cybersecdirectory

Threat intelligence vendors

We list 80 companies active in threat intelligence, and 21 of them have it as their main focus. 6 are public, 11 are owned by another company and 63 are private. Most are based in the United States (44). The oldest, NETSCOUT, was founded in 1984. By revenue from annual reports, the largest company here is Palo Alto Networks ($11.5bn in FY2026).

By countryUnited States 44

Companies focused on threat intelligence

21 companies
CompanyBased inFoundedSizeOwnershipRevenue
Anomali

Anomali provides a threat intelligence platform and security analytics, built around its ThreatStream intelligence management product.

United States2013Private
AtlasCyber

Provides agentic threat intelligence and validation for critical infrastructure security teams.

Merrimack, United StatesPrivate
Babel Street

Risk intelligence platform that gathers multilingual online data and uses AI agents for threat, identity and vendor risk investigations by government and enterprise.

Reston, United StatesPrivate
Criminal IP

Criminal IP provides threat intelligence solutions for uncovering exposed assets and detecting malicious infrastructure.

Torrance, South Korea2017Private
Cyber Intelligence House

Provides dark web intelligence and cyber exposure monitoring to managed security service providers.

Singapore, Singapore2015Private
Cyble

Cyble provides AI-native threat intelligence and cybersecurity platforms for enterprises and governments.

Cupertino, United States2020Private
Cyware

Cyware provides a platform for threat intelligence management, security orchestration, and collective defense.

Jersey City, United StatesPrivate
DomainTools

DomainTools provides DNS-focused threat intelligence and domain security data to detect and mitigate malicious domains.

Seattle, United StatesPrivate
EclecticIQ

EclecticIQ provides a threat intelligence platform aimed at government and large enterprise analysts, with an emphasis on analyst-led workflows.

NetherlandsPrivate
GreyNoise Intelligence

GreyNoise Intelligence provides real-time network threat intelligence.

Washington, D.C., United States2017Private
Group-IB

Group-IB provides cybersecurity products and services to prevent digital crime.

Singapore, Singapore2003Private
Intel 471

Intel 471 provides cyber threat intelligence focused on adversary tracking, malware intelligence and underground marketplace coverage.

United StatesOwned by Thoma Bravo
Protos AI

Protos AI provides managed adversary risk intelligence by collecting and analysing threat signals for organisations.

Singapore, SingaporeOwned by Protos Labs
Silobreaker

Silobreaker provides a software platform that gathers and analyses security and risk intelligence for organisations.

London, United Kingdom2005Private
Team Cymru

Team Cymru provides global threat intelligence from internet traffic for proactive defence.

Lake Mary, United StatesPrivate
TRM Labs

TRM Labs provides blockchain intelligence and AI tools to help investigate and disrupt criminal networks.

San Francisco, United States2018Private
VirusTotal

VirusTotal is a cybersecurity company that provides a free online service to analyse files and URLs for malicious content.

Málaga, Spain2004Owned by Google Cloud Platform
VulnCheck

VulnCheck sells a cyber threat intelligence platform built around exploit and vulnerability data.

Lexington, United States2021Private
Joe Security

Joe Security provides automated and analyst-driven malware and phishing analysis through its Joe Sandbox platform.

SwitzerlandPrivate
KELA

KELA provides cyber threat intelligence and external threat exposure management from underground sources.

Tel Aviv, IsraelPrivate
Recorded Future

Recorded Future provides a threat intelligence platform that indexes open, dark and technical sources. Acquired by Mastercard for $2.65bn.

United States2008Owned by Mastercard

Also active in threat intelligence

58 companies
CompanyBased inFoundedSizeOwnershipRevenue
Palo Alto Networks

Palo Alto Networks provides cybersecurity platforms and services to protect organizations from cyber threats.

Santa Clara, United States200513,900 staffPublic, PANW$11.5bn (FY2026)
CrowdStrike

CrowdStrike provides AI-native cybersecurity solutions to stop breaches.

Austin, United States20117,925 staffPublic, CRWD$4.8bn (FY2026)
Zscaler

Zscaler provides a cloud-native zero trust cybersecurity platform that securely connects users, devices, and applications.

San Jose, United States2007Public, ZS$3.4bn (FY2026)
Check Point

Check Point Software provides cyber security solutions including network, cloud, and AI security.

Tel Aviv, Israel1993Public, CHKP$2.7bn (FY2025)
NETSCOUT

NETSCOUT provides real-time network visibility, observability, cybersecurity, and DDoS protection solutions.

Westford, United States1984Public, NTCT$859.5m (FY2026)
Kaspersky

Kaspersky develops antivirus and internet security software for home users and businesses.

Moscow, Russia19973,600 staffPrivate
Argos Security GmbH

Argos Security GmbH is a German cyber defence provider with an AI-supported centre in Munich.

Munich, Germany1999100 staffOwned by Sophora Unternehmerkapital
Securin

Vulnerability intelligence-driven penetration testing firm providing contextual security assessments informed by threat actor exploitation data and ransomware tracking.

Albuquerque, United States200951-200 staffPrivate
360 Privacy

Removes personal data from data brokers and monitors the deep and dark web for clients.

Nashville, United States2019Private
Arctic Wolf

Arctic Wolf provides managed security operations, threat detection and incident response services to organisations.

Eden Prairie, United States2012Private
Arsen Security

Arsen provides a platform for cybersecurity awareness and social engineering simulation.

Paris, France2021Private
asvin

Software and services for cyber risk analysis, secure software updates and UNECE R155 and R156 compliance.

Stuttgart, Germany2018Private
Bitsight

Bitsight provides a cyber risk intelligence platform.

Back Bay, United States2011Private
Black Kite

Black Kite provides an AI-native third-party cyber risk management platform for monitoring and assessing vendor risks.

Boston, United States2016Private
Censys

Censys maps internet infrastructure and provides intelligence for security operations and exposure management.

Ann Arbor, United States2017Private
Conifers.ai

Conifers provides an agentic AI platform for security operations centres to investigate and respond to threats.

Dallas, United States2024Private
Corelight

Corelight provides network detection and response solutions for cybersecurity teams.

San Francisco, United States2013Private
Corero Network Security

Corero Network Security provides automatic DDoS protection for businesses and service providers.

London, United KingdomPublic, CNS
CVETodo

CVETodo prioritises software vulnerabilities using exploitability, exposure and threat intelligence for security teams.

Tauranga, New ZealandPrivate
CybelAngel

CybelAngel provides external threat intelligence and attack surface management services to protect enterprise data and assets.

Clichy, France2013Private
Decurity

Decurity is a web3 security firm based in Dubai.

Dubai, United Arab Emirates2022Private
Fivecast

Open source intelligence software that collects and analyses online data to detect threats and hidden networks for national security, law enforcement and financial crime teams.

Adelaide, AustraliaPrivate
GoGoByte

Beijing firm selling TARA and test software, vehicle test hardware, penetration testing and R155 compliance advice.

Beijing, ChinaPrivate
Guardsi Cybersecurity

Guardsi Cybersecurity is a Brazilian firm that has specialised in penetration testing and offensive security since 2015.

Uberlândia, Brazil2015Private
Guardsquare

Guardsquare provides mobile app security through code hardening, testing, and threat monitoring.

Leuven, Belgium2014Private
Infoblox

Infoblox provides networking and security software for DNS, DHCP and IP address management.

Santa Clara, United StatesPrivate
Intelligence X

Intelligence X operates a search engine and data archive for open source intelligence.

Prague, Czech Republic2018Private
Lumu

Lumu provides network detection and response to identify and stop cyber threats in real time.

Doral, United StatesPrivate
Netcraft

Netcraft detects, disrupts and takes down phishing, fraud and other cybercrime threats for brands.

London, United KingdomPrivate
NordLayer

Provides a network security platform for businesses to secure connections and stay compliant.

New York, United StatesPrivate
Nucleus Security

Nucleus Security provides a platform to automate vulnerability and exposure management for enterprises and government agencies.

Sarasota, United States2019Private
Opportify

Opportify provides risk intelligence and fraud prevention tools.

Claymont, United States2024Private
OSINT Industries

OSINT Industries provides open-source intelligence tools for online investigations.

London, United KingdomPrivate
Quantara AI

Quantara AI provides an AI-native platform for cyber risk quantification and prioritization.

Eagle, United StatesPrivate
ReliaQuest

ReliaQuest provides an AI security operations platform for enterprises to detect and respond to threats.

Tampa, United StatesPrivate
Report URI

Report URI is a client-side security platform that monitors and controls what runs in users' browsers.

Clitheroe, United Kingdom2017Private
ReversingLabs

ReversingLabs provides software supply chain security and threat intelligence to verify and secure enterprise software.

Cambridge, United StatesPrivate
RiskRecon by Mastercard

RiskRecon provides cybersecurity ratings and assessments to help organisations manage third-party and supply chain risk.

Murray, United StatesPrivate
Securonix

Securonix provides a cloud-native platform for security operations, combining SIEM, UEBA, SOAR and threat intelligence.

San Mateo, United States2008Private
Sekoia

Sekoia provides an AI-driven security operations platform for detecting, investigating and responding to cyber threats.

Rennes, France2022Private
Social Links

OSINT and social media investigation software, including SL Crimewall, an API and a Maltego integration, used by law enforcement and corporate security teams.

New York, United StatesPrivate
Splunk

Splunk provides a data platform for security, observability, and AI.

San Jose, United States2004Owned by Cisco
SpyCloud

SpyCloud is a cybersecurity company that specialises in identity threat protection.

Austin, United States2016Private
Yarix

Italian Var Group security firm that absorbed Munich automotive consultancy CYRES and offers a vehicle SOC service.

Treviso, ItalyOwned by Var Group
ARPSyndicate

Builds internet-scale intelligence datasets and security products for vulnerability, subdomain, and physical reconnaissance.

New Delhi, IndiaPrivate
Check Point Exposure Management (formerly Cyberint)

Provides a platform for managing external and internal cyber risk exposure.

Tel Aviv, IsraelPrivate
Doppel

Doppel provides an AI-powered platform for social engineering defense and digital risk protection.

San Francisco, United States2022Private
E-C.O.P (Thailand) Limited

Provides managed security services and security operations centre services in Thailand.

Thailand2007Private
HACK KAP

HACK KAP provides manual penetration testing, dark-web intelligence, and hacking labs for businesses worldwide.

Colombo, Sri Lanka2022Private
Kyndryl

Managed security operations, threat intelligence and incident response services delivered from global security operations centres by an IT infrastructure services provider.

New York, United StatesPrivate
Maltego

Maltego provides a platform for open source intelligence and cyber investigations.

Germany2017Owned by Charlesbank Capital Partners
Mandiant

Mandiant provides threat intelligence and incident response, now sold as Google Threat Intelligence alongside VirusTotal within Google Cloud.

United States2004Part of Google
Primary Target

Browser-based tool that automates threat analysis and risk assessment, mainly for vehicle makers and their suppliers.

Ismaning, GermanyPrivate
Proofpoint

Proofpoint provides cybersecurity solutions to protect people, data, and AI across email, cloud, and collaboration tools.

Sunnyvale, United States2002Owned by Thoma Bravo
securagen.ai

Builds cryptographic validation, information intelligence, regulatory assurance and sovereign AI products for defence and government.

Athens, Greece2025Private
ShadowDragon

ShadowDragon provides an OSINT software platform for investigators to collect and analyse public data.

Hoover, United States2016Private
Upstream Security

Upstream Security provides a cybersecurity and intelligence platform for physical AI, vehicles, and smart mobility.

Birmingham, United States2017Private
ZeroFox

ZeroFox provides external cybersecurity services to discover, validate, and disrupt digital threats.

Baltimore, United States2013Owned by Haveli

Recent deals in threat intelligence

All threat intelligence deals
DateDealAmountSource
16 Oct 2026Proofpoint acquired VaronisSource for Proofpoint buying Varonis, opens in a new tab$6.3bnSource for Proofpoint buying Varonis, opens in a new tab
15 Oct 2026Proofpoint acquired VaronisSource for Proofpoint buying Varonis, opens in a new tab$6.3bnSource for Proofpoint buying Varonis, opens in a new tab
1 Sept 2026Palo Alto Networks acquired ConsoleSource for Palo Alto Networks buying Console, opens in a new tabUndisclosedSource for Palo Alto Networks buying Console, opens in a new tab
July 2026CrowdStrike acquired XM CyberSource for CrowdStrike buying XM Cyber, opens in a new tabUndisclosedSource for CrowdStrike buying XM Cyber, opens in a new tab
July 2026Infoblox acquired KentikSource for Infoblox buying Kentik, opens in a new tabUndisclosedSource for Infoblox buying Kentik, opens in a new tab
May 2026Check Point acquired DeepchecksSource for Check Point buying Deepchecks, opens in a new tabUndisclosedSource for Check Point buying Deepchecks, opens in a new tab
May 2026Zscaler acquired Symmetry SystemsSource for Zscaler buying Symmetry Systems, opens in a new tabUndisclosedSource for Zscaler buying Symmetry Systems, opens in a new tab
February 2026Guardsquare acquired VerimatrixSource for Guardsquare buying Verimatrix, opens in a new tabUndisclosedSource for Guardsquare buying Verimatrix, opens in a new tab
February 2026Arctic Wolf acquired Sevco SecuritySource for Arctic Wolf buying Sevco Security, opens in a new tabUndisclosedSource for Arctic Wolf buying Sevco Security, opens in a new tab
February 2026Check Point acquired CyataSource for Check Point buying Cyata, opens in a new tabUndisclosedSource for Check Point buying Cyata, opens in a new tab

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.

See every category

Often listed alongside threat intelligence