Everything you need to act on threats
From pre-built firewall and SIEM integrations to a full Threat Intelligence Portal, Q-Feeds gives you everything you need to act on threats without replacing your stack.
Every Q-Feeds product works with the security tools you already run, from firewalls and SIEMs to DNS resolvers. Your analysts investigate indicators in the portal, and the same intelligence acts on threats in your stack without adding another appliance.
Harden your firewall with threat intelligence
Feed prioritised, low-false-positive blocklists straight into the firewalls you already run.
Fortinet
Add IP, URL and domain threat feeds to your FortiGate with native External Connectors.
Palo Alto
Palo Alto firewalls can be hardened with our threat intelligence.
Sophos XGS
Enhance the Sophos XGS firewall with our threat intelligence.
OPNsense
Enhance OPNsense with our intelligence using the native plugin.
pfSense
Block malicious IPs and domains on pfSense with pfBlockerNG.
MikroTik
Load malicious IPs into a RouterOS address-list with our open source scripts.
UniFi
Block malicious IPv4 and IPv6 addresses with UniFi Network Lists, no scripts needed.
Other firewalls
Bring Q-Feeds intelligence to virtually any firewall.
Give your SIEM the context it needs
Correlate your logs with high-quality indicators so real incidents surface faster.
Splunk
Without the right threat intelligence, Splunk is just a log server.
Microsoft Sentinel
One of the most used SIEMs, enriched with the right intelligence.
Wazuh
Detect malicious IPs, domains and hashes in Wazuh with our open source installer.
Other SIEMs
Many SIEM vendors support 3rd party threat intelligence.
Feed your threat intelligence platform
Land curated STIX indicators in OpenCTI, EclecticIQ, ThreatStream or ThreatConnect over TAXII 2.1, or schedule the REST lists in MISP and OpenCTI.
OpenCTI
Fill your OpenCTI knowledge graph with curated indicators.
MISP
Correlate your MISP events against curated threat feeds.
EclecticIQ
Curated intelligence in Intelligence Center over TAXII.
Anomali ThreatStream
One more source for ThreatStream to score and dedupe.
ThreatConnect
Curated indicators for your ThreatConnect workflows.
TAXII Feeds & Server
TAXII/STIX 2.1 standard, feeds and server software available.
A complete threat exposure portal
Investigate indicators and pivot to related infrastructure, follow active malware families and threat actors, monitor the dark web, map your attack surface and protect your brand, all in one platform.
Threat intelligence feeds
Curated IP, URL and domain feeds for your whole stack.
Dark Web Monitoring
Monitor the dark web for your most important assets.
Threat Lookup
Investigate any IOC with MITRE ATT&CK context, and follow active malware and threat actors.
External Attack Surface
Check your external-facing assets exposed on the internet.
Vulnerability Scanner
Scan your infrastructure and web applications.
Brand Protection
Protect your brand from lookalikes and phishing.
Not sure where to start?
Activate the free Community Edition and add Plus or Premium whenever you are ready.
Start free