuitive cybersecurity platform for Operational Technology (OT).

EclecticIQ Platform

Ingest feeds and custom threat data+8

EclecticIQ is a global provider of threat intelligence technology and services.

Filigran

Collect and correlate threat data+10

Filigran is a cybertech company specializing in open-source-centric threat intelligence and cybersecurity simulation platforms.

Flare

the Flare identity-first cyber threat intelligence SaaS platform combines proprietary world-class collection from across the dark and clear web with radical ease-of-use, empowering organizations to proactively detect, prioritize,

Flashpoint

Deep and dark web search+10

Harness the power of data, human expertise, and automated analysis with Flashpoint's threat intelligence platform.

F-Secure (now WithSecure Elements)

Internet background noise filtering+10

WithSecure (formerly F-Secure) Elements is a cloud-native endpoint protection platform (EPP) focused on defending endpoints across Windows, macOS, Linux, Citrix, iOS, and Android against ransomware, exploits, fileless attacks,

Our mission is to collect the most diverse primary scanning and exploitation data, and transform it into the most actionable intelligence for defenders, so that no attack works twice.

Group-IB

Real-time attacker activity monitoring+10

Group-IB is a leading creator of predictive cybersecurity technologies to investigate, prevent and fight digital crime globally

HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients.

Infrawatch

Infrawatch is the intelligence layer for internet infrastructure. We combine real-time, multi-source data with behavioural analysis to give security teams deep visibility into malicious infrastructure before it’s operationalised.

Intel 471

Adversary intelligence collection+11

Intel 471 delivers cyber threat intelligence via human-led HUMINT and proprietary technology, sourcing data from underground marketplaces and closed adversary forums.

IPinfo

IP threat intelligence data+11

IPinfo is primarily an IP data provider, but in threat intelligence it surfaces IP reputation and proxy-related context that security teams use for enrichment, fraud screening, and incident triage.

iZOOlogic

Lunar, powered by Webz.io

iZOOlogic provides an integrated suite focused on External Attack Surface Management (EASM), Digital Risk Protection (DRPS), and brand protection.

Joe Security delivers deep malware and phishing analysis as a threat intelligence provider, leveraging reasoning-capable generative AI for automated reverse engineering and dynamic/static file inspection.

Monitor compromised credentials+10

Lunar is a specialized threat intelligence platform that focuses on monitoring the deep and dark web to detect stolen credentials and hijacked session tokens.

Magnet Forensics

MITRE ATT&CK mappingYARA rule scanning+10

Magnet Forensics is primarily a digital investigations vendor, but in the Threat Intelligence context it supports incident responders by turning endpoint, cloud, and device artifacts into actionable TTP-level intelligence.

Mallory

Threat source monitoring+10

Mallory unifies live adversary activity with your attack surface to prioritize the exposures real threat actors are targeting right now.

Mandiant (Google Cloud)

Mandiant Threat Intelligence, now part of Google Cloud Security, is a SaaS threat intelligence platform combining Google's detection telemetry, Mandiant's frontline incident response intelligence, and VirusTotal's malware

MARS Security is a threat hunting and detection engineering platform that transforms threat intelligence into active detections.

Memcyco

Enterprise Browser & Isolation

Memcyco provides real-time protection against customer-facing digital impersonation, phishing, and account takeover attempts by identifying fake websites and spoofed portals as they go live.

+10

Menlo Security

Cloud-based remote browser isolation+11

As a pioneer of browser security, Menlo Security delivers a solution with a comprehensive approach to enterprise browser security, protecting users where they work and securing applications from internet-borne attacks.

Morado

Centralizes cyber threat intelligence+5

Morado delivers an integrated Threat Management Platform that unifies finished intelligence, dark web monitoring, and brand protection into a centralized workspace.

nebty

24/7 monitoringbrand protection+7

nebty is a brand protection service that monitors for lookalike domains, phishing pages, fake social media profiles and scam ads that impersonate a company's brand. It scores each finding by risk and handles takedown requests with registrars, hosting providers and platforms.

Netcraft

Threat feeds for 100 plus attack types+10

Netcraft provides automated digital risk protection and cybercrime takedown services, focusing on the discovery and removal of phishing, malware, and brand impersonation sites.

Nextron Systems

MDR

Nextron Systems provides specialized forensic analysis and compromise assessment tools designed to detect APTs and active breaches.

OpenCTI

Filigran provides open-source cybersecurity solutions covering threat intelligence management, breach and attack simulation, and cyber risk management.

Osprey Security

Osprey Security provides AI-driven threat and risk intelligence to help organizations identify and address emerging cyber threats before they lead to incidents.

PacketViper

Open-source intelligence aggregationReal-time threat alertingAI-powered data analytics+8

PacketViper is a preemptive network security platform combining inline enforcement, Automated Moving Target Defense (AMTD), and active deception for converged OT/IT environments.

Palo Alto Networks is the world's leading cybersecurity company delivering AI-powered platform-based security solutions for networks, cloud, identities, and security operations across enterprises globally.

A Next generation Intelligence Platform for Better Decision-Making

Pradeo

Mobile Threat Defense

Mobile threat detection and response+10

Pradeo is a mobile security vendor focused on mobile threat defense for smartphones, tablets, and mobile applications.

Prophet Security

Agentic SOC & Investigations

Prophet Security is building an AI SOC platform that empowers teams to move faster and make better decisions.

Rapid7

Real-time threat intelligence+11

9 products

Rapid7 is a global leader in AI-powered managed cybersecurity operations, trusted to advance organizations' cyber resilience.

Recorded Future secures the world by empowering businesses, governments, and other organizations to stay one step ahead of today's relentless threat actors.

ReliaQuest

Agentic SOC & Investigations

ReliaQuest delivers an Agentic AI Security Operations platform, GreyMatter, that unifies detection, investigation, and response across SIEM, EDR, and Cloud environments.

A swarm of agents. An army of risk engineers. One threat-informed TPRM platform to stop risk before it spreads across your supply chain.

Sendmarc

Email Security

DMARC implementation and management+11

At the heart of everything we do, is our purpose of making the Internet a safer place for all.

SentinelOne

EDR

Behavioral AI threat detection+11

At SentinelOne, we exist for those who protect what matters most. We believe security should be intelligent, unified, and always on.

Sherpa.ai

Federated learning for threat detection+5

Sherpa.ai provides a federated learning platform that lets organizations collaboratively train AI powered threat detection and threat intelligence models without sharing raw security data such as logs, network telemetry or

Silent Push

Indicators of Future Attack discovery+11

Silent Push was founded to transform the way organizations across the world track, monitor and counteract global threat activity.

Silobreaker

To equip organizations with intelligence grounded in clarity, judgment, and human insight, so decisions are made without noise, panic, or posturing.

SOC Prime

SOC Prime operates the world's largest and most advanced platform for detection engineering, transforming how security teams discover, build, and respond to threats through real-time intelligence, AI-driven context, and advanced

SOCRadar

Cyber threat intelligence collection+8

SOCRadar’s Threat Intelligence offering is an external threat intelligence platform focused on collecting, enriching, and prioritizing indicators and adversary activity from open web, dark web, and technical sources.

Spikerz

IAM & SSO

Protect social media account access+7

Spikerz is the digital marketing security platform built for modern brands, marketing teams, and security leaders.

Spur Intelligence

IP intelligence enrichment+11

Spur Intelligence is an IP intelligence vendor focused on revealing anonymized network infrastructure behind internet traffic, including VPNs, residential proxies, mobile gateways, botnets, and other obscured services.

SpyCloud

Recaptured darknet identity intelligence+9

SpyCloud pioneered the category of identity threat protection: transforming stolen identity data like breached credentials, malware-exfiltrated data, and phishing intelligence into automated action that prevents account takeover,

Stairwell

Continuous file analysis+11

Stairwell detects threats your stack misses, maps exactly where they spread, and gives you the evidence to close the case, not just the alert.

Team Cymru

Real-time threat intelligence feedsMalicious infrastructure identificationIncident response optimization+6

Intelligence that moves first.

Thinkst Canary

MDR

Breach detection with Canary decoys+10

Thinkst Canary is not a Managed Detection & Response (MDR) service; it is a deception technology product that deploys physical or virtual devices to mimic real systems and alert on intruders.

ThreatBreaker

Endpoint telemetry collection+10

ThreatBreaker does not appear to be a standalone threat intelligence platform; public materials describe it primarily as an AI-native endpoint detection and response product with automated forensics, MITRE ATT&CK mapping, and

threatnet

Verified · Managed by the vendor

I could not verify a specific vendor named “threatnet” from the provided sources, so this profile cannot be grounded in vendor-specific evidence.

Threat Point

Threat intelligence platformReal-time threat intelligence+4

Every organization has to change its cryptography. The danger was never the fix, it's the fallout: everything the change touches downstream.

ThreatQuotient

Enrich data with threat context+10

Partnering with ThreatQuotient empowers threat intelligence and security operations teams to detect, investigate and respond to cyber threats with greater efficiency, efficacy and precision.

Tidal Cyber

BAS control validation and tuning+7

Tidal Cyber is primarily a threat-informed defense platform, not a traditional vulnerability management scanner.

Trust Fence Unipessoal

AI scoringedge deploymentexplainability+2

Trust Fence is an AI system that screens user interactions to detect scams, fraud and malicious threats in real time. AI models score each interaction as it happens and block scams before they reach users, and the product deploys at the edge of a platform and scales with traffic.

Upstream Security

AI Runtime & Agent Security

Runtime AI and API security+11

Upstream Security is primarily an automotive and physical-AI security vendor, but its AI runtime offering extends into agent and API enforcement through its Runtime AI and API Security platform.

Validin

DNS intelligence for threat hunting+11

Validin is an internet and DNS intelligence vendor focused on threat intelligence for security teams that need to investigate infrastructure, enrich indicators, and track adversary activity over time.

Vertex Synapse

Vertex Synapse is a hypergraph-based central intelligence system designed specifically for threat intelligence, enabling analysts to fuse commercial threat data with internal sources and map relationships across disparate

Vetric

Open-web threat monitoring+11

Vetric helps the organizations on the front lines of trust, safety, and security see what they need, exactly when they need it, so they can stay ahead of bad actors.

VMRay Inc

Noise-free IOC extraction+10

VMRay Inc sells threat intelligence centered on malware- and phishing-derived indicators, behavioral context, and analyst-ready enrichment.

VulnCheck

Exploit and vulnerability intelligence+9

VulnCheck helps organizations outpace adversaries with vulnerability intelligence that predicts avenues of attack with speed and accuracy.

Vulners

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

watchTowr

Proactive threat intelligence research+10

watchTowr is redefining External Attack Surface Management with its Continuous Automated Red Teaming technology, built by offensive security experts and backed by real-world vulnerability research.

ZeroFox