[ AI Security Directory ]

Threat Intel & DFIR

Threat intelligence feeds and platforms, DFIR tooling, and deception technology.

27 vendors; newest added 2026-08-08. Ordered by name. No paid placement.

Binalyze

Founded 2018

Series A

Digital forensics and incident response platform collecting and analyzing evidence at enterprise speed.

Censys

Founded 2017

Series D

Internet-wide scan data powering attack surface management, exposure discovery, and threat hunting.

Cyble

Founded 2019

Series B

Threat intelligence platform covering dark web monitoring, brand protection, and external risk detection.

IPinfo

Founded 2013

Bootstrapped

IP address intelligence provider offering geolocation, ASN, VPN, and proxy detection data via API.

Mallory

Founded 2024

AI agents that merge global threat intelligence and correlate it against your specific attack surface.

Penlink

Founded 1987

Digital intelligence platform for investigating threat actors across open, deep, and dark web.

SOCRadar

Founded 2019

Series B

Threat intelligence platform monitoring external risks, dark web activity, and brand exposure.

SpyCloud

Founded 2016

Series D

Identity threat intelligence built from recaptured breach data, infostealer logs, and darknet sources.

Stairwell

Founded 2019

Series B

Continuously collects and reanalyzes every executable in an environment to catch missed threats.

Tidal Cyber

Founded 2022

Series A

Platform that tests an organization's defensive stack against the specific behaviors of relevant adversaries.

Validin

Founded 2021

Bootstrapped

DNS and internet infrastructure intelligence built from daily scans of the public internet.

Vetric

Founded 2022

Bootstrapped

APIs delivering real-time data collection from social and web platforms for trust and safety teams.

VMRay Inc

Founded 2013

Series B

Malware sandbox using hypervisor-based monitoring that advanced samples cannot easily detect or evade.

VulnCheck

Founded 2021

Series B

Vulnerability and exploit intelligence service focused on flaws attackers are actually using.

ZeroFox

Founded 2013

Public

External threat platform covering brand impersonation, malicious domains, dark web monitoring, and executive protection.