Threat intelligence vendors in the United States
44 of the 80 threat intelligence vendors we list are based in the United States. 4 are public, 6 are owned by another company and 34 are private. The oldest, NETSCOUT, was founded in 1984. By revenue from annual reports, the largest company here is Palo Alto Networks ($11.5bn in FY2026).
Companies focused on threat intelligence in the United States
12 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
Anomali Anomali provides a threat intelligence platform and security analytics, built around its ThreatStream intelligence management product. | United States | 2013 | Private | ||
AtlasCyber Provides agentic threat intelligence and validation for critical infrastructure security teams. | Merrimack, United States | Private | |||
Babel Street Risk intelligence platform that gathers multilingual online data and uses AI agents for threat, identity and vendor risk investigations by government and enterprise. | Reston, United States | Private | |||
Cyble Cyble provides AI-native threat intelligence and cybersecurity platforms for enterprises and governments. | Cupertino, United States | 2020 | Private | ||
Cyware Cyware provides a platform for threat intelligence management, security orchestration, and collective defense. | Jersey City, United States | Private | |||
DomainTools DomainTools provides DNS-focused threat intelligence and domain security data to detect and mitigate malicious domains. | Seattle, United States | Private | |||
GreyNoise Intelligence GreyNoise Intelligence provides real-time network threat intelligence. | Washington, D.C., United States | 2017 | Private | ||
Intel 471 Intel 471 provides cyber threat intelligence focused on adversary tracking, malware intelligence and underground marketplace coverage. | United States | Owned by Thoma Bravo | |||
Team Cymru Team Cymru provides global threat intelligence from internet traffic for proactive defence. | Lake Mary, United States | Private | |||
TRM Labs TRM Labs provides blockchain intelligence and AI tools to help investigate and disrupt criminal networks. | San Francisco, United States | 2018 | Private | ||
VulnCheck VulnCheck sells a cyber threat intelligence platform built around exploit and vulnerability data. | Lexington, United States | 2021 | Private | ||
Recorded Future Recorded Future provides a threat intelligence platform that indexes open, dark and technical sources. Acquired by Mastercard for $2.65bn. | United States | 2008 | Owned by Mastercard |
Also active in threat intelligence
32 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
Palo Alto Networks Palo Alto Networks provides cybersecurity platforms and services to protect organizations from cyber threats. | Santa Clara, United States | 2005 | 13,900 staff | Public, PANW | $11.5bn (FY2026) |
CrowdStrike CrowdStrike provides AI-native cybersecurity solutions to stop breaches. | Austin, United States | 2011 | 7,925 staff | Public, CRWD | $4.8bn (FY2026) |
Zscaler Zscaler provides a cloud-native zero trust cybersecurity platform that securely connects users, devices, and applications. | San Jose, United States | 2007 | Public, ZS | $3.4bn (FY2026) | |
NETSCOUT NETSCOUT provides real-time network visibility, observability, cybersecurity, and DDoS protection solutions. | Westford, United States | 1984 | Public, NTCT | $859.5m (FY2026) | |
Securin Vulnerability intelligence-driven penetration testing firm providing contextual security assessments informed by threat actor exploitation data and ransomware tracking. | Albuquerque, United States | 2009 | 51-200 staff | Private | |
360 Privacy Removes personal data from data brokers and monitors the deep and dark web for clients. | Nashville, United States | 2019 | Private | ||
Arctic Wolf Arctic Wolf provides managed security operations, threat detection and incident response services to organisations. | Eden Prairie, United States | 2012 | Private | ||
Bitsight Bitsight provides a cyber risk intelligence platform. | Back Bay, United States | 2011 | Private | ||
Black Kite Black Kite provides an AI-native third-party cyber risk management platform for monitoring and assessing vendor risks. | Boston, United States | 2016 | Private | ||
Censys Censys maps internet infrastructure and provides intelligence for security operations and exposure management. | Ann Arbor, United States | 2017 | Private | ||
Conifers.ai Conifers provides an agentic AI platform for security operations centres to investigate and respond to threats. | Dallas, United States | 2024 | Private | ||
Corelight Corelight provides network detection and response solutions for cybersecurity teams. | San Francisco, United States | 2013 | Private | ||
Infoblox Infoblox provides networking and security software for DNS, DHCP and IP address management. | Santa Clara, United States | Private | |||
Lumu Lumu provides network detection and response to identify and stop cyber threats in real time. | Doral, United States | Private | |||
NordLayer Provides a network security platform for businesses to secure connections and stay compliant. | New York, United States | Private | |||
Nucleus Security Nucleus Security provides a platform to automate vulnerability and exposure management for enterprises and government agencies. | Sarasota, United States | 2019 | Private | ||
Opportify Opportify provides risk intelligence and fraud prevention tools. | Claymont, United States | 2024 | Private | ||
Quantara AI Quantara AI provides an AI-native platform for cyber risk quantification and prioritization. | Eagle, United States | Private | |||
ReliaQuest ReliaQuest provides an AI security operations platform for enterprises to detect and respond to threats. | Tampa, United States | Private | |||
ReversingLabs ReversingLabs provides software supply chain security and threat intelligence to verify and secure enterprise software. | Cambridge, United States | Private | |||
RiskRecon by Mastercard RiskRecon provides cybersecurity ratings and assessments to help organisations manage third-party and supply chain risk. | Murray, United States | Private | |||
Securonix Securonix provides a cloud-native platform for security operations, combining SIEM, UEBA, SOAR and threat intelligence. | San Mateo, United States | 2008 | Private | ||
Social Links OSINT and social media investigation software, including SL Crimewall, an API and a Maltego integration, used by law enforcement and corporate security teams. | New York, United States | Private | |||
Splunk Splunk provides a data platform for security, observability, and AI. | San Jose, United States | 2004 | Owned by Cisco | ||
SpyCloud SpyCloud is a cybersecurity company that specialises in identity threat protection. | Austin, United States | 2016 | Private | ||
Doppel Doppel provides an AI-powered platform for social engineering defense and digital risk protection. | San Francisco, United States | 2022 | Private | ||
Kyndryl Managed security operations, threat intelligence and incident response services delivered from global security operations centres by an IT infrastructure services provider. | New York, United States | Private | |||
M Mandiant Mandiant provides threat intelligence and incident response, now sold as Google Threat Intelligence alongside VirusTotal within Google Cloud. | United States | 2004 | Part of Google | ||
Proofpoint Proofpoint provides cybersecurity solutions to protect people, data, and AI across email, cloud, and collaboration tools. | Sunnyvale, United States | 2002 | Owned by Thoma Bravo | ||
ShadowDragon ShadowDragon provides an OSINT software platform for investigators to collect and analyse public data. | Hoover, United States | 2016 | Private | ||
Upstream Security Upstream Security provides a cybersecurity and intelligence platform for physical AI, vehicles, and smart mobility. | Birmingham, United States | 2017 | Private | ||
ZeroFox ZeroFox provides external cybersecurity services to discover, validate, and disrupt digital threats. | Baltimore, United States | 2013 | Owned by Haveli |
More threat intelligence vendors
All 80 threat intelligence vendorsEvery cybersecurity company in the United States · See every category