Threat Intelligence
plans and features
TI that scales with your SOC
From basic enrichment to full operational intelligence,
choose the plan that fits your team's workflows.
Choose your planContact us to get an annual plan | FreeExpanded access | LiveIndividual price | CoreIndividual price | CompleteIndividual price |
|---|---|---|---|---|
Scalable TI Lookup & YARA Search requests | 20 requests total per user | 20 requests total per user | Up to 25K requests/ mo per team | Up to 25K requests/ mo per team |
Search result coverage | Limited to 10 recent analyses | Limited to 10 recent analyses | Full TI data | Full TI data |
Investigation-ready samples | ||||
Private search | ||||
AI-powered queriesNew | ||||
Threat landscape visibility | Available as an add-on | |||
Query updates for continuous threat monitoring | Available as an add-on | |||
Seamless integration & API/SDK | ||||
Expert TI Reports on active threats | Free reports only | Free reports only | Free & Premium reports | Free & Premium reports |
Real-time TI Feeds with network IOCs | ||||
Community search insights | ||||
Premium support |
Choose your plan
Contact us to get an annual plan
Free
Expanded access*
Live
Core
Complete
*Use 20 TI Lookup & YARA requests with full access to 40+ IOCs, IOBs, and IOAs from the 10 most recent sandbox analyses. After that, access is limited to just sandbox analyses without indicator details.
Have questions about our plans and pricing?
Here are the most frequently asked questions
How many requests can I make per month in TI Lookup/YARA Search?
How can I increase my monthly request quota?
Can I subscribe to query updates in TI Lookup?
How can I increase the number of query update requests in TI Lookup?
Where are your servers located?
How do you source Threat Intelligence data?
Do you offer bundle pricing for all three of ANY.RUN’s products?
What types of threat data can I access via TI Lookup?
How up-to-date is ANY.RUN’s threat intelligence?
Can I automatically retrieve data from TI Lookup?
What data formats do TI Feeds support?
How often are TI Feeds updated?
What is the false positive (FP) rate?
Can I trace the context and behavior of an indicator?
Can I test TI Feeds before purchasing?
Integrate TI solutions in your SOC
Equip your security team with actionable threat intelligence from 15K organizations to:
Ensure early detection of cyberattacks
Improve triage & response speed and quality
Strengthen proactive defense of your company