Find Indicators of compromise (IOCs) from a URL

VirusTotal

Analyze files, URLs, domains, and IPs

urlscan.io

Scan and analyze URLs safely

ANY.RUN

an interactive malware sandbox for analyzing suspicious files, URLs, and netw

AlienVault OTX

a community threat intelligence exchange for pulses, indicators, malware, and

Autopsy

a digital forensics platform for investigating disk images, filesystems, and

Can I Take Over XYZ

a community-maintained reference for identifying services vulnerable to subdo

Cisco Talos Intelligence

a threat reputation portal for IPs, domains, malware, vulnerabilities, and sp

Cortex

an observable analysis and active response engine used with TheHive and secur

Criminal IP

CTI search engine scoring IPs and domains for threats

CryptoScamDB

Check a crypto address or domain against known scams

Cuckoo Sandbox

Open-source automated malware sandbox

CyberChef

a browser-based data transformation workbench for decoding, parsing, hashing,

Cyberbro

Extract IOCs from raw text and enrich them across reputation services

DFIR Platform

API toolkit for phishing triage, IOC enrichment and BEC investigation

Exploit-DB

a public exploit archive maintained by Offensive Security for vulnerability r

FLOSS

a FLARE tool for extracting obfuscated strings from malware and suspicious bi

Feodo Tracker

an abuse.ch tracker for botnet command-and-control indicators associated with

FileScan.io

OPSWAT free public file and URL sandbox

FortiGuard Web Filter Lookup

Look up a URL, domain or IP reputation and category

Gitleaks

a secrets detection tool for finding API keys, tokens, and credentials in rep

Google Safe Browsing

a Google service and API for checking URLs against unsafe web resource lists

Greenbone Community Edition

an open-source vulnerability scanning stack for identifying known issues acro

Grype

a vulnerability scanner for container images, filesystems, and software bills

Hybrid Analysis

a malware analysis platform that runs files and URLs in sandbox environments

IBM X-Force Exchange

a threat intelligence sharing and enrichment platform for indicators, malware

IPQualityScore

Risk-scoring API for IP, email, phone, URL

Interactsh

an out-of-band interaction server used to verify blind vulnerabilities and ca

Intezer Analyze

a malware analysis platform that classifies files, code reuse, and threat rel

Jaeles

a signature-based web application scanner for detecting security issues and e

Joe Sandbox

a malware analysis sandbox for dynamic and static investigation of files, URL

Kaspersky Threat Intelligence Portal

Kaspersky free IOC reputation portal

MISP

an open-source threat intelligence platform for sharing indicators, events, g

MalwareBazaar

an abuse.ch malware sample exchange for searching hashes, tags, families, and

Malwarebytes Labs

a threat research publication and malware intelligence source for campaigns a

MetaDefender Cloud

Multi-engine scan of files, hashes, IPs and URLs

Mobile Verification Toolkit

a mobile forensics toolkit for checking Android and iOS devices for compromis

NVD

the U.S. National Vulnerability Database for CVEs, CPEs, CVSS scores, and ref

NerdyData

a search engine for website source code, technologies, tracking IDs, and expo

Nikto

a web server scanner for dangerous files, outdated software, and common misco

Nuclei

a template-based vulnerability scanner used to detect misconfigurations and e

Nuclei Templates

a community template library used by Nuclei to identify vulnerabilities and m

OSV-Scanner

a vulnerability scanner that checks dependencies against the Open Source Vuln

OWASP ZAP

an open-source web application security scanner and intercepting proxy for au

OpenCTI

an open-source cyber threat intelligence platform for modeling entities, rela

OpenPhish

a phishing intelligence service that detects and publishes active phishing in

Packet Storm Security

a long-running archive of exploits, advisories, tools, and security research

PhishTank

a community phishing verification service for checking and submitting suspect

Phishstats Threat Stats

Free phishing-IOC community feed

Phishunt.io

Free phishing-domain IOC feed

Polyswarm

Decentralized multi-engine TI marketplace

PublicWWW

a source-code search engine for finding HTML, JavaScript, analytics IDs, and

Pulsedive

a threat intelligence platform for enriching indicators, domains, IPs, and UR

Pulsedive Threat Browse

Malicious URL and ASN tracker

Qualys SSL Labs

a web service for analyzing public TLS configuration and certificate deployme

Retire.js

a JavaScript dependency scanner that identifies vulnerable client-side librar

SSLyze

a Python scanner that analyzes SSL and TLS services for protocol and certific

SearchCode

a source code search engine for finding snippets, functions, files, and repos

SecretFinder

JS-file secret scanner for OSINT recon

Snyk

a developer security platform for scanning dependencies, containers, code, an

Sourcegraph

a code search platform for exploring public repositories, symbols, files, and