Intelligence API
Add context to the indicators already in your workflow.
- File, URL, domain and IP lookups
- Classification and supporting context
- Relationship queries and pagination
INTELLIGENCE, IN YOUR WORKFLOWConnect the context.
Connect the context.
Automate the next move.
Integrate threat intelligence APIs, IOC enrichment and data feeds into your security workflows.
Reviewed access · Tailored evaluation · No payment details required
Intelligence feeds
Keep your local intelligence aligned with new and changing records.
- Cursor-based updates and revocations
- Native JSON and STIX 2.1 output
- Bulk data delivery by agreement
Historical data & samples
Build a dataset around your research or product needs.
- Historical IOC data and classifications
- Malware sample access by agreement
- Custom scope and usage licensing
EXPLORE THE DATA
Try a daily feed sample.
Explore daily feed samples and download JSON or CSV for your evaluation. No API key required.
FROM FIRST QUERY TO PRODUCTION
A clear path to evaluation.
Share your use case. We confirm the products, evaluation period and quota, then help you test with your own indicators. Production pricing depends on usage, data scope and licensing.
Before you begin
What is included in a trial?
Access is reviewed for your use case. Your approval includes the permitted endpoints, available fields, quota and expiration date. Public search offers a preview of our intelligence. Basic API access provides core indicator coverage. Pro and Advanced offer broader coverage and more complete context; available details vary by indicator and access plan. Feed access and sample downloads are assessed separately.
Can I use VirusSign in a commercial product?
Tell us how the data will be used and whether it will be shown or delivered to your customers. Product integration, MSSP use and redistribution require an appropriate agreement.
How is pricing determined?
API access is scoped by usage and permissions. Feeds and historical datasets are scoped by coverage, fields, delivery frequency and licensing. We provide a quote matched to your requirements.
Where should developers start?
Our API documentation covers authentication, IOC queries, relationships, feed events and usage.