cybersecdirectory

Threat intelligence vendors in the United States

44 of the 80 threat intelligence vendors we list are based in the United States. 4 are public, 6 are owned by another company and 34 are private. The oldest, NETSCOUT, was founded in 1984. By revenue from annual reports, the largest company here is Palo Alto Networks ($11.5bn in FY2026).

Companies focused on threat intelligence in the United States

12 companies
CompanyBased inFoundedSizeOwnershipRevenue
Anomali

Anomali provides a threat intelligence platform and security analytics, built around its ThreatStream intelligence management product.

United States2013Private
AtlasCyber

Provides agentic threat intelligence and validation for critical infrastructure security teams.

Merrimack, United StatesPrivate
Babel Street

Risk intelligence platform that gathers multilingual online data and uses AI agents for threat, identity and vendor risk investigations by government and enterprise.

Reston, United StatesPrivate
Cyble

Cyble provides AI-native threat intelligence and cybersecurity platforms for enterprises and governments.

Cupertino, United States2020Private
Cyware

Cyware provides a platform for threat intelligence management, security orchestration, and collective defense.

Jersey City, United StatesPrivate
DomainTools

DomainTools provides DNS-focused threat intelligence and domain security data to detect and mitigate malicious domains.

Seattle, United StatesPrivate
GreyNoise Intelligence

GreyNoise Intelligence provides real-time network threat intelligence.

Washington, D.C., United States2017Private
Intel 471

Intel 471 provides cyber threat intelligence focused on adversary tracking, malware intelligence and underground marketplace coverage.

United StatesOwned by Thoma Bravo
Team Cymru

Team Cymru provides global threat intelligence from internet traffic for proactive defence.

Lake Mary, United StatesPrivate
TRM Labs

TRM Labs provides blockchain intelligence and AI tools to help investigate and disrupt criminal networks.

San Francisco, United States2018Private
VulnCheck

VulnCheck sells a cyber threat intelligence platform built around exploit and vulnerability data.

Lexington, United States2021Private
Recorded Future

Recorded Future provides a threat intelligence platform that indexes open, dark and technical sources. Acquired by Mastercard for $2.65bn.

United States2008Owned by Mastercard

Also active in threat intelligence

32 companies
CompanyBased inFoundedSizeOwnershipRevenue
Palo Alto Networks

Palo Alto Networks provides cybersecurity platforms and services to protect organizations from cyber threats.

Santa Clara, United States200513,900 staffPublic, PANW$11.5bn (FY2026)
CrowdStrike

CrowdStrike provides AI-native cybersecurity solutions to stop breaches.

Austin, United States20117,925 staffPublic, CRWD$4.8bn (FY2026)
Zscaler

Zscaler provides a cloud-native zero trust cybersecurity platform that securely connects users, devices, and applications.

San Jose, United States2007Public, ZS$3.4bn (FY2026)
NETSCOUT

NETSCOUT provides real-time network visibility, observability, cybersecurity, and DDoS protection solutions.

Westford, United States1984Public, NTCT$859.5m (FY2026)
Securin

Vulnerability intelligence-driven penetration testing firm providing contextual security assessments informed by threat actor exploitation data and ransomware tracking.

Albuquerque, United States200951-200 staffPrivate
360 Privacy

Removes personal data from data brokers and monitors the deep and dark web for clients.

Nashville, United States2019Private
Arctic Wolf

Arctic Wolf provides managed security operations, threat detection and incident response services to organisations.

Eden Prairie, United States2012Private
Bitsight

Bitsight provides a cyber risk intelligence platform.

Back Bay, United States2011Private
Black Kite

Black Kite provides an AI-native third-party cyber risk management platform for monitoring and assessing vendor risks.

Boston, United States2016Private
Censys

Censys maps internet infrastructure and provides intelligence for security operations and exposure management.

Ann Arbor, United States2017Private
Conifers.ai

Conifers provides an agentic AI platform for security operations centres to investigate and respond to threats.

Dallas, United States2024Private
Corelight

Corelight provides network detection and response solutions for cybersecurity teams.

San Francisco, United States2013Private
Infoblox

Infoblox provides networking and security software for DNS, DHCP and IP address management.

Santa Clara, United StatesPrivate
Lumu

Lumu provides network detection and response to identify and stop cyber threats in real time.

Doral, United StatesPrivate
NordLayer

Provides a network security platform for businesses to secure connections and stay compliant.

New York, United StatesPrivate
Nucleus Security

Nucleus Security provides a platform to automate vulnerability and exposure management for enterprises and government agencies.

Sarasota, United States2019Private
Opportify

Opportify provides risk intelligence and fraud prevention tools.

Claymont, United States2024Private
Quantara AI

Quantara AI provides an AI-native platform for cyber risk quantification and prioritization.

Eagle, United StatesPrivate
ReliaQuest

ReliaQuest provides an AI security operations platform for enterprises to detect and respond to threats.

Tampa, United StatesPrivate
ReversingLabs

ReversingLabs provides software supply chain security and threat intelligence to verify and secure enterprise software.

Cambridge, United StatesPrivate
RiskRecon by Mastercard

RiskRecon provides cybersecurity ratings and assessments to help organisations manage third-party and supply chain risk.

Murray, United StatesPrivate
Securonix

Securonix provides a cloud-native platform for security operations, combining SIEM, UEBA, SOAR and threat intelligence.

San Mateo, United States2008Private
Social Links

OSINT and social media investigation software, including SL Crimewall, an API and a Maltego integration, used by law enforcement and corporate security teams.

New York, United StatesPrivate
Splunk

Splunk provides a data platform for security, observability, and AI.

San Jose, United States2004Owned by Cisco
SpyCloud

SpyCloud is a cybersecurity company that specialises in identity threat protection.

Austin, United States2016Private
Doppel

Doppel provides an AI-powered platform for social engineering defense and digital risk protection.

San Francisco, United States2022Private
Kyndryl

Managed security operations, threat intelligence and incident response services delivered from global security operations centres by an IT infrastructure services provider.

New York, United StatesPrivate
Mandiant

Mandiant provides threat intelligence and incident response, now sold as Google Threat Intelligence alongside VirusTotal within Google Cloud.

United States2004Part of Google
Proofpoint

Proofpoint provides cybersecurity solutions to protect people, data, and AI across email, cloud, and collaboration tools.

Sunnyvale, United States2002Owned by Thoma Bravo
ShadowDragon

ShadowDragon provides an OSINT software platform for investigators to collect and analyse public data.

Hoover, United States2016Private
Upstream Security

Upstream Security provides a cybersecurity and intelligence platform for physical AI, vehicles, and smart mobility.

Birmingham, United States2017Private
ZeroFox

ZeroFox provides external cybersecurity services to discover, validate, and disrupt digital threats.

Baltimore, United States2013Owned by Haveli

More threat intelligence vendors

All 80 threat intelligence vendors

Every cybersecurity company in the United States · See every category