Intel 471
Intel 471 is a private cyber threat intelligence company providing SaaS-based adversary, malware, credential, and attack surface intelligence — plus behavioral threat hunting — to enterprise security teams and governments in over 30 countries, backed by Thoma Bravo.
- Company typePrivate
- Founded2014
- HeadquartersWilmington, United States
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What Intel 471 does
Intel 471 is a private, US-incorporated cyber threat intelligence company founded in 2014 by CEO Jason Passwaters. The company sells intelligence-driven security products to enterprise and government security teams, with a customer base spanning more than 30 countries and operational offices in the United States, United Kingdom (London, Bristol), Netherlands (Amsterdam), Estonia (Tallinn), Israel (Tel Aviv), and Singapore. The company employs more than 250 people globally and is backed by Thoma Bravo following a 2021 strategic growth investment.
Its core offering is the Verity471 platform, a SaaS-based cyber intelligence platform launched in July 2025 that unifies three portfolios: Cyber Threat Exposure (external attack surface management, third-party and brand exposure), Cyber Threat Intelligence (adversary, malware, credential, vulnerability, fraud, and geopolitical intelligence), and Cyber Threat Hunting (behavioral threat hunting). The platform is built on high-fidelity automated collection combined with Cyber HUMINT — human intelligence gathered from underground marketplaces and forums — and is supplemented by the HUNTER platform (acquired via Cyborg Security in 2024), which provides nearly 700 pre-validated behavioral hunt packages compatible with major SIEM, EDR, NDR, and XDR platforms.
Intel 471 operates an enterprise SaaS business model with quote-based annual subscriptions sold primarily through a direct field sales motion targeting CISOs and security leaders, supplemented by technology integration partnerships with CrowdStrike, Splunk, SentinelOne, Palo Alto, IBM, Microsoft, Elastic, Chainalysis, Maltego, and others, plus sector ISAC partnerships in financial services, healthcare, retail/hospitality, and aviation. A free HUNTER Community Edition and CTI Maturity Pulse Check self-assessment provide product-led growth entry points. The company has made two acquisitions (SpiderFoot in November 2022, Cyborg Security in May 2024) and has received recognition in the 2026 SC Awards and top-20 threat intelligence platform rankings.
Intel 471 firmographics
Firmographics- Name
- Intel 471
- Legal name
- Intel 471 Inc.
- Website
- https://intel471.com
- Company type
- Private
- Founded year
- 2014
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- Intel 471 is a private cyber threat intelligence company providing SaaS-based adversary, malware, credential, and attack surface intelligence — plus behavioral threat hunting — to enterprise security teams and governments in over 30 countries, backed by Thoma Bravo.
- Ownership category
- akta.pro rank
Intel 471 industry classification
Industry- Product category
- Cyber Threat Intelligence
- NAICS
- Other Computer Related Services (541519), Computer Systems Design Services (541512)
- SIC
- Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Deception Technology & Threat Hunting (HDADAGAI)
- akta.pro secondary industries
- Threat Intelligence Services (BPAEADAC), Incident Response & Case Management (HDADAGAF)
Keywords
Where Intel 471 is headquartered
LocationHeadquarters
- HQ city
- Wilmington
- HQ country
- United States
- HQ region
- North America
Offices7 records
Markets served
Intel 471 business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D
Revenue model
- Verity471 SaaS Platform Subscription: Subscription-based SaaS platform providing cyber threat intelligence, threat hunting, and attack surface management. Customers access three portfolios: Cyber Threat Exposure, Cyber Threat Intelligence, and Cyber Threat Hunting under a unified platform interface.
- HUNTER Platform Subscriptions: Intelligence-driven threat hunting platform with enterprise tier offering TTP-based hunt packs, threat emulation & validation, and comprehensive hunt management. Community Edition provides free access to dozens of threat hunt packages.
- Attack Surface Exposure Module: External attack surface management capabilities sold as part of Cyber Threat Exposure Bundle or standalone, targeting CISOs and security teams requiring external vulnerability discovery and prioritization.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise SaaS Platform - Quote-based pricing |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels8 records
Intel 471 product offering
Product offeringCore offering
Intel 471 operates a SaaS-based cyber threat intelligence platform (Verity471) that combines high-fidelity automated collection with Cyber Human Intelligence (HUMINT) to deliver curated threat intelligence, behavioral threat hunting, and external attack surface management. The platform is organized into three portfolios — Cyber Threat Exposure, Cyber Threat Intelligence, and Cyber Threat Hunting — and serves enterprise security teams across more than 30 countries. The company also offers the HUNTER behavioral threat hunting platform with nearly 700 pre-validated hunt packages compatible with major SIEM, EDR, NDR, and XDR systems.
Product overview
Intel 471 is a cyber threat intelligence company operating the Verity471 platform, a unified SaaS-based CTI platform launched in July 2025 that integrates three core portfolios: Cyber Threat Exposure (attack surface management), Cyber Threat Intelligence (curated threat information), and Cyber Threat Hunting (behavioral threat detection). The platform is powered by multiple intelligence domains including Adversary Intelligence, Malware Intelligence, Credential Intelligence, Vulnerability Intelligence, Fraud Intelligence, Cyber Geopolitical Intelligence, and Threat Hunt Intelligence. Intel 471 also offers HUNTER, a behavioral threat hunting platform providing nearly 700 pre-validated hunt packages compatible with major SIEM, EDR, NDR, and XDR platforms. The company has expanded through acquisitions including SpiderFoot (November 2022) and Cyborg Security (May 2024) to enhance its CTI and threat hunting capabilities. Intel 471 serves customers across over 30 countries with over 250 employees.
Differentiator
Problem solved
Functional benefit
Brands
- Verity471: A unified SaaS-based cyber intelligence platform that consolidates Intel 471's three cyber threat portfolios — Cyber Threat Exposure, Cyber Threat Intelligence, and Cyber Threat Hunting — under a single operational interface.
- HUNTER
- TITAN
Products and services
- Verity471 Platform Next-generation SaaS-based cyber intelligence platform that unifies Intel 471's three core portfolios (Cyber Threat Exposure, Cyber Threat Intelligence, and Cyber Threat Hunting) under a single operational interface, enabling organizations to gain superior visibility of their external attack surface, mitigate third-party cyber risk, and neutralize threats faster.
- HUNTER Threat Hunting Platform Intelligence-driven behavioral threat hunting platform providing an expanding library of nearly 700 pre-validated hunt packages fueled by Intel 471's adversary intelligence. Compatible with major SIEM, EDR, NDR, and XDR platforms including CrowdStrike, Splunk, SentinelOne, and Palo Alto Cortex XDR.
- HUNTER Community Edition Free community edition of HUNTER providing access to dozens of threat hunt packages including behavioral threat hunting packages mapped to MITRE ATT&CK, coverage of emerging threats including ransomware and CVEs, threat emulation and validation bundles, and analyst-focused runbooks.
- Cyber Threat Exposure Bundle Integrated offering on the Verity471 platform that consolidates Attack Surface Exposure, Third-Party Exposure, and Brand Exposure modules into a single bundle, providing comprehensive external attack surface, third-party risk, and brand impersonation monitoring for CISOs and security leaders.
- TITAN Platform Threat intelligence platform that integrates SpiderFoot's open-source intelligence and attack surface management capabilities, used to deliver CTI-driven external attack surface visibility. Capabilities have been folded into the broader Verity471 platform.
- CTI Maturity Pulse Check Free self-assessment tool based on the Cyber Threat Intelligence Capability Maturity Model (CTI-CMM v1.3) designed to help organizations evaluate their CTI program capabilities in 10-15 minutes, providing maturity tier ratings and priority gaps.
- Finished Intelligence Reports Curated finished intelligence reports providing unique threat insights built for stakeholder decision-making across security operations, governance, risk, and compliance teams.
Quantifiable outcome
- Increase hunt frequency by up to 500% with pre-validated hunt content
- +3 more outcomes
Companies that use Intel 471
Customer profileNamed customers2 records
Segments4 records
Ideal customer profiles3 records
Intel 471 technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration14 records
Feature8 records
Intel 471 partnerships and signals
Strategic signalPartnerships
Six partnerships are on record, tiered core and minor.
- Cyborg SecuritycoreIntel 471 acquired Cyborg Security in May 2024 to expand CTI capabilities and threat hunting offerings. Cyborg Security's HUNTER platform provides behavioral threat hunting content that has been integrated into Intel 471's product portfolio.
- SpiderFootcoreIntel 471 acquired SpiderFoot, a provider of open-source intelligence and attack surface management, in November 2022. The acquisition enhanced Intel 471's CTI portfolio and integrated SpiderFoot's capabilities into the TITAN platform, strengthening the company's external attack surface management offerings.
- Aviation ISACminorIntelligence sharing and collaboration within aviation sector ISAC.
- FS-ISAC (Financial Services)minorIntelligence sharing and collaboration within financial services sector ISAC.
- H-ISAC (Health)minorIntelligence sharing and collaboration within healthcare sector ISAC.
- RH-ISAC (Retail Hospitality)minorIntelligence sharing and collaboration within retail and hospitality sector ISAC.
Scale indicators6 records
Recent moves7 records
Expansion highlights6 records
Intel 471 competitors and assessment
Company assessmentEmerging players
- KELA: KELA provides cyber threat intelligence focused on dark web monitoring, fraud, and cybercrime intelligence with an intelligence-centric SaaS model. Emerging player with strong overlap to Intel 471's HUMINT and underground-marketplace intelligence, increasingly cited as a credible challenger in the same CTI category.
Direct peers
- Flashpoint: Flashpoint is a direct competitor offering threat intelligence and vulnerability intelligence with particular strength in illicit communities, fraud, and deep/dark web monitoring. Closely comparable to Intel 471's HUMINT-driven cybercrime intelligence and exposure modules, targeting similar enterprise security buyers.
- Digital Shadows (ReliaQuest): Digital Shadows (now part of ReliaQuest) offered an external attack surface and digital risk protection service closely comparable to Intel 471's Attack Surface Exposure and Brand Exposure modules. Direct overlap with Cyber Threat Exposure portfolio and similar enterprise customer base before its acquisition.
- Recorded Future: Recorded Future is the most direct CTI peer to Intel 471, offering a threat intelligence platform combining automated collection with human analyst insight, serving large enterprise security teams with subscription-based intelligence feeds and threat hunting content. Acquired by Mastercard in 2024, it competes head-to-head with Intel 471's Verity471 platform on intelligence breadth and enterprise CTI delivery.
- ThreatConnect: ThreatConnect delivers a threat intelligence platform (TIP) combined with SOAR and analytics, used by enterprise SOC teams to operationalize threat data. Direct overlap with Intel 471's intelligence-driven threat hunting and exposure workflows, addressing similar CISOs and threat operations use cases.
- Mandiant (Google Cloud): Mandiant, now part of Google Cloud, is a direct competitor providing cyber threat intelligence, threat hunting, and incident response services with deep adversary-tracking expertise. Comparable to Intel 471 in HUMINT-led intelligence, breach research, and Fortune 500/government customer focus, with overlapping IR investigative offerings.
- Anomali: Anomali provides a threat intelligence platform with feeds, threat sharing, and SIEM-integrated intelligence management. Direct peer to Intel 471 with overlapping enterprise CTI platform, integration partnerships (Anomali-Intel 471 integration is publicly listed), and similar security operations buyer personas.
Broad incumbents
- Palo Alto Networks Unit 42: Unit 42 is Palo Alto Networks' threat intelligence and incident response arm, providing intelligence that feeds the Cortex XDR platform and competes with Intel 471 HUNTER integrations. Comparable as a HUMINT-led intelligence provider serving enterprises, but embedded within a much larger network security vendor.
- CrowdStrike: CrowdStrike is a broad-incumbent endpoint security and XDR platform that ships native threat intelligence (CrowdStrike Intelligence) and integrates with Intel 471 HUNTER queries. Comparable as a vendor competing for CTI budget in large enterprise deals, with overlapping threat hunting and adversary intelligence themes, though CrowdStrike's intelligence is bundled into a much wider Falcon platform.
- Microsoft Defender Threat Intelligence: Microsoft delivers enterprise CTI capabilities (Defender Threat Intelligence, formerly RiskIQ) as part of its broader Defender and Sentinel ecosystem. Relevant broad incumbent competing for the same enterprise intelligence budget pool, with the strategic risk of bundling CTI into platform deals at favorable economics.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Intel 471 social profiles
Digital presenceIntel 471 financial estimates
Financial estimateRevenue estimate
Valuation estimate
Intel 471 leadership team
Management profileNumber of profiles
Profiles7 records
Intel 471 subsidiaries and ownership
Company hierarchySubsidiaries1 record
Intel 471 funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Intel 471 M&A and investment
M&A and investmentM&A2 records
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Intel 471
What does Intel 471 do?
Intel 471 operates a SaaS-based cyber threat intelligence platform (Verity471) that combines high-fidelity automated collection with Cyber Human Intelligence (HUMINT) to deliver curated threat intelligence, behavioral threat hunting, and external attack surface management. The platform is organized into three portfolios — Cyber Threat Exposure, Cyber Threat Intelligence, and Cyber Threat Hunting — and serves enterprise security teams across more than 30 countries. The company also offers the HUNTER behavioral threat hunting platform with nearly 700 pre-validated hunt packages compatible with major SIEM, EDR, NDR, and XDR systems.
Is Intel 471 a public or private company?
Intel 471 is a private company. It is classified as private equity controlled and is currently operating.
When was Intel 471 founded?
Intel 471 was founded in 2014. It employs 101 to 250 people.
Where is Intel 471 based?
Intel 471 is headquartered in Wilmington, United States, in the North America region.
How does Intel 471 make money?
Three revenue lines are on record. Verity471 SaaS Platform Subscription is the primary driver. The others are HUNTER Platform Subscriptions and attack Surface Exposure Module.
Who are Intel 471's main competitors?
KELA is listed as an emerging player. Direct peers are Flashpoint, Digital Shadows (ReliaQuest), Recorded Future, ThreatConnect, Mandiant (Google Cloud) and Anomali. Broad incumbents are Palo Alto Networks Unit 42, CrowdStrike and Microsoft Defender Threat Intelligence.
Does Intel 471 have an API?
No public API is recorded for Intel 471.
What industry is Intel 471 in?
Intel 471's product category is Cyber Threat Intelligence. Its primary akta.pro industry code is HDADAGAI, Deception Technology & Threat Hunting, with a secondary code of BPAEADAC, Threat Intelligence Services. Its NAICS code is 541519 and its SIC code is 7373.