STIX 2.1 THREAT INTELLIGENCE

1M+ IOCs. Real-time.
From $0/mo.

Precursor signals 1-5 hours early. Behavioral scoring from live honeypots. GitHub supply chain detection nobody else has.

1M+
IOCs
275+
Security Teams
46
Countries
244
Unique Discoveries
Monthly Annual SAVE 20%
Free
$0/mo
 
25 queries/day
  • All indexes searchable
  • VS Code, Chrome, CLI, Obsidian plugins
  • Community documentation
  • No SLA
Get Free Key
Enterprise
$995/mo
 
50,000 queries/day
  • Everything in Pro
  • 4-hour response SLA
  • Dedicated agent context
  • Priority IOC ingestion (1hr)
  • Custom integration support
  • Quarterly threat briefing
  • Behavioral intelligence API
  • Attack surface scanner access
Contact Us
🛡

DugganUSA Edge Shield

Open-source Cloudflare Worker for edge-level threat blocking. Pairs with the STIX feed to block malicious IPs at the edge before they reach your infrastructure. View on GitHub →

Feature Comparison

Feature Free Pro Enterprise
Daily Queries 25 2,000 50,000
All Indexes Searchable
VS Code / Chrome / CLI / Obsidian Plugins
Community Documentation
Butterbot Onboarding Agent
Integration Support Docs
Tor Relay & Attribution API
OPNsense / Suricata Feeds
Dedicated Agent Context
Priority IOC Ingestion (1hr)
Custom Integration Support
Quarterly Threat Briefing
Behavioral Intelligence API
Attack Surface Scanner
SLA None 24-hour email 4-hour response
Support Community Email Dedicated
Price $0/mo $99/mo ($948/yr) $995/mo ($9,950/yr)

Payment

Stripe Checkout (Pro)

Card, Link, Cash App, Klarna, Affirm, ACH. Instant activation.

Cancel anytime. Annual billing saves 20%.

Enterprise / Invoice

Email [email protected]

NET-30 invoicing. Custom integrations. 4-hour SLA.

Frequently Asked Questions

How is this different from Recorded Future or ThreatConnect?

Recorded Future starts at $10,000/year per seat. ThreatConnect starts at $18,000/year. CrowdStrike Falcon Intelligence is $25,000+/year. Anomali ThreatStream quotes $50,000+/year for enterprise. Mandiant Advantage requires a sales conversation and six-figure contracts.

DugganUSA Pro is $99/month. $1,188/year. For 2,000 queries/day across 1,089,889 IOCs, 10,269 Tor relays, 361 adversary profiles, and 46 indexes. With 12 integrations that work in your editor, your browser, your Slack, your SIEM. No seat licensing. No per-endpoint pricing. No sales call required.

We also publish original research the big vendors don't have: Tor infrastructure attribution with operator clustering, domain staging detection that caught ShinyHunters infrastructure 7 months pre-breach, C2 infrastructure monitoring that found The Gentlemen's victim-named subdomains before any vendor report. Behavioral scoring from live honeypots, not aggregated third-party reports. 10-signal precursor system with 1–12 month lead time.

Who uses it?

Microsoft, Google, Amazon, Starlink, BT UK, SinoPac Holdings, PT Telkom Indonesia — 275+ security teams across 46 countries pulling daily.

What does the free tier include?

25 queries/day across all indexes. VS Code, Chrome, CLI, and Obsidian plugins included. Community documentation. No SLA, but enough to evaluate everything we offer.

What is the RESCUEME coupon?

Use code RESCUEME at checkout for 40% off your first month of Pro. That's $59.40 instead of $99 to get started with 2,000 queries/day and full integration support.

Existing free consumers?

All existing free accounts keep free access. Founding customers: email [email protected] for special pricing.

1,089,889 IOCs · 275+ consumers · 46 countries · 10,269 Tor relays