Security operations

Threat intelligence

Feeds, platforms and research services about threat actors, infrastructure, malware and vulnerabilities being exploited.

14 vendors · alphabetical, never ranked

• AnomaliAnomali sells a security operations platform combining a data lake, threat intelligence and AI agents that triage and investigate alerts.Ownership not established
• CensysCensys sells an internet intelligence platform used for threat hunting and exposure management, built on a dataset of internet-connected hosts and devices.Ownership not established
• CybleCyble sells threat intelligence products that monitor the surface, deep and dark web, along with a breach-check tool and an internet scanning tool.Ownership not established · primary category
• CywareCyware sells a platform that enriches, correlates and operationalizes threat intelligence across security tools and teams, and automates related response workflows.Ownership not established · primary category
• EclecticIQEclecticIQ sells a threat intelligence platform with tools to produce finished intelligence reports.Privately held · primary category
• GreyNoiseGreyNoise sells a platform that collects and labels data on internet scanning activity so security teams can tell targeted threats apart from background internet noise.Ownership not established · primary category
• Intel 471Intel 471 sells a threat intelligence platform organized into cyber threat exposure, cyber threat intelligence and cyber threat hunting product lines.Ownership not established · primary category
• KaiKai, legally Kai Cyber, Inc., sells an agentic AI platform that identifies security exposures, assesses which ones represent real risk, and remediates them across threat intelligence, exposure management, detection and response.Privately held
• Keepnet LabsKeepnet Labs sells a human risk management platform built around phishing simulation across email, voice, SMS and QR code channels, along with threat intelligence and phishing incident response tools.Ownership not established
• Red CanaryRed Canary sells a managed detection and response service covering endpoints, identities and cloud, backed by a 24x7 analyst team.Owned by Zscaler since 2025
• SecurityScorecardSecurityScorecard sells third-party risk management, security ratings, security-questionnaire automation and threat intelligence products for monitoring vendor and supply-chain cyber risk.Ownership not established
• ThreatConnectThreatConnect sells a platform that combines threat, risk and security operations data in a single intelligence hub for cyber defense teams.Owned by Dataminr since 2025 · primary category
• VulnCheckVulnCheck sells vulnerability and exploit intelligence products, including early vulnerability data, exploit proof-of-concept code, internet sensor data on active exploitation and a lookup tool for internet hosts vulnerable to a given CVE.Privately held · primary category
• ZeroFoxZeroFox sells a platform that combines external attack surface management, digital risk protection and threat intelligence.Owned by Haveli Investments since 2024

No vendor pays to be listed or to change what we write. Descriptions are ours, drawn from each company's own site and filings. Corrections: /corrections.