Top 10 cyber threat intelligence data services

As mentioned, threat intelligence needs to be relevant, punctual and actionable. One of the ways organizations manage that is by incorporating cyber threat intelligence feeds into their already existing security solutions.

Cyber threat intelligence feeds are real-time constant streams of threat data coming from different sources outside your network. They give you intel on potential global threats, which can be suspicious domains or IP addresses linked to suspicious activity, information from pastebin, and more.

We’ve talked about the best cybersecurity APIs, and now let’s explore our favorite cyber threat intelligence data services:

1. SecurityTrails Feeds

While ranking ourselves as #1 might sound like shameless self-promotion, we really do think that we offer the best Threat intelligence feeds around. When it comes to passive intelligence collection for your OSINT needs, SecurityTrails offers full IP, domain, subdomain, SPF, DMARC, open ports, and company enrichment feeds like no other. Need custom feeds? We can get those for you, too.

2. Recorded Future

Recorded Future offers their Threat Intelligence Feeds solution with more than 65 threat data streams, and they’re always adding new ones. They also allow you to integrate it with other threat feeds you’re already using, and they correlate and analyze the data for you. This way, you’ill focusing on intelligence that actually matters, to make quicker, better-informed security decisions.

3. IBM X-Force Exchange

One of the industry’s favorites, IBM X-Force Exchange is a threat intelligence sharing platform for security analysts that allows you to quickly access intel on current cyber threats and share your findings with other users. With it, you can search IP addresses, URLs, CVEs and web applications and gives you insight into their risk scores, historical records, locations and much more.

4. FireEye iSIGHT Threat Intelligence

FireEye iSIGHT Threat Intelligence is a unique platform that combines adversary, victim and machine-based intelligence. Its team of intelligence researchers from all over the world delivers the latest intel on attackers’ tactics, techniques and procedures 24 hours after they have been observed. The team works to eliminate false positives and prioritize threats so you can know when and how to respond.

5. AlienVault Unified Security Management (USM)

AlienVault Unified Security Management (USM) features a community that researches the global threat landscape and contributes over 19 million threat indicators daily. Their unified platform provides data on endpoint detection, vulnerability assessment and asset discovery so you can investigate and mitigate threats faster and more efficiently.

6. ThreatConnect

ThreatConnect is another industry favorite. You can automate your security tools to send intel to ThreatConnect, get intelligence data from them to provide context to threats and speed up your incident response time. It also allows you to manage your team’s workflow and export reports to see the true business impact your security program has. It features analytics, automation and workflow all in one.

7. Anomali ThreatStream

Here’s another great platform that works to remove false positives and alert fatigue by applying machine learning intelligence. Anomali ThreatStream collects data from many sources, which you can then purchase and use to identify and prioritize critical threats to your organization for faster incident response prior, during and after an attack. It’s also a sharing platform where you can collaborate with the community and work together the mitigate threats.

8. LookingGlass Cyber Solutions

LookingGlass Cyber Solutions is an open-source framework for threat intelligence that shows you why your organization can be targeted and allows you to proactively avoid potential threats. It gives threats context and priority so you can address your security vulnerabilities based on highest risk score.

9. Symantec DeepSight Intelligence

Symantec DeepSight Intelligence is the largest civilian threat collection platform available that gives you access to the most relevant global threat intelligence and technical details. With it, you can discover techniques of posing threat actors, active campaigns and much more, informing you of cyber risks and enabling your timeliest responses to them.

10. Palo Alto Networks AutoFocus

Palo Alto Networks AutoFocus is a hosted service that contextualizes threat investigation so you can improve the accuracy and speed of your threat analysis and incident response. It allows you to correlate and discover the causes of threats, all in one unified product. It also features automated protection that helps you use intelligence for better defense.