What is isMalicious used for?

isMalicious is a threat intelligence service that checks IPs, domains, URLs, emails, wallets and more, with SIEM, STIX/TAXII, MCP and API access. It is a good fit for investigating a suspicious link or sender, feeding threat data into a SIEM and giving an AI assistant access to threat lookups.

Yes. isMalicious has a free plan, and paid plans start at €99 per month. A free trial is also available.

Is isMalicious open source?

No. isMalicious is proprietary (closed-source) software and can't be self-hosted. In the Security category, open-source options include MISP, Wazuh and OSSEC.

What are some alternatives to isMalicious?

isMalicious competes with Recorded Future, Mandiant and Censys.

isMalicious: features, pricing and alternatives

About isMalicious

isMalicious lets analysts and developers check an indicator against indexed threat data and see the evidence behind the verdict instead of a bare label. You can look up an IP address, domain, URL, email, phone number, crypto wallet, file hash, CVE, ASN or password, and reports are available as HTML or JSON. Results list the findings and the sources they came from.

Beyond the lookup page, the intelligence can be brought into other tools: a SIEM API, STIX and TAXII feeds, OpenCTI, a blocklist API and an MCP server for AI assistants. The listing describes streaming reports and an API for use inside your own applications. A search box accepts an indicator or a pasted message for investigation.

The free subscription costs nothing per month and includes 50 API checks per month, and a free account can be created from the homepage. The site also has sections for solutions, data, resources and pricing.

Key features

Lookups for IPs, domains, URLs, emails and wallets
Evidence and sources behind each verdict
SIEM API and blocklist API
STIX and TAXII feeds
Integration with OpenCTI
MCP server for AI assistants
HTML and JSON reports

Good fit for

Investigating a suspicious link or sender
Feeding threat data into a SIEM
Giving an AI assistant access to threat lookups

Tags: threat-intelligence; security; api; siem; stix; mcp; cybersecurity

isMalicious: questions and answers

What is isMalicious used for?: isMalicious is a threat intelligence service that checks IPs, domains, URLs, emails, wallets and more, with SIEM, STIX/TAXII, MCP and API access. It is a good fit for investigating a suspicious link or sender, feeding threat data into a SIEM and giving an AI assistant access to threat lookups.
Is isMalicious free?: Yes. isMalicious has a free plan, and paid plans start at €99 per month. A free trial is also available.
Is isMalicious open source?: No. isMalicious is proprietary (closed-source) software and can't be self-hosted. In the Security category, open-source options include MISP, Wazuh and OSSEC.
What are some alternatives to isMalicious?: isMalicious competes with Recorded Future, Mandiant and Censys.