Can individual researchers purchase OpenSourceMalware?
At this time, licenses are limited to organizations.
Pricing
Paid plans start at $50k/year.
Free
Use the feed for research, to block confirmed malware, and create detections.
Core
Enhance the free feed with advanced API access, built for pipeline integration.
Enterprise
Build an advanced research program with threat actor attribution, IOCs, and more.
Compare tiers
| Feature | Free | Core | Enterprise |
|---|---|---|---|
| Threat feed | Included | Included | Included |
| Integrate via API | 2k/day | 25k/day | 25k/day |
| Custom alerts | 2 | 5 | 20 |
| Check if an asset is malicious | Included | Included | Included |
| See unconfirmed, pending reports | — | Included | Included |
| STIX, custom TIP integrations (e.g. Anomali) | — | Included | Included |
| Structured IOCs | — | — | Included |
| Trace threats to a specific publisher or actor | — | — | Included |
| On-demand scanning queue | — | — | Included |
| Intel library | — | — | Included |
| Campaign grouping/mapping | — | — | Included |
| Bulk API for retroactive sweeps | — | — | Included |
| Custom research (RFI) | — | — | Included |
FAQ
Can I use OpenSourceMalware in my product (e.g. as a data source for blocking malware for customers)?
Commercial usage requires an OEM license. Contact us to discuss how you'd like to use the feed, and review our Terms of Use to understand what's permitted with a Free account.
How do I create a free account?
You can create an account using your GitHub. If you'd rather have the account linked to your email, fill out the contact form and be detailed in your request.
How do I get an API key?
After you sign up for an account, navigate to the API token page in your profile.
How do I set up a threat alert?
After you sign up for an account, navigate to the threat alerts in your profile.