Threat Feeds
Real-time threat intelligence feeds and platforms for security professionals and organizations.
🔍 Threat Intelligence Platforms
Comprehensive platforms for threat intelligence sharing, analysis, and collaboration.
MISP (Malware Information Sharing Platform)
Open source threat intelligence platform for collecting, storing, and sharing cybersecurity threat indicators.
Visit Platform →OpenCTI
Open source platform for threat intelligence management and cyber threat intelligence knowledge.
Visit Platform →AlienVault OTX
Open threat intelligence community providing access to global threat data and collaborative research.
Visit Platform →IBM X-Force Exchange
Cloud-based threat intelligence platform that allows security analysts to research threats and collaborate.
Visit Platform →⚠️ Abuse.ch Threat Feeds
Specialized threat feeds from Abuse.ch for malware, botnets, and malicious activities.
MalwareBazaar
Abuse.ch's project to share malware samples with the security community and antivirus vendors.
Visit Feed →URLhaus
Abuse.ch's project to share malicious URLs that are being used for malware distribution.
Visit Feed →Feodo Tracker
Abuse.ch's project to track botnet command & control servers (C&C) and malware distribution.
Visit Feed →SSL Blacklist
Abuse.ch's project to share malicious SSL certificates and JA3 fingerprints.
Visit Feed →🔓 Open Source Threat Feeds
Free and open source threat intelligence feeds and repositories.
Emerging Threats
Open source threat intelligence feed providing rules and indicators for network security.
Visit Feed →OpenPhish
Automated phishing intelligence feed providing real-time phishing URLs and domains.
Visit Feed →PhishTank
Community-based phishing database with open API for threat intelligence integration.
Visit Feed →BlockList_Project
Open source project providing various blocklists for IP addresses, domains, and URLs.
Visit Feed →💼 Commercial Threat Intelligence
Enterprise-grade threat intelligence platforms and services.
Recorded Future
Real-time threat intelligence platform providing insights into cyber threats and threat actors.
Visit Platform →ThreatConnect
Threat intelligence platform for security operations, threat hunting, and incident response.
Visit Platform →Digital Shadows
Digital risk protection platform providing threat intelligence and digital risk monitoring.
Visit Platform →📋 Standards & Frameworks
Standards and frameworks for threat intelligence sharing and analysis.
STIX (Structured Threat Information Expression)
Standard for describing and sharing cyber threat information.
Learn More →TAXII (Trusted Automated Exchange of Intelligence Information)
Protocol for sharing cyber threat intelligence over HTTPS.
Learn More →MITRE ATT&CK
Knowledge base of adversary tactics and techniques based on real-world observations.
Learn More →