STIX 2.1 THREAT INTELLIGENCE

1M+ IOCs. Real-time.
From $45/mo.

Precursor signals 1-5 hours early. Behavioral scoring from live honeypots. GitHub supply chain detection nobody else has.

1M+
IOCs
275+
Security Teams
46
Countries
244
Unique Discoveries
Monthly Annual 2 MONTHS FREE
Free
$0/mo
 
500 queries/day
  • Full STIX 2.1 bundle (1M+ IOCs)
  • CSV exports (IPs, domains)
  • 7-day threat lookback
  • No behavioral scoring
  • No precursor signals
Get Free Key
Starter
$45/mo
 
1,000 queries/day
  • Full STIX 2.1 bundle (1M+ IOCs)
  • CSV exports (IPs, domains, hashes)
  • 14-day threat lookback
  • Splunk ES integration
  • OPNsense blocklists
Researcher
$145/mo
 
2,000 queries/day
  • Everything in Free
  • 30-day threat lookback
  • Behavioral scoring
  • Precursor signals (1–5hr early)
  • Email support
Gov / Press
$995/mo
 
25,000 queries/day
  • Everything in Professional
  • AIPM audits included
  • Compliance documentation (SOC2, NIST)
  • NET-30 / PO / invoice billing
  • Procurement-friendly terms
Medusa Suite
$8,995/mo
 
50,000 queries/day
  • Everything in Professional
  • Full history lookback
  • Medustone + Meduskip + Medusactive
  • Dedicated support + SLA
  • NET-30 / PO support
Enterprise Unlimited
$24,995/mo
 
Unlimited queries/day
  • Everything in Medusa Suite
  • Unlimited API calls
  • Dedicated infrastructure
  • Air-gapped deployment option
  • White-label licensing
  • 24/7 dedicated account manager
Contact Sales
On-Premises
Custom
 
Your infrastructure
  • Everything in Medusa Suite
  • Air-gapped deployment
  • 100% data sovereignty
  • White-label option
  • Dedicated account manager
Contact Sales
🛡

DugganUSA Edge Shield

Open-source Cloudflare Worker for edge-level threat blocking. Pairs with the STIX feed to block malicious IPs at the edge before they reach your infrastructure. View on GitHub →

Feature Comparison

Feature Free Researcher Professional Medusa Suite On-Premises
STIX 2.1 Bundle (1M+ IOCs)
CSV Exports (IPs, domains, hashes)
Behavioral Scoring (assholeScore)
Precursor Signals (1–5hr early warning)
GitHub Supply Chain IOCs (Pattern 38–43)
Medustone / Meduskip / Medusactive
Air-Gapped / On-Premises Deploy
Threat Lookback 7 days 30 days 90 days Full history Full history
Daily Requests 1 500 5,000 Unlimited Unlimited
Support Community Email Priority Dedicated + SLA 24/7 + SLA

Payment

Stripe Checkout

Card, Link, Cash App, Klarna, Affirm, ACH. Instant activation.

Cancel anytime. Annual billing: 2 months free.

Medusa Suite / Invoice

Email [email protected]

NET-30 invoicing. Custom integrations. SLA.

Frequently Asked Questions

How is this different from Recorded Future or ThreatConnect?

Behavioral scoring from live honeypots — not aggregated third-party reports. 1–5 hour precursor signals before attacks materialize. GitHub supply chain IOCs (Pattern 38–43) nobody else detects. 244 unique discoveries. 1M+ indicators growing daily.

Who uses it?

Microsoft, Google, Amazon, Starlink, BT UK, SinoPac Holdings, PT Telkom Indonesia — 275+ security teams across 46 countries pulling daily.

What does the free tier include?

500 queries/day against the full 1M+ IOC bundle with 7-day lookback. Enough for evaluation and light production use. Paid tiers unlock deeper lookback, behavioral scoring, and precursor signals.

What is Medusa Suite?

Full product bundle: Medustone (threat intel assessment), Meduskip (financial/crypto tracing), Medusactive (DLP), graph traversal, and CARVER/DREAD framework analysis. 50,000 queries/day, full history, SLA.

Existing free consumers?

All existing free accounts keep free access. Paid tiers unlock higher volume, precursor signals, and behavioral scoring. Founding customers: email [email protected] for special pricing.