Enterprise threat intelligence
Q-Feeds Enterprise brings everything in Premium together with TAXII 2.1 and the IOC Lookup API, under one licence sized to your organisation and hosted in the EU.
Large organisations rarely fit a fixed tier. They run several firewalls, a SIEM and often a TI platform, and want the intelligence inside all of them. With Q-Feeds Enterprise we agree users, firewalls, term, API volume and scanning scope with you.
Every indicator carries its score, MITRE ATT&CK mapping, threat actor and malware attribution, enrichment and relationships, whether it reaches a firewall as a feed, a TI platform as STIX 2.1 or a SOC workflow through the API.
One licence for the whole stack
Everything in Premium
Feeds every 20 minutes, premium DNS and malicious URL data, daily vulnerability scans and brand protection with takedown requests.
STIX 2.1 over TAXII 2.1
Contextual collections with ATT&CK mapping, attribution, enrichment and relationships.
IOC Lookup API
Verdict, score and ATT&CK context over REST, at the query volume your SOC needs.
Sized to your organisation
Users, firewalls, term, API volume and scanning scope are agreed with you, not picked from a fixed tier.
Onboarding and integration help
Our engineers help connect your SIEM, TI platform and firewalls, including custom projects.
Hosted in the EU
European data centres operated from the Netherlands, with intelligence and monitoring that support your NIS2 risk management.
Ready for your TI platform and SIEM
Questions about Q-Feeds Enterprise
What does Q-Feeds Enterprise include?
Everything in Premium, plus TAXII 2.1 access and the IOC Lookup API, with users, firewalls, term, API volume and vulnerability scanning sized to your organisation, and help with onboarding and integration.
How is Enterprise priced?
On request. The price depends on the users and firewalls covered, the term, the API volume and the scanning scope. Contact us for a quote; prices exclude VAT.
Can we get TAXII or the API without the full Enterprise licence?
Yes. TAXII 2.1 access and the IOC Lookup API are also available as add-ons.
Which platforms can use the TAXII feed?
Any TAXII 2.1 client, including OpenCTI, EclecticIQ, Anomali ThreatStream, ThreatConnect, Microsoft Sentinel and Taegis XDR.
Where is Q-Feeds hosted and who runs it?
In European data centres in the European Union. Q-Feeds is a Dutch company based in Hilversum, registered with the Chamber of Commerce (KvK) under number 94910774.
Talk to us about Enterprise
Tell us about your environment and we will put together a licence that fits.
Contact us