Manage all your threat intel feeds from one location

NoiseRecon fetches IP, url, domain, hash, email intel, aggregates, filters and serves it as EDL (External Dynamic List) in your firewall or security tool
Get started quickly without custom scripts or expensive infra.

Get started Request more information
previw

Threat feed agregator

Our tool connects to various threat intelligence sources, including open source ones, trusted or social media. NoiseRecon is a threat intelligence aggregator and analysis engine, with the goal to provide accurate and contextualized threat intelligence data.

Input and output format flexibility

The tool supports multiple input and multiple output formats.
Input data can be from CSV, JSON, CEF, STIX, TAXII, MISP and other formats allows data to be easily ingested. Custom, in-house format parsing is also supported.
The output of the system can be views in a web page, or exported (on demand or stream) in a multitude of formats, like Snort rules, PaloAlto rules, Bind, CyBOX, CEF, Json, STIX, or others.

Publish to a list URL

NoiseRecon focuses on integrating the data mining information and deliver it in the format that you need.
It can integrate with systems like SIEMs (ArcSight, Splunk, QRadar etc.), internal enterprise software, mobile applications, or can work with scripts that query the API.
NoiseRecon is able to work in tandem with the MISP platform, via pull or push method.

Source templates

Want a simple version? We offer a series of templates that you can use directly and get you started.

Pricing Plans

Starter

0 €/mo

  • 4 sources
  • 2 outputs
  • single user
  • 12 hours interval check
  • 100 API calls
  • 7 days audit logs
  • online documentation only

Pro

120 €/mo

  • 100 sources
  • 100 outputs
  • 30min ,1,6,12 hour interval check
  • advanced filtering
  • 100 users
  • 10000 API calls
  • 30day audit logs
  • ticketing system

Enterprise

custom

  • unlimited sources
  • unlimited outputs
  • custom scheduler
  • unlimited API calls
  • custom scheduling
  • phone support
  • option for onsite installation

Compare plans


StarterProEnterprise
Inputs4100unlimited
Outputs2100unlimited
Users1100unlimited
Interval checks12h30min, 1,6,12hcustom
API calls10010000unlimited
Audit logs7 days30 dayscustom
Documentation support
Ticketing system
Phone support
MFA

Developer friendly with full access to API

Access all the features from scripts and other applications by accessing the API server.
Actions include: adding new events, query the data, share, perform updates as result of investigations and many more.

user@system:curl https://api.noiserecon.com/api/events/query?type=ipv4_address&status=malicious&#123 code: 200, data: { descs: [ {; id: "1491325959486309841", status: "malicious", score: 5, sharelevel: "WHITE", reviewstatus: "unknown", privacymethod: "all" } ], nextpagetoken: "1491325959486310000" } }

Request more information about NoiseRecon

To find out more, send us an email at hello @ noisrecon.com or use the contact page. A NoiseRecon engineer will contact you shortly.