Embed Curated Malware Threat Feeds
Pull curated malware intelligence into your product and your security stack over STIX and TAXII, filtered to the threats that matter to your customers.
Intelligence your product can act on
Built for embedding. Pull structured malware intelligence through standard formats and connectors, scoped to your threat model.
Curated STIX and TAXII feeds
Subscribe to curated threat feeds delivered over STIX and TAXII 2, ready to ingest into the tools your customers already run.
Filter to your threat model
Filter feeds by malware family and minimum PolyScore, so customers see only the threats that matter to them.
How you consume a feed
Define the feed
Choose from PolySwarm's curated feed collections, scoped by malware family and threat score thresholds
Connect over STIX and TAXII
Point your platform or the OpenCTI connector at the feed endpoint
Ingest and enrich
Pull structured indicators and profiles enriched with PolyScore and the malware family
Act in your product
Surface, block, or alert inside your own workflow
Built to integrate
Standard formats and an open connector so feeds drop into your stack without custom plumbing.
OpenCTI connector
Our OpenCTI connector enriches observables with PolySwarm detection data and structured malware profiles, building STIX objects automatically.
Scored and labeled
Every indicator carries PolyScore and the PolyUnite malware family, so downstream automation can prioritize without guesswork.
Your data, your control
Indicators are delivered to your infrastructure — what you store, retain, and share is your decision. US data centers, with EU regions available on request.
Embed PolySwarm Threat Feeds
Give your product fresh, curated malware intelligence scoped to your customers. Reach out to discuss an OEM feed partnership.