
A read-only CLI and local MCP server for querying Google Threat Intelligence, including indicator threat context, sandbox behavior, IOC searches, vulnerability relationships, ATT&CK trees, and LiveHunt rulesets.
Prices and medians update for the tier you select.
Ranked by how closely each one matches gti-lookup's job. Prices show each provider's Pro state; entry prices are labelled as such. Unpriced products still belong to the market.
Market = the products most similar to this one by capability; prices are median / quartiles over its priced members, separated by provider type and buyer tier.