Best Threat Intelligence Software - Page 10

Censys Adversary Investigations

Adversary Infrastructure Moves. So Should You. Censys Adversary Investigation turns first-party scanning into a curated, real-time map of attacker infrastructure. Start with a certificate, domain, IP, or other signal and uncover the full campaign of related adversary infrastructure. Cut investigation times from hours to minutes. Censys ARC tracks adversaries recycled infrastructure signals and reuse patterns. Search and filter by threat types like C2 servers, phishing servers, botnet servers, and webshells, with evidence tied directly to a first-party scan of the service or endpoint. Build a node-based pivot map to document your investigation trail, visualize relationships, and track adversary infrastructure as campaigns evolve. Engineer detections at the top of the pyramid of pain, not the bottom, higher-fidelity detections, lower alert fatigue. Use Censys ARC threat intelligence as a malicious infrastructure feed, or build Collections that become tailored feeds for adversaries. Website https://censys.com/product/adversary-investigation/

Cobwebs Technologies

CYBERAWARE SECURITY

Cyber Exposure Platform

Cyber Intelligence House empowers Managed Security Service Providers (MSSPs), Cyber Insurers and cybersecurity consultancies with advanced Cyber Exposure and Threat Intelligence capabilities. Our data and technology provides real-time insights into threats originating from the dark web, deep web, data breaches, social channels and infostealer logs, helping our partners protect and serve their clients by identifying and addressing external risks before they impact critical assets. We specialize in detecting compromised credentials, exposed sensitive data, marketplaces and emerging cybercriminal activities targeting organizations. By offering continuous monitoring and external threat assessments, we enable MSSPs to proactively enhance their clients' security postures and build evidence-based risk roadmaps.

CybersecTools

CybersecTools is the largest discovery platform for cybersecurity products, giving enterprise security teams a single place to explore the entire cybersecurity market. The platform tracks over 9,000 products and 3,200 vendors, helping CISOs and security buyers compare solutions, find alternatives, and evaluate products before making purchasing decisions. For security startups and scaleups, CybersecTools provides a channel to get discovered and gain visibility with the audience of security buyers actively researching tools, shortening the path from awareness to evaluation in a crowded market.”

Cypho

Cypho is an agentic AI-powered threat intelligence platform that helps organizations find and fix external exposures before attackers can use them. It continuously monitors the surface, deep and dark web, including underground forums, Telegram channels, stealer logs, paste sites, code repositories, app stores and social networks, for anything tied to a company. Agentic AI then triages every candidate finding, links it to the organization's own assets and ranks it by real risk, so security teams receive verified issues with clear remediation steps instead of a flood of raw alerts. Cypho serves security teams, SOC analysts and risk leaders across financial services, government, energy, telecom, healthcare and retail, from startups to large enterprises. MSSPs can also deliver it to their clients under their own brand. The platform brings four modules together on one shared map of what an organization owns: Threat Intelligence, Attack Surface Management, Brand Protection and Attack Intelligence. Together they address use cases such as dark web and data leak monitoring, brand impersonation prevention, attack surface discovery, vulnerability prioritization, threat actor tracking, and faster detection and response. Each module goes deep in its area. Threat Intelligence profiles threat actors from APTs to ransomware gangs, ranks vulnerabilities by exploitation likelihood using CVSS and SVRS scores, maps tactics to MITRE ATT&CK, and exports IoCs via JSON, CSV or TAXII. Attack Surface Management starts from a single domain to discover subdomains, IPs, APIs, cloud services and mobile apps, then continuously checks them for open ports, misconfigurations, expired certificates, weak email security and hard-coded secrets. Brand Protection detects lookalike domains with similarity scoring, fake executive accounts, rogue apps, leaked documents and stolen payment card data. Attack Intelligence runs Siren honeypot sensors on Cypho's global network or inside a customer's DMZ and private network, capturing full attack payloads and classifying them by behavior, while the Rover ML model flags unusual activity. What sets Cypho apart is first-hand evidence combined with focused, verified output. Its own sensor network shows attacks as they happen rather than relying only on second-hand reports, and every finding is reviewed before it reaches the customer. A built-in AI Assistant lets teams ask questions about their own security data and get answers linked to the exact sources checked. With 24/7 analyst support on every issue and pricing based on each organization's footprint, Cypho gives security teams continuous visibility into their external threat exposure and the context to act on it quickly.

Cyware

Cyzo

Dark Web ID

Dark Web ID ensures the greatest amount of protection from risks posed by compromised credentials. It provides 24/7/365 human and machine-powered monitoring of business and personal credentials, including domains, IP addresses and email addresses. Dark Web ID uncovers your compromised credentials in dark web markets, data dumps and other sources and instantly alerts you, giving you the advantage to act before cybercriminals do.

Average Rating: 4.1/5.0

Total Reviews: 62

Darkweb Tracker

Darkweb Tracker is an advanced deep and dark web intelligence platform developed by StealthMole. Leveraging cutting-edge AI technology and open-source intelligence (OSINT) techniques, it systematically collects, categorizes, and analyzes data from both open and concealed online sources. This empowers users to efficiently access, interpret, and derive critical insights from vast amounts of information.

Dataminr Pulse for Cyber Risk

Dataminr Pulse for Cyber Risk is an AI-driven solution designed to enhance organizational resilience by providing real-time detection of external cyber events, risks, and threats. By analyzing over one million public data sources, it delivers actionable intelligence across four critical areas: digital risk, third-party risk, vulnerability intelligence, and cyber-physical risk. This comprehensive approach enables security teams to proactively identify and mitigate potential threats, ensuring the protection of digital assets and the continuity of business operations.

Decryption Digest Response

Decryption Digest Response is a specialized threat intelligence platform designed to operationalize global threat data into immediate, actionable defense workflows. Rather than relying solely on static vulnerability scoring, the platform prioritizes indicators of compromise and emerging threats based on their real-world exploitability. By automatically synthesizing this intelligence into vendor-agnostic detection content, such as deployable Sigma, KQL, and SPL rules, it bridges the gap between threat discovery and active containment inside the security operations center (SOC).

DynaRisk

DynaRisk's Breach Defence software empowers small to medium sized businesses to be safer online. Cyber attacks are constant and are always evolving. 60% of SMEs can go out of business within 6 months of suffering a cyber attack. SMEs need simple yet comprehensive cyber risk management solutions to manage complex cyber risks. This is why DynaRisk has developed Breach Defence to give SMEs the tools they need to defend against cyber attacks.

EclecticIQ Platform

EclecticIQ Platform re-imagines intelligence, hunting and response, by delivering intelligence-led solutions to Threat Intelligence, Endpoint Security and Security Operations challenges.

Encrata

Encrata makes the messy parts of the internet useful. The information companies need to fight fraud and understand digital risk is scattered across the open web, breached databases, and the dark web. Encrata brings that data together, cleans it up, and makes it searchable and usable. You can verify identities, check for leaked credentials, investigate domains and IPs, or plug the same intelligence directly into your product through our APIs. In short, Encrata does the digging and gives you the answer.