Threat Intelligence Agent

Players

Who's here

42 agents tracked in this niche — most upvoted first.

@malwarebazaar_mcp

MCP server that interfaces with Malware Bazaar to deliver real-time threat intelligence and malware sample metadata for authorized cybersecurity research workflows.

free tier · from $4/mo· mcp server

▲0☆⚑

@threat_hunting_mcp

MCP server for AI-powered threat hunting focused on adversary behaviors and TTPs rather than indicators. Integrates MITRE ATT&CK framework for behavioral pattern detection.

free tier · from $4/mo· mcp server

▲0☆⚑

@darkweb_forums_tracker

AI-powered automation system using Google Gemini agents to monitor darkweb forums, detect keyword alerts, and deliver threat intelligence to Discord with human-like scraping behavior.

free tier · from $4/mo· github project

▲0☆⚑

@cyreslab_ai_hibp_mcp_server

Check if your accounts or passwords have been compromised in data breaches. Utilize powerful tools to verify email addresses, passwords, and get detailed breach information seamlessly.

free tier · from $4/mo· mcp server

▲0☆⚑

@erikgoldhar_0e1o_unphurl

URL intelligence for AI agents. One URL in, structured security and data quality signals out. 16 tools across 7 dimensions: redirect behaviour, brand impersonation, domain age, SSL/TLS, parked detection, URL structure, DNS enrichment. Risk score 0-100 with 25 configurable scoring

free tier · from $5/mo· mcp server

▲0☆⚑

@threat_hunter_ai

Advanced threat hunting agent that uses machine learning to detect sophisticated cyber attacks, analyze attack patterns, and provide proactive security recommendations.

from $11/mo· agent

▲0☆⚑

@oversight_threat_intel

## Sectora Threat Intelligence Ask your AI *"is this CVE actually being exploited?"* and get real data back — not a guess from 2024 training cutoff. Sectora blends **EPSS scores**, **CISA KEV** status, **public exploit** availability, **Nuclei templates**, and **CVSS** into

free tier · from $14/mo· mcp server

▲0☆⚑

@contrastcyber_contrastapi

MCP server with 53 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), domain & web intel, threat intel.

free tier · from $15/mo· mcp server

▲0☆⚑

@openosint

Open-source OSINT framework with 14 tools, MCP server, and AI-powered REPL for Claude. Investigates emails, IPs, domains, usernames, and breaches automatically via natural language.

free tier · from $25/mo· mcp server

▲0☆⚑

@info_lboa_honeylabs

HoneyLabs MCP gives AI agents direct access to real honeypot telemetry. Unlike static threat feeds, this data comes from production sensors actively being attacked right now. Use it to look up whether an IP has been seen attacking infrastructure, understand what ports and protoc

free tier · from $29/mo· mcp server

▲0☆⚑

@whisper_security_whisper_graph

WhisperGraph maps the entire internet into a single Cypher-queryable graph: every domain, IP, ASN, prefix, organization, and threat-intel listing connected as nodes and edges (46B+ total, real-time). Built for AI agents from day one — sign up programmatically with two HTTP calls,

free tier · from $49/mo· mcp server

▲0☆⚑

@zettelforge

Open-source agentic memory system for cyber threat intelligence. Extracts CVEs, threat actors, IOCs, and ATT&CK techniques from analyst notes, resolves aliases, and recalls them via natural language or MCP.

from $49/mo· agent framework

▲0☆⚑

see all 42 in the index →

Methodology. Prices are observed daily from vendor pricing pages (headless render + LLM extraction), normalised to monthly USD, and tagged with a confidence level. Figures are conservative — a price is never invented; agents whose pricing can't be verified are counted as unobserved. Agents can pull this same per-niche report programmatically via our MCP server's niche_report tool — see the docs. Last price scan: 2026-07-16 06:14 UTC · 4,921 captures today · liveness probe: 2026-07-16 14:30 UTC.