Medusa Security Intelligence

STIX 2.1 threat intelligence from live honeypots, OSINT, and behavioral analysis

1.14M+ IOCs  ·  275+ security teams  ·  46 countries

Get your free API key

No card. 30 seconds. Live the moment you hit the button.

Precursor Signals. Nobody Else Has These.

1–5 hours early. Behavioral scoring from honeypots, not aggregated reports.
GitHub supply chain IOCs (Pattern 38–43) — 244 unique discoveries billion-dollar vendors missed.

Your API Key

This key will NOT be shown again. Copy or download it now. We store a hash — we cannot recover it.

Payment

Monthly Annual 2 MONTHS FREE
Free
$0/mo
 
10 requests/day — evaluation
  • Full STIX 2.1 bundle
  • CSV exports (IPs, domains)
  • 7-day lookback
  • Community support
  • No behavioral scoring
  • No precursor signals
Pro
$99/mo
 
2,000 requests/day
  • Everything in Free
  • 90-day lookback
  • Behavioral scoring
  • Precursor signals (1–5hr)
  • Supply chain IOCs (38–43)
  • Cross-index correlation
  • Email support
Enterprise
$995/mo
 
50,000 requests/day
  • Everything in Pro
  • Full history lookback
  • Medustone + Meduskip + Medusactive
  • Dedicated support + SLA
  • NET-30 / PO support
  • On-premises option

Feature Comparison

Feature Free Pro Enterprise
STIX 2.1 Bundle (1.14M+ IOCs) ✓ ✓ ✓
CSV Exports (IPs, domains, hashes) ✓ ✓ ✓
Behavioral Scoring (assholeScore) — ✓ ✓
Precursor Signals (1–5hr early warning) — ✓ ✓
GitHub Supply Chain IOCs (Pattern 38–43) — ✓ ✓
Cross-Index Correlation — ✓ ✓
Medustone / Meduskip / Medusactive — — ✓
Threat Lookback 7 days 90 days Full history
Daily Requests 25 2,000 50,000
Support Community Email Dedicated + SLA

Payment

Stripe Checkout

Card, Link, Cash App, Klarna, Affirm, Apple Pay, Google Pay, ACH. Instant key activation.

Cancel anytime. Annual billing: 2 months free.

Enterprise / Invoice

Email [email protected]

NET-30 invoicing. Custom integrations. SLA. On-premises.

Frequently Asked Questions

How is this different from Recorded Future or ThreatConnect?

Behavioral scoring from live honeypots — not aggregated third-party reports. 1–5 hour precursor signals before attacks materialize. GitHub supply chain IOCs (Pattern 38–43) nobody else detects. 244 unique discoveries. 1.14M+ indicators growing daily.

Who uses it?

Microsoft, Google, Amazon, Starlink, BT UK, SinoPac Holdings, PT Telkom Indonesia — 275+ security teams across 46 countries pulling daily.

Why 10 requests/day on free?

Each request pulls the full 1.14M+ IOC bundle. 10/day is enough to test one SIEM integration's daily pull and a handful of manual searches — true evaluation. Pro unlocks the operational tier at 2,000/day with real-time data and Tor + OPNsense feeds.

What does Enterprise include?

Full Medusa product bundle: Medustone (threat intel assessment), Meduskip (financial/crypto tracing), Medusactive (DLP), graph traversal, CARVER/DREAD framework analysis. 50,000 requests/day, full history, dedicated support with SLA, and on-premises deployment option.

Can I cancel anytime?

Yes. All subscriptions are cancel-anytime via your Stripe dashboard. No lock-in. Annual billing saves 2 months but is fully refundable within 14 days.