Strengthen Your Security Services
Expand protection across every customer with independent threat intelligence
that integrates easily and scales without licensing expenses.
Overview
Cybersecurity companies use Malware Patrol to strengthen existing products with high-quality threat intelligence, enabling stronger detection, earlier visibility into emerging threats, richer context, and more effective customer protection. Our intelligence helps security vendors expand product capabilities while reducing the time and resources required to collect, curate, and maintain threat intelligence internally.
Built Around Your Products
Every security product has different intelligence requirements.
Some need a single feed. Others combine multiple intelligence sources to improve coverage, reduce false positives, or create entirely new capabilities.
Malware Patrol lets you choose only the intelligence your products require, whether that’s a single specialized feed or our complete intelligence collection.
Solutions include:
- Threat Detection & Prevention Intelligence
- Emerging Threat Intelligence
- Threat Research Intelligence
- Big Data Intelligence
Designed to Integrate
Threat intelligence should fit your products, not force architectural changes.
Our intelligence is available in multiple formats and integrates with existing security platforms, custom applications, cloud services, and internal data pipelines. We also provide custom formats when needed, allowing you to consume our intelligence using the workflows you’ve already built.
Options
Choose the intelligence that best fits your products and customers. From specialized threat intelligence feeds to comprehensive research resources and large-scale intelligence collections, Malware Patrol provides flexible solutions that integrate with your existing architecture and grow with your business.
A La Carte – Purchase Only What You Need
- Select one or multiple feeds based on your security requirements. Includes Malicious Domains, URLs, IPs, and more.
- Ideal for organizations and cybersecurity vendors that require targeted intelligence.
- Simple and flexible pricing.
Custom Intelligence – Tailored to Your Security Strategy
- Threat intelligence feeds customized to match your specific format, filtering, or delivery preferences.
- Designed for MSSPs, security vendors, and enterprises with unique security workflows.
- Get exactly the intelligence your product or team needs.
Expanded Intelligence Feeds – For Research and More
- DGAs – Identify C2 domains before they resolve.
- Malware Binaries – Malware samples for reverse engineering.
- Newly Registered Domains – Early detection of phishing/fraud.
- Phishing Screenshots & HTML – Phishing artifacts for AI/ML training.
- Unsanitized URLs – Includes malware filenames and extensions.
Big Data – The All-Inclusive Threat Intelligence Package
- Get all our data feeds, including expanded intelligence and newly developed ones (around 2 per year).
- Built for large-scale security operations, AI/ML training, cybersecurity product development, and threat intelligence research.
- Unlimited access at a package price.
Data Feeds
We offer a wide range of threat intelligence feeds that can be purchased individually or in packages. Whether you’re looking to enrich a specific toolset, enhance detection capabilities, or gain full-spectrum visibility across threat types, our feeds cover everything from phishing and malware to C2 infrastructure and ransomware. Use the toggles below to explore each feed and find the intelligence that best fits your needs. Download our product sheet for more data feed details.
Big Data Package
Big Data gives you complete access to our full suite of threat intelligence feeds below, along with any new feeds developed during your subscription term. On average, we release two new feeds per year, expanding your visibility into evolving threats. This package includes unlimited data access across all available formats – NGFW, SIEM, TIP, JSON, CSV and more – making it ideal for large-scale security operations, AI/ML development, and threat research. It’s a future-ready solution built for teams who need comprehensive, always-expanding intelligence.
Individual Feeds
You can purchase any of our feeds individually or combine multiple feeds to match your specific use case. Whether you need targeted indicators for a single tool or broader coverage across your security stack, we offer flexible options such as customizations in format, delivery, and content to fit your workflow.
Expanded Intelligence Use Cases
Our expanded threat intelligence feeds go beyond standard indicators to support deeper security use cases. These include malware samples, phishing artifacts, unsanitized URLs, and predictive DGAs which are valuable resources for research, threat hunting, detection engineering, and AI/ML model training. Whether you’re building detection capabilities or analyzing attacker behavior, these feeds provide the context and detail needed to go further.
Malware Samples: Power Threat Research & Detection
-
Our continuously updated repository of millions of malware samples enables SOC teams and researchers to analyze new and emerging malware variants.
-
Reverse engineers can extract indicators of compromise (IOCs) and identify attacker techniques.
-
Security vendors can improve antivirus and endpoint detection by integrating real-world malware samples into their detection engines.
Newly Registered Domains: Detect Malicious Sites Early
-
Attackers frequently register domains for phishing, fraud, and malware campaigns. Newly registered domains provide a window into potential future threats.
-
Security teams can monitor trends in domain registrations to identify suspicious activity before an attack campaign launches.
-
Organizations can create dynamic blocklists to prevent users from accessing high-risk domains before they become threats.
Phishing Screenshots & HTML: AI/ML Training
- Machine learning and AI-based phishing detection tools rely on high-quality training data. Our phishing dataset provides real-world HTML and screenshots to enhance model accuracy.
- Security teams can build automated detection systems that recognize phishing attempts with greater precision.
- Researchers can analyze phishing trends and template reuse, helping identify and mitigate phishing campaigns at scale.
Predictive DGAs: Gain an Edge on Emerging Threats
- Traditional DGA-based threat intelligence often only includes resolving domains. With our full DGA feed, security teams can know domains before they resolve, helping identify attacker infrastructure before it is operational.
- Threat researchers can track adversary tactics by examining domain generation patterns across multiple days.
- Organizations can develop predictive blocking strategies to proactively mitigate future threats.
Unsanitized URLs: Malware Distribution Deep Dive
-
Unlike sanitized URLs, our dataset includes full path, file names, and extensions, allowing security teams to study the distribution methods of malware.
-
Researchers can analyze trends in malware filenames and extensions to determine evolving tactics used by attackers.
-
SOC teams can track malware-hosting infrastructure and implement proactive blocking measures based on URL patterns.
Get Started with Enterprise
Find the Right Threat Intelligence for Your Organization
Learn about Malware Patrol’s DNS Firewall Solutions.