Threat intelligence triage platform for SOC analysts
Free native debugging proxy and API client for Mac, with Linux beta support
Stage
Not given
MVP
Founded
Not given
Not given
Based in
Not given
IN
Pricing model
Free
Freemium
Pricing
Not given
Free for life: all features included, no account required. Personal Cloud (coming soon): $25/year or $3/month. Team Cloud (coming soon): $5/seat/month.
Key features
Multi-source intelligence aggregation from VirusTotal, AbuseIPDB, ThreatFox, and ipinfo.io
Support for IPv4, IPv6, domains, URLs, and file hashes
AI-generated case reports
Threat scoring and verdicts
Indicator collections and team collaboration
Automatic indicator type detection
Privacy-focused querying without identity exposure
HTTPS traffic capture and decryption
LLM Inspector for token and cost tracking
Authorization matrix testing
OpenAPI contract checking
Request fuzzer with payload injection
API security insights and findings export
MCP server with 151 tools for AI agents
Failure scenario simulation
Safari and Chrome browser extensions
What makes it different
Combines results from four threat intelligence sources in a single search
Built by SOC analysts for SOC analysts to eliminate repetitive triage work
Simplifies complex indicator triage workflows
AI offloads repetitive case report generation
Free for life with no paywall features or account required
LLM call inspection with token and cost tracking
Native macOS app written in Swift with command palette
Cylist
Cloak Proxy