CISO Tribune

Vendor comparison · 2 companies

GreyNoise vs Hold Security, LLC

GreyNoise sells real-time network threat intelligence built on traffic it observes at the network edge. Hold Security, LLC is an Information Security, Threat Intelligence, Penetration Testing, Risk Management and Incident Response company, helping businesses of all sizes stay secure. CISO Tribune files both under Threat intelligence. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • GreyNoise
  • Hold Security, LLC
GreyNoise vs Hold Security, LLC: Products, Customers and Funding Compared
GreyNoiseGreyNoise sells real-time network threat intelligence built on traffic it observes at the network edge.greynoise.ioHold Security, LLCHold Security, LLC is an Information Security, Threat Intelligence, Penetration Testing, Risk Management and Incident Response company, helping businesses of all sizes stay secure.holdsecurity.com
What it sells
  • GreyNoise Block[5][11]Real-time blocklists for firewalls, labelled as being for small and mid-sized teams.
  • GreyNoise Platform[4]Platform to investigate any IP or CVE, catch threats hitting the edge, and turn intelligence into automated action.
  • Threat Intelligence Services[1][4][6]Indexes and correlates public and private resources on the Dark Web and Internet to identify malicious and threatening events.
  • Domain Integrity Service[2][4]Provides monitoring and alerting of domain names.
Categories
Headquarters
Washington, United StatesNot stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen November 5, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, GreyNoise sells to enterprise SOCs and to government and national defense operators, with the full platform aimed at organizations of more than 2,500 employees and MSSPs. GreyNoise Block is labelled as being for small and mid-sized teams, and GreyNoise calls it ideal for organizations with fewer than 2,500 employees. GreyNoise says its intelligence plugs into SIEM, SOAR, TIP, and firewall tools that security teams already run. GreyNoise also describes threat hunting teams and vulnerability management teams as users.From its own pages, Hold Security sells mainly to companies of all sizes. Hold Security designs its Threat Intelligence Services to assist organizations in monitoring the Dark Web. Companies that develop their own software, or want to verify that vendor software contains no undiscovered vulnerabilities, are among those Hold Security says it can help. Hold Security also directs its incident response work at companies that encounter ransomware, APTs, Nation State targeting or suspected cyber fraud or theft. Organizations that want to verify organizational controls around regulatory levels, human resources and data classification are another group Hold Security addresses.
Last verified
September 27, 2026October 30, 2026

Where they overlap

  • Threat intelligence is the primary category of both GreyNoise and Hold Security, LLC.

Where they differ, field by field

  • Hold Security, LLC is also filed under Digital risk protection, Penetration testing and red team services and Incident response and forensics.
  • GreyNoise lists GreyNoise Block and GreyNoise Platform. Hold Security, LLC lists Threat Intelligence Services and Domain Integrity Service.
  • GreyNoise is headquartered in Washington, United States.

How they differ

CISO Tribune files both GreyNoise and Hold Security, LLC under Threat intelligence as their primary category. CISO Tribune also files Hold Security, LLC under Digital risk protection, Penetration testing and red team services, and Incident response and forensics. GreyNoise, headquartered in Washington, United States, sells real-time network threat intelligence built on traffic it observes at the network edge. GreyNoise sells GreyNoise Platform, for investigating any IP or CVE, and GreyNoise Block, which turns its edge intelligence into blocklists for firewalls.

Hold Security, LLC sells Threat Intelligence Services that index and correlate public and private resources on the Dark Web and Internet to identify malicious and threatening events. Hold Security also sells a Domain Integrity Service that provides monitoring and alerting of domain names, with portal access or customized reports created by Hold Security analysts. Hold Security offers services that include Penetration Testing, Red Team, and Vulnerability Assessment. Hold Security offers Incident Response Services to provide support and expertise in the event of cyber incidents. GreyNoise draws on a global grid of thousands of sensors at the network edge, while Hold Security draws on public and private resources on the Dark Web and Internet.

GreyNoise says it sells to enterprise SOCs and to government and national defense operators, and it points organizations with more than 2,500 employees and MSSPs to the full platform. Hold Security says it works with companies of all sizes, including Fortune Global 500 organizations. Hold Security says it helps companies that suspect cyber fraud or theft, face APTs or Nation State targeting, or encounter issues with ransomware.

What it sells: GreyNoise

What GreyNoise Block does[5][11]
GreyNoise Block turns primary-source edge intelligence from the Global Observation Grid into blocklists for firewalls. Blocklists deploy as standard External Dynamic Lists over HTTPS. GreyNoise says lists refresh every hour. It also offers dozens of out-of-box blocklist templates.
What GreyNoise Platform does[4]
GreyNoise says its platform lets users investigate, enrich, and search GreyNoise's view of the whole internet, for one IP or thousands. Dynamic blocklists turn any GNQL query into a live, API-authenticated URL any firewall or WAF can ingest. Feeds and alerts stream events to a SIEM, SOAR, email, or webhook in real time.

What it sells: Hold Security, LLC

What Domain Integrity Service does[2][4]
Hold Security's Domain Integrity Service provides monitoring and alerting of domain names. Domain Integrity Service offers portal access or customized reports created by Hold Security analysts.

Questions about GreyNoise and Hold Security, LLC

What do GreyNoise and Hold Security, LLC sell?
GreyNoise sells GreyNoise Block and GreyNoise Platform. Hold Security, LLC sells Threat Intelligence Services and Domain Integrity Service.
Are GreyNoise and Hold Security, LLC in the same category?
Yes. Threat intelligence is the primary category of both on CISO Tribune.
Where are GreyNoise and Hold Security, LLC headquartered?
GreyNoise is headquartered in Washington, United States.
Who are GreyNoise and Hold Security, LLC sold to?
From its own pages, GreyNoise sells to enterprise SOCs and to government and national defense operators, with the full platform aimed at organizations of more than 2,500 employees and MSSPs. From its own pages, Hold Security sells mainly to companies of all sizes.

About GreyNoise

GreyNoise sells real-time network threat intelligence built on traffic it observes at the network edge. GreyNoise says it watches and analyzes malicious edge traffic in real-time, so customers can block novel exploitation, catch compromised devices, and investigate critical alerts as they happen.[3]

GreyNoise describes its platform as a single place to investigate any IP or CVE, catch threats hitting the edge, and turn intelligence into automated action. On the platform, users can investigate, enrich, and search GreyNoise's view of the whole internet, for one IP or thousands. GreyNoise says its platform returns a first-hand verdict of malicious, benign, or suspicious for any IP looked up.[4]

GreyNoise says a global grid of thousands of sensors observes attackers first-hand. Customers can also deploy GreyNoise sensors that impersonate vulnerable software to draw out attackers, then capture and analyze every packet. GreyNoise says Session Explorer delivers packet-level forensics and full PCAP export across sensor traffic.[3][4]

For action, GreyNoise says dynamic blocklists turn any GNQL query into a live, API-authenticated URL that any firewall or WAF can ingest. Feeds and alerts stream chosen events to a SIEM, SOAR, email, or webhook in real time. GreyNoise says 80+ integrations push its intelligence into SIEM, SOAR, TIP, firewalls, and agentic SOC tools.[3][4][11]

GreyNoise describes several use cases. For alert reduction, GreyNoise says it reduces alert fatigue by classifying IPs as benign, malicious, or suspicious. For threat hunting, GreyNoise says it filters out opportunistic probes, benign scanners, and botnet noise to reveal statistically significant anomalies that represent targeted attacks. For vulnerability prioritization, GreyNoise says that, unlike static severity and probability scores, it supplies real-time, primary-sourced intelligence on attacks it sees in-the-wild.[7][8][9]

GreyNoise also addresses early warning and compromised devices. GreyNoise says its research shows that spikes in traffic targeting older CVEs often precede new CVE disclosures for that same vendor within weeks. For compromised assets, GreyNoise says it uses two signals: an IP that shows up as a scanner in GreyNoise, and outbound traffic that matches a confirmed callback IP. For investigations, GreyNoise says it adds context on IPs and CVEs seen in mass scanning and exploitation campaigns, which speeds triage and reduces manual work.[6][10][12]

GreyNoise Block is labelled as being for small and mid-sized teams. GreyNoise Block turns primary-source edge intelligence from the Global Observation Grid into precision blocklists for firewalls. GreyNoise says blocklists deploy as standard External Dynamic Lists over HTTPS and refresh every hour. GreyNoise says GreyNoise Block is ideal for organizations with less than 2,500 employees, while organizations with more than 2,500 employees or MSSPs are pointed to the full GreyNoise platform. A 14-day free trial is offered for GreyNoise Block.[5][11]

GreyNoise also offers versions of its message for government and enterprise audiences. GreyNoise says it gives enterprise SOCs real-time edge intelligence inside the tools they already run. GreyNoise says it turns edge reconnaissance and exploitation into early warning signals for national defense operators.[1][2][3][5][6][7][9][10][11]

GreyNoise on the record

Sources

GreyNoise full record

  1. [1]Greynoise raises 15 million in series a funding to fight cyber distractions and mass vulnerability exploitationGreyNoise · greynoise.io · published June 15, 2022 · Tier A
  2. [2]ContactGreyNoise · greynoise.io · undated page, accessed September 27, 2026 · Tier A
  3. [3]GreyNoise | Real-Time Network Threat IntelligenceGreyNoise · undated page, accessed October 25, 2026 · Tier A
  4. [4]GreyNoise Platform | Detect, Investigate & Respond FasterGreyNoise · undated page, accessed October 25, 2026 · Tier A
  5. [5]GreyNoise BlockGreyNoise · undated page, accessed October 25, 2026 · Tier A
  6. [6]Early Warning Signs of CVEs | GreyNoise IntelligenceGreyNoise · undated page, accessed October 25, 2026 · Tier A
  7. [7]Threat Hunting | GreyNoise IntelligenceGreyNoise · undated page, accessed October 25, 2026 · Tier A
  8. [8]SOC Efficiency | GreyNoise IntelligenceGreyNoise · undated page, accessed October 25, 2026 · Tier A
  9. [9]Vulnerability Prioritization | GreyNoise IntelligenceGreyNoise · undated page, accessed October 25, 2026 · Tier A
  10. [10]Incident Investigation | GreyNoise IntelligenceGreyNoise · undated page, accessed October 25, 2026 · Tier A
  11. [11]Pricing - Request a quote | GreyNoise BlockGreyNoise · undated page, accessed October 25, 2026 · Tier A
  12. [12]Compromised Asset Detection | GreyNoise IntelligenceGreyNoise · undated page, accessed November 5, 2026 · Tier A
  13. [13]GreyNoise Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed November 5, 2026 · Tier C

Hold Security, LLC full record

  1. [1]holdsecurity.comHold Security · holdsecurity.com · undated page, accessed October 30, 2026 · Tier A
  2. [2]SolutionsHold Security · holdsecurity.com · undated page, accessed October 30, 2026 · Tier A
  3. [3]About Us | Hold SecurityHold Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]Hold Security - Information Security & Threat IntelligenceHold Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]Solutions | Hold SecurityHold Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]Information Security Assessment Services | Hold SecurityHold Security · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.