Foundation
Tiered on API ratesCurated threat intelligence, delivered by API or directly to your AI models.
Designed for CTI pros and builders. Threat intelligence to power your own agents.

Starting at$0OEM available, contact sales.
Breakdown
- Users & Workspaces
- 1/1
- API + MCP
- Tiered
- Support
- Included
- SSO
- —
- Deployment
- Hosted
- Model Provider Key
- Required (BYOK)
Included Features
- Malware Intel
- Threat Actor Intel
- Stories
- Vulnerability Intelligence
- Breach Intelligence
- IoC feeds
- Mallory Agent: Chat Threads & Routines
- SIEM / SOAR Integrations
- Collaboration Tool Integrations
Frontier
QuotedRecommendedIntel-led exposure management that prioritizes risk across your attack surface.
Designed for exposure management teams & organizations. Unlimited intelligence and integration access.
BYO Enabled: Customers are entitled to bring their own AI models and cloud infrastructure.

Priced onAsset CoverageQuoted to your program.
Breakdown
- Users & Workspaces
- Unlimited
- API + MCP
- Unlimited
- Support
- Included
- SSO
- Enforced · SAML · SCIM
- Deployment
- Hosted / Self-hosted
- Model Provider Key
- Required (BYOK)
Everything in Foundation, plus:
- Private Malware Sandbox
- Sightings (Observables matched to telemetry)
- Third-Party Risk
- EASM Scanner
- Findings (Prioritized security issues)
- Risk Scoring & Prioritization
- Remediation
- Controls Validation
- Commercial Intelligence Feed Integrations
- Infrastructure & Security Control Integrations (EDR, Cloud, Asset Management, etc)