Best Threat Intelligence Platforms in Japan
View:
Compare the Top Threat Intelligence Platforms in Japan as of October 2026
Sort By:
What are Threat Intelligence Platforms in Japan?
Threat intelligence platforms are tools that enable organizations to collect, analyze, and act on cybersecurity threat data to proactively defend against potential attacks. These platforms aggregate information from a variety of sources, including internal security systems, open-source intelligence, commercial threat feeds, and government alerts, to provide a comprehensive view of the threat landscape. By processing and correlating this data, threat intelligence platforms identify emerging threats, track attacker tactics, and provide actionable insights that can be used to strengthen defenses and inform decision-making. Many threat intelligence platforms also integrate with other security systems, such as Security Information and Event Management (SIEM) tools, to automate threat detection and response. Overall, these platforms enhance an organization’s ability to respond to and mitigate cyber threats quickly and effectively. Compare and read user reviews of the best Threat Intelligence platforms in Japan currently available using the table below. This list is updated regularly.
-
1
ManageEngine Endpoint Central
ManageEngine
ManageEngine Endpoint Central leverages AI-powered threat intelligence to help IT and security teams stay ahead of emerging threats and prioritize remediation efforts across the endpoint estate. Vulnerability assessment assigns risk scores using CVSS severity ratings, exploit availability, vulnerability age, and active attack trends ensuring teams focus on the vulnerabilities most likely to be exploited in the wild. Real-time visibility into known vulnerabilities, zero-day threats, and actively exploited flaws enables security teams to act decisively before threats can be weaponized against the organization. EDR continuously monitors endpoint behavior for indicators of compromise, while NGAV incorporates the latest threat intelligence to block newly discovered malware variants and attack techniques giving organizations a continuously updated, intelligence-driven defense posture across every managed endpoint.Starting Price: $1.09/endpoint/month -
2
SOCRadar provides a unified, cloud-hosted platform designed to enrich your cyber threat intelligence by contextualizing it with data from your attack surface, digital footprint, dark web exposure, and supply chain. We help security teams see what attackers see by combining External Attack Surface Management, Cyber Threat Intelligence, and Digital Risk Protection into a single, easy-to-use solution. This enables your organization to discover hidden vulnerabilities, detect data leaks, and shut down threats like phishing and brand impersonation before they can harm your business. By combining these critical security functions, SOCRadar replaces the need for separate, disconnected tools. Our holistic approach offers a streamlined, modular experience, providing a complete, real-time view of your threat landscape to help you stay ahead of attackers.
-
3
Criminal IP
AI SPERA
Criminal IP Threat Intelligence provides real-time visibility into cyber threats by collecting, analyzing, and correlating data from internet-wide attack surfaces. The platform identifies malicious IP addresses, phishing domains, malware-related infrastructure, C2 servers, and emerging threat indicators. With enriched threat context, risk scoring, and historical intelligence, security teams can accelerate investigations, prioritize threats, and strengthen proactive defense strategies.Starting Price: $0/month -
4
ThreatLocker
ThreatLocker
ThreatLocker is a Zero Trust Platform that prevents cyber threats by blocking unknown applications, enforcing least privilege, and controlling what can run across your environment. Using Allowlisting, Ringfencing, Network Control, and more, ThreatLocker stops ransomware, zero-day attacks, and unauthorized activity before execution, rather than relying on detection after the fact. Built for modern IT and cybersecurity teams, the platform delivers centralized visibility and policy management across endpoints, users, and applications. ThreatLocker reduces attack surface, limits lateral movement, and supports compliance with detailed audit logs. With fast deployment, a large built-in application library, and streamlined approvals, organizations can strengthen security while minimizing operational overhead and maintaining business continuity. -
5
Cloudflare
Cloudflare
Cloudflare is the foundation for your infrastructure, applications, and teams. Cloudflare secures and ensures the reliability of your external-facing resources such as websites, APIs, and applications. It protects your internal resources such as behind-the-firewall applications, teams, and devices. And it is your platform for developing globally scalable applications. Your website, APIs, and applications are your key channels for doing business with your customers and suppliers. As more and more shift online, ensuring these resources are secure, performant and reliable is a business imperative. Cloudflare for Infrastructure is a complete solution to enable this for anything connected to the Internet. Behind-the-firewall applications and devices are foundational to the work of your internal teams. The recent surge in remote work is testing the limits of many organizations’ VPN and other hardware solutions.Starting Price: $20 per website -
6
Reflectiz
Reflectiz
Reflectiz produces first-party threat intelligence on the web supply chain, generated from continuous observation of live websites rather than aggregated third-party feeds. Reflectiz research across roughly 4,700 monitored websites found that around 30% of third-party scripts change within two weeks of deployment, the window in which a trusted vendor script can be silently weaponized. The platform surfaced exposure from the 2024 Polyfill.io supply chain compromise, which injected malicious code into a library trusted by more than 100,000 sites. Because Reflectiz baselines what each script does at runtime instead of matching known signatures, it identifies novel skimmers, unauthorized data flows, and Magecart variants before they appear in public indicator sets. Intelligence reaches teams as prioritized alerts and integrates with Splunk, Jira, and any SIEM or SOAR through REST API.Starting Price: $5000/year -
7
PathSolutions TotalView
PathSolutions
PathSolutions TotalView network monitoring and troubleshooting software bridges the gap between NETWORK MONITORING and TROUBLESHOOTING RESOLUTION telling you WHEN, WHERE and WHY network errors occur. PathSolutions TotalView continuously monitors and tracks the performance of every device and every link in your entire network, going deeper than other solutions by collecting error counters, performance data, configuration information and connectedness. A built-in heuristics engine analyzes all of this information to produce plain-English answers to problems. This means that complex problems can be solved by junior level engineers leaving the senior level engineers to work on more strategic level projects. The core product includes everything needed to run a perfectly healthy network: Configuration management, server monitoring, cloud service monitoring, IPAM, NetFlow, path mapping, and diagramming. Get Total Network Visibility on your network and solve more problems faster.Starting Price: $5,747 perpetual -
8
ActivTrak
Birch Grove Software
ActivTrak helps enterprises drive operational efficiency through AI-powered workforce intelligence. Its award-winning platform transforms work activity data into actionable insights for workforce management, workforce productivity and workforce planning — enabling measurable ROI and stronger business outcomes. More than 9,500 organizations trust ActivTrak's technology, recognized by Deloitte's Technology Fast 500, Inc. 5000, TrustRadius, and G2. Backed by Sapphire Ventures and Elsewhere Partners, ActivTrak leads the way in privacy-first workforce data that fuels the future of intelligent work.Starting Price: $10/user/month billed annually -
9
Silent Armor
Silent Breach
Silent Armor is an AI-powered perimeter defense platform designed to predict and prevent cyber breaches before they occur. It continuously analyzes hundreds of security metrics across an organization’s attack surface to deliver real-time, intelligent protection. The platform combines predictive analytics, dark web monitoring, and threat correlation to uncover emerging risks. Agentless attack surface monitoring allows organizations to discover exposed assets without deploying endpoint software. Automated mitigation playbooks help neutralize threats directly from a unified dashboard. AI-generated daily security briefs provide executive-level insights and prioritized remediation steps. Built for CISOs, SOC teams, and MSSPs, Silent Armor transforms fragmented security data into proactive, actionable defense.Starting Price: $49/asset/month -
10
Heimdal® Endpoint Detection and Response is our proprietary multi-solution service providing unique prevention, threat-hunting, and remediation capabilities. It combines some of the most advanced threat-hunting technologies: - Next-Gen Antivirus - Privileged Access Management - Application Control - Ransomware Encryption Protection - Patch & Asset Management - Email Security - Remote Desktop - Threat Prevention ( DNS based ) - Threat Hunting & Action Center With 9 modules working together seamlessly under one convenient roof, all within one agent and one platform, Heimdal Endpoint Detection and Response grants you access to all the essential cybersecurity layers your business needs to protect itself against both known and unknown online and insider threats. Our state-of-the-art product empowers you to quickly and effortlessly respond to sophisticated malware with stunning accuracy, protecting your digital assets and your reputation in the process as well.Starting Price: $0/month
-
11
CrowdStrike Falcon
CrowdStrike
CrowdStrike Falcon is a cloud-native cybersecurity platform that provides advanced protection against a wide range of cyber threats, including malware, ransomware, and sophisticated attacks. It leverages artificial intelligence (AI) and machine learning to detect and respond to threats in real time, offering endpoint protection, threat intelligence, and incident response capabilities. The platform uses a lightweight agent that continuously monitors endpoints for signs of malicious activity, providing visibility and protection without significant impact on system performance. Falcon’s cloud-based architecture ensures fast updates, scalability, and rapid threat response across large, distributed environments. Its comprehensive security features help organizations prevent, detect, and mitigate potential cyber risks, making it a powerful tool for modern enterprise cybersecurity. -
12
Microsoft Sentinel
Microsoft
Standing watch, by your side. Intelligent security analytics for your entire enterprise. See and stop threats before they cause harm, with SIEM reinvented for a modern world. Microsoft Sentinel is your birds-eye view across the enterprise. Put the cloud and large-scale intelligence from decades of Microsoft security experience to work. Make your threat detection and response smarter and faster with artificial intelligence (AI). Eliminate security infrastructure setup and maintenance, and elastically scale to meet your security needs—while reducing IT costs. Collect data at cloud scale—across all users, devices, applications, and infrastructure, both on-premises and in multiple clouds. Detect previously uncovered threats and minimize false positives using analytics and unparalleled threat intelligence from Microsoft. Investigate threats with AI and hunt suspicious activities at scale, tapping into decades of cybersecurity work at Microsoft. -
13
Feedly
Feedly
Feedly is the fastest way to track the topics and trends that matter to you. We believe that reading opens doors, whether that’s performing better at work, mastering a craft, learning something new or following current events. Reading is an important tool for those with curious minds, and Feedly is an app that enables readers to connect with the websites and sources about the things they are most passionate. Organize and read all your trusted publications and blogs in one place. Train Leo, your AI research assistant, to read your feeds and filter out the noise. Collaboratively research and share key industry trends. Ask Leo to read your feeds and prioritize the topics, events, and trends that matter to you. Share insights with your team. Organize, curate, and share key industry insights as a team. Feedly is a secure space where you can privately organize and research the topics and trends that matter to you.Starting Price: $6 per month -
14
Silent Push
Silent Push
Silent Push reveals adversary infrastructure, campaigns, and security problems by searching across the most timely, accurate and complete Threat Intelligence dataset available. Defenders can focus on stopping threats before they cause a problem and significantly improve their security operations across the entire attack chain whilst simultaneously reducing operational complexity. The Silent Push platform exposes Indicators of Future Attack (IOFA) by applying unique behavioral fingerprints to attacker activity and searching our dataset. Security teams can identify new impending attacks, rather than relying upon out-of-date IOCs delivered by legacy threat intelligence. Our solutions include: Proactive Threat Hunting - Identify and track malicious infrastructure before it’s weaponized. Brand & Impersonation - Protect your brand from phishing, malvertisement, and spoofing attacks. IOFA Early Detection Feeds - Monitor global threat activity with proactive intelligence.Starting Price: $100/month -
15
threatYeti by alphaMountain
alphaMountain AI
threatYeti by alphaMountain, turns security professionals and hobbyists alike into a senior IP threat intelligence analysts with a browser-based platform that renders real-time threat verdicts for any domain, URL, or IP on the internet. With threatYeti, the risk posed by a domain is rendered instantly with a color-coded rating from 1.00 (low risk) to 10.00 (high risk). threatYeti also protects cyber threat analysts and their networks from risky sites. threatYeti’s no-click categorization presents sites into at least one out of 89 categories so that analysts don’t have to visit them and risk encountering objectionable material or downloading malware. threatYeti also displays related hosts, threat factors, passive DNS, certificates, redirect chains and more, giving analysts the full picture of any host. The result is faster, safer investigations that enable organizations to take conclusive action on domain and IP threats.Starting Price: $0 -
16
SIRP
SIRP
SIRP is an AI-native Autonomous SOC platform. Not a SOAR upgrade. A replacement for the architecture that made SOAR necessary in the first place. Where legacy SOAR executes static playbooks, SIRP deploys AI agents that analyze alerts, compute risk, and execute response decisions autonomously, within defined policy boundaries, with full audit coverage. No manual triage. No static playbook logic. No human in the loop for routine Tier-1 cases. The platform learns from every outcome. Detection gets sharper. Response gets faster. The SOC operates at machine speed without surrendering governance or control on decisions that warrant human judgment. Built for enterprise SOC teams and MSSPs that are done waiting for a copilot to tell them what to do. -
17
VIPRE ThreatIQ
VIPRE Security Group
VIPRE ThreatIQ provides up-to-date threat intelligence from our global network of sensors, which detect millions of malicious files, URLs, and domains daily. With interactive APIs and bulk data downloads, you can tailor threat feeds to your needs. ThreatIQ integrates with various security solutions to enhance protection. Unlike many threat feeds, VIPRE’s ThreatIQ offers unique, verified data not available from other vendors. Independent testing confirms its accuracy, and it’s carefully curated to minimize false positives and ensure data is accurate and up to date. If your current threat feed misses new threats or generates too much noise, ThreatIQ delivers precision and reliability, helping you stay ahead of evolving cyber risks.Starting Price: $12,000/y for 1000q/month -
18
Threat Intelligence Platform
Threat Intelligence Platform
Threat Intelligence Platform combines several threat intelligence sources to provide in-depth insights on threat hosts and attack infrastructure. Correlating threat information from various feeds with our exhaustive in-house databases, a result of 10+ years of data crawling, the platform performs real-time host configuration analyses to come up with actionable threat intelligence that is vital in detection, mitigation, and remediation. Find detailed information about a host and its underlying infrastructure in seconds through the Threat Intelligence Platform web interface. Integrate our rich data sources into your systems to enrich results with additional threat intelligence insights. Integrate our capabilities into existing cybersecurity products, including cyber threat intelligence (CTI) platforms, security information and event management (SIEM) solutions, digital risk protection (DRP) solutions, and more.Starting Price: $12.5 per month -
19
Pangea
Pangea
Pangea is the first Security Platform as a Service (SPaaS) delivering comprehensive security functionality which app developers can leverage with a simple call to Pangea’s APIs. The platform offers foundational security services such as Authentication, Authorization, Audit Logging, Secrets Management, Entitlement and Licensing. Other security functions include PII Redaction, Embargo, as well as File, IP, URL and Domain intelligence. Just as you would use AWS for compute, Twilio for communications, or Stripe for payments - Pangea provides security functions directly into your apps. Pangea unifies security for developers, delivering a single platform where API-first security services are streamlined and easy for any developer to deliver secure user experiences.Starting Price: $0 -
20
CyCognito
CyCognito
Expose all the hidden security gaps in your organization using nation-state grade technology. CyCognito’s Global Bot Network uses attacker-like reconnaissance techniques to scan, discover and fingerprint billions of digital assets all over the world. No input or configuration needed. Uncover the unknown. The Discovery Engine uses graph data modeling to map your organization’s full attack surface. You get a clear view of every single asset an attacker could reach — what they are and how they relate to your business. Using CyCognito’s proprietary risk-detection methods, the attack simulator identifies risks per asset and discovers potential attack vectors. It doesn’t affect business operations and works without deployment, configuration or whitelisting. CyCognito scores each risk based its attractiveness to attackers and impact on the business, dramatically reducing the thousands of attack vectors organizations may have to those critical few dozen that need your focusStarting Price: $11/asset/month -
21
Sectrio
Sectrio
Sectrio was launched as Subex Secure in the year 2016 to meet the growing needs of businesses in securing their Internet of Things and Operational Technology footprint on a single platform. To meet this objective, Subex invested in building the world’s largest adaptable honeypot network ground-up while simultaneously building an agile product with features aligned to the needs of our growing customer base. Subex Secure was rebranded as Sectrio in September 2021 to reflect the arrival of the next phase of our product and innovation evolution. Today, Sectrio has deployments across North America, the Middle East, APAC, and Indian markets. Our customer base is spread across verticals. Sectrio also is home to the largest number of cybersecurity domain specialists including the industry’s leading threat research team. -
22
Media Sonar
Media Sonar Technologies
Harness the unique insights only available from Web Intelligence & Investigation to better protect your corporate brand and assets. Our unique investigative module, Pathfinder, empowers both novice and experienced security teams with a streamlined path of next step related entities and a visible recording of your selected investigative trail. Media Sonar integrates the top OSINT tools and data sources into a seamless, single platform making it 30X faster than conducting OSINT with traditional methods. Your team will no longer be required to spend hours going in and out of multiple, incompatible OSINT tools and manually compiling results. Our Web Intelligence & Investigations platform will broaden your lens on your digital attack surface, helping you to secure your brand and assets and strengthen your security operations posture. Equip your security team with visibility into indicators of threat emerging outside of your organization, with intelligence from the Open and Dark Web.Starting Price: $1,500 per 3 users per month -
23
Extend your security intelligence from local network to global cyberspace. Get in-depth, up-to-date global knowledge about specific threats and attack sources, which can be difficult to obtain if you only have access to information within your own networks. ESET Threat Intelligence data feeds utilize widely supported STIX and TAXII formats, which makes it easy to integrate with existing SIEM tools. Integration helps to deliver the latest information on the threat landscape to predict and prevent threats before they strike. ESET Threat Intelligence features a full API that is available for automation of reports, YARA rules and other functionalities to allow for integration with other systems used within organizations. These allow organizations to set up custom rules to obtain company-specific information that security engineers are interested in. Organizations receive valuable details such as the number of times specific threats have been seen worldwide.Starting Price: $132
-
24
Webshrinker
DNSFilter
Our AI categorizes billions of domains daily. We catch 76% more threats than competitors, and we catch them 5 days faster. Our domain intelligence tools have categorized more than 380 million websites, and re-scan the web every 5 days. No other feed detects and categorizes new sites faster. No other feed uses image and logo scanning technology to detect fresh scams and malware images. Our data powers web filtering, endpoint protection, rich ad targeting, and contextual safety for millions of users around the world. Webshrinker scans, aggregates, and categorizes billions of domains every day using artificial intelligence. We then validate our site categorizations using human intelligence. Raw data is collected from domains around the world. 5 billion events per day are cleaned and categorized. Machine learning algorithms process large data sets. New information is pushed out to customers via API or database update.Starting Price: $50 per month -
25
DarkIQ
Searchlight Cyber
DarkIQ continuously monitors for pre-attack indicators such as leaked credentials, phishing infrastructure, and dark web chatter, with proprietary dark web traffic monitoring. All alerts are mapped to MITRE ATT&CK, giving teams the context to respond faster and earlier in the kill chain. The DarkIQ solution includes ‣ Continuous closed-source monitoring for mentions of your organisation, brand, and personnel ‣ Infostealer and credential detection – automatically identifies infostealer-infected devices and exposed credentials ‣ Dark web traffic monitoring of all incoming and outgoing Tor traffic to any IP address, CIDR, or domain on your network ‣ Phishing detection and takedown service – automatically identify fraudulent infrastructure and take action with embedded takedowns ‣ MITRE ATT&CK mapping – all alerts are automatically mapped to relevant MITRE ATTACK techniques and recommended mitigations ‣ Company health dashboard and reporting to demonstrate your team's impact -
26
Cyble
Cyble
Cyble is a leading AI-native cybersecurity platform that delivers intelligence-driven defense to help organizations stay ahead of evolving cyber threats. Powered by its Gen 3 Agentic AI, Cyble offers autonomous threat detection, real-time incident response, and proactive defense mechanisms. The platform provides comprehensive capabilities including attack surface management, vulnerability management, brand protection, and dark web monitoring. Trusted by governments and enterprises worldwide, Cyble combines unmatched visibility with scalable technology to keep security teams ahead of adversaries. With advanced AI that can predict threats months in advance, Cyble helps reduce response times and minimize risks. The company also offers extensive research, threat intelligence reports, and personalized demos to support customer success. -
27
ThreatSTOP
ThreatSTOP
The platform automates threat intelligence acquisition, curation, and timely application for threat mitigation and visibility. In a noisy industry with high price tags, we bring a high quality, affordable and actionable threat intelligence platform to the table. It takes less than an hour to install ThreatSTOP, and the security benefits are immediately visible. Mix and match threat intelligence protection bundles based on your organization's needs, or create your own custom policies. We're vendor neutral and comprehensive, with complementary Protective DNS and IP filtering. You have the ability to provision your devices and enterprise consistently, with multi-layered security.Starting Price: $79 per month -
28
Deepinfo
Deepinfo
Deepinfo has the most comprehensive Internet-wide data and has been using this data for years to empower cybersecurity of all sizes of organizations worldwide. Deepinfo also provides comprehensive threat intelligence solutions, data, and APIs to top-notch cybersecurity companies. Deepinfo Attack Surface Platform empowers all sizes of organizations' security by providing actionable insights. An all-in-one attack surface solution built by an experienced team dealing with Internet-wide data for years.Starting Price: $20,000 per year -
29
Defense.com
Defense.com
Take control of cyber threats. Identify, prioritize and track all your security threats with Defense.com. Simplify your cyber threat management. Detection, protection, remediation, and compliance, are all in one place. Make intelligent decisions about your security with automatically prioritized and tracked threats. Improve your security by following the effective remediation steps provided for each threat. Gain knowledge and advice from experienced cyber and compliance consultants when you need assistance. Take control of your cyber security with easy-to-use tools that can work with your existing security investment. Live data from penetration tests, VA scans, threat intelligence and more all feeds into a central dashboard, showing you exactly where your risks are and their severity. Remediation advice is included for each threat, making it easy to make effective security improvements. Powerful threat intelligence feeds are mapped to your unique attack surface.Starting Price: $30 per node per month -
30
Cerberus
Searchlight Cyber
Cerberus gives security teams and law enforcement secure, searchable access to 475 billion live and recaptured data points spanning dark web forums, ransomware groups, illicit marketplaces, and encrypted channels – including closed sources other platforms can't reach. The Cerberus solution includes: ‣ Searchable access to 475B+ live and recaptured data points, including leaked credentials ‣ Continuously updated ransomware group, IAB, and market dashboards ‣ Accelerate your investigations with the AI Research Assistant ‣ Stealth Browser – a built-in dark web virtual machine for anonymous investigation of Tor and I2P sources in browser ‣ Automated alerting and case management to monitor threat actors and activity relevant to your organisation ‣ AI-powered translation – purpose-built translation optimised for dark web content
