Real-time threat intelligence feeds and IP reputation feeds for FortiGate, OPNsense, Sophos, Palo Alto & Check Point firewalls. Block malicious IPs, domains, and URLs before they reach your network. Suricata rules, STIX/TAXII feeds, and blocklists ready in under 5 minutes.
Why Q-Feeds
Continuously updated IP blocklists of malicious addresses. Botnets, C2 servers, scanners, and brute-force attackers blocked automatically on your FortiGate, OPNsense, or Sophos firewall.
Malicious domains and URLs used for phishing, malware distribution, and command & control. Direct import into your firewall or DNS resolver. Compatible with Suricata rules for OPNsense IDS/IPS.
Standards-based cyber threat intelligence sharing. Integrate with any TAXII-compatible SIEM, SOAR, or threat intelligence platform. Indicators of compromise (IOCs) in industry-standard format.
External attack surface management shows what attackers see. Darkweb monitoring alerts you when your credentials or domains appear on underground forums.
Pricing
All plans include support for Fortinet, OPNsense, Sophos, Palo Alto & Check Point. Cancel anytime.
Don't take our word for it
How It Works
Sign up and choose your plan. Community edition is free forever — no credit card, no time limit, no catches.
Follow our step-by-step guide for your specific firewall. Copy the feed URL, paste it in your config. Guides for FortiGate, OPNsense, Sophos, Palo Alto and more.
Your firewall now blocks known malicious IPs, domains, and URLs automatically. Feeds update in the background — set and forget.
FAQ
Q-Feeds integrates with FortiGate, OPNsense, Sophos, Palo Alto Networks, and Check Point firewalls. Each integration has a dedicated step-by-step setup guide. Configuration takes under 5 minutes.
Create your Q-Feeds account, copy the feed URL from your dashboard, and paste it into FortiGate under External Connectors > Threat Feeds. The entire process takes under 5 minutes.
Yes. Q-Feeds provides Suricata IDS/IPS rules that you can import directly via OPNsense > Services > Intrusion Detection > Rules. Rules are updated automatically with your subscription.
Community is free forever and includes OSINT-based threat feeds updated every 24 hours. Plus adds commercial threat data, 4-hour updates, dark web monitoring, and EASM for EUR 99 per year.
Community: every 24 hours. Plus: every 4 hours. Premium: every 15 minutes. All updates happen automatically once your firewall is configured.
EASM continuously scans your internet-facing assets to show what attackers can see. Dark web monitoring alerts you when your credentials appear on underground forums. Both are included in Plus and Premium plans.
Built by security engineers, for security engineers. Join 1,200+ FortiGate, OPNsense, and Sophos firewalls already running Q-Feeds threat intelligence feeds.
Start Your Free Trial