MalwareIntel aggregates, normalizes and visualizes threat intelligence from 70+ public feeds. Built for SOC analysts, threat hunters and incident response teams who need fast context.
Every piece of intelligence is connected. Families to actors, actors to campaigns, campaigns to TTPs, TTPs to D3FEND mitigations.
From raw IOCs to actionable threat context. MalwareIntel connects the dots between families, actors, campaigns and mitigations.
Automated ingestion with deduplication, normalization, confidence scoring and automatic family linking.
Deploy on your infrastructure. No cloud dependencies, no vendor lock-in. ENS Alto, NIS2 and GDPR compliant. All intelligence is processed and stored in your environment.
MalwareIntel is a free cyber threat intelligence platform for SOC analysts, threat hunters and incident response teams. We aggregate data from 70+ public sources including MalwareBazaar, ThreatFox, MITRE ATT&CK, Malpedia and European CERTs (CERT-FR, NCSC-UK, BSI, CERT-UA) to provide a unified view of the threat landscape.
Search across 273,000+ indicators of compromise, explore relationships between malware families and threat actors with our interactive Knowledge Graph, and access 3,600+ detection rules (Sigma + YARA) and 7,600+ public exploits. Every family is mapped to MITRE ATT&CK techniques with D3FEND defensive mitigations and downloadable detection packages.
Our blog features 300+ technical articles on ransomware analysis, rootkits, actor profiles and reverse engineering. All content is free without registration. Premium plans unlock API access, CSV/STIX export, custom monitors and real-time alerts.
Informational platform for defense. No binaries, no payloads. Just actionable intelligence to protect your organization.