Intel 471

What Intel 471 does

Intel 471 is a private, US-incorporated cyber threat intelligence company founded in 2014 by CEO Jason Passwaters. The company sells intelligence-driven security products to enterprise and government security teams, with a customer base spanning more than 30 countries and operational offices in the United States, United Kingdom (London, Bristol), Netherlands (Amsterdam), Estonia (Tallinn), Israel (Tel Aviv), and Singapore. The company employs more than 250 people globally and is backed by Thoma Bravo following a 2021 strategic growth investment.

Its core offering is the Verity471 platform, a SaaS-based cyber intelligence platform launched in July 2025 that unifies three portfolios: Cyber Threat Exposure (external attack surface management, third-party and brand exposure), Cyber Threat Intelligence (adversary, malware, credential, vulnerability, fraud, and geopolitical intelligence), and Cyber Threat Hunting (behavioral threat hunting). The platform is built on high-fidelity automated collection combined with Cyber HUMINT — human intelligence gathered from underground marketplaces and forums — and is supplemented by the HUNTER platform (acquired via Cyborg Security in 2024), which provides nearly 700 pre-validated behavioral hunt packages compatible with major SIEM, EDR, NDR, and XDR platforms.

Intel 471 operates an enterprise SaaS business model with quote-based annual subscriptions sold primarily through a direct field sales motion targeting CISOs and security leaders, supplemented by technology integration partnerships with CrowdStrike, Splunk, SentinelOne, Palo Alto, IBM, Microsoft, Elastic, Chainalysis, Maltego, and others, plus sector ISAC partnerships in financial services, healthcare, retail/hospitality, and aviation. A free HUNTER Community Edition and CTI Maturity Pulse Check self-assessment provide product-led growth entry points. The company has made two acquisitions (SpiderFoot in November 2022, Cyborg Security in May 2024) and has received recognition in the 2026 SC Awards and top-20 threat intelligence platform rankings.

Name

Intel 471

Legal name

Intel 471 Inc.

Website

https://intel471.com

Company type

Private

Founded year

2014

Operating status

Operating

Headcount range

101–250 employees

Short description

Intel 471 is a private cyber threat intelligence company providing SaaS-based adversary, malware, credential, and attack surface intelligence — plus behavioral threat hunting — to enterprise security teams and governments in over 30 countries, backed by Thoma Bravo.

Ownership category

akta.pro rank

Product category

Cyber Threat Intelligence

NAICS

Other Computer Related Services (541519), Computer Systems Design Services (541512)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Deception Technology & Threat Hunting (HDADAGAI)

akta.pro secondary industries

Threat Intelligence Services (BPAEADAC), Incident Response & Case Management (HDADAGAF)

Keywords

• Cyber threat intelligence
• Threat hunting platform
• Attack surface management
• Cyber HUMINT services
• Vulnerability intelligence

Headquarters

HQ city

Wilmington

HQ country

United States

HQ region

North America

Offices7 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D

Revenue model

1. Verity471 SaaS Platform Subscription: Subscription-based SaaS platform providing cyber threat intelligence, threat hunting, and attack surface management. Customers access three portfolios: Cyber Threat Exposure, Cyber Threat Intelligence, and Cyber Threat Hunting under a unified platform interface.
2. HUNTER Platform Subscriptions: Intelligence-driven threat hunting platform with enterprise tier offering TTP-based hunt packs, threat emulation & validation, and comprehensive hunt management. Community Edition provides free access to dozens of threat hunt packages.
3. Attack Surface Exposure Module: External attack surface management capabilities sold as part of Cyber Threat Exposure Bundle or standalone, targeting CISOs and security teams requiring external vulnerability discovery and prioritization.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels8 records

Core offering

Intel 471 operates a SaaS-based cyber threat intelligence platform (Verity471) that combines high-fidelity automated collection with Cyber Human Intelligence (HUMINT) to deliver curated threat intelligence, behavioral threat hunting, and external attack surface management. The platform is organized into three portfolios — Cyber Threat Exposure, Cyber Threat Intelligence, and Cyber Threat Hunting — and serves enterprise security teams across more than 30 countries. The company also offers the HUNTER behavioral threat hunting platform with nearly 700 pre-validated hunt packages compatible with major SIEM, EDR, NDR, and XDR systems.

Product overview

Intel 471 is a cyber threat intelligence company operating the Verity471 platform, a unified SaaS-based CTI platform launched in July 2025 that integrates three core portfolios: Cyber Threat Exposure (attack surface management), Cyber Threat Intelligence (curated threat information), and Cyber Threat Hunting (behavioral threat detection). The platform is powered by multiple intelligence domains including Adversary Intelligence, Malware Intelligence, Credential Intelligence, Vulnerability Intelligence, Fraud Intelligence, Cyber Geopolitical Intelligence, and Threat Hunt Intelligence. Intel 471 also offers HUNTER, a behavioral threat hunting platform providing nearly 700 pre-validated hunt packages compatible with major SIEM, EDR, NDR, and XDR platforms. The company has expanded through acquisitions including SpiderFoot (November 2022) and Cyborg Security (May 2024) to enhance its CTI and threat hunting capabilities. Intel 471 serves customers across over 30 countries with over 250 employees.

Differentiator

Problem solved

Functional benefit

Brands

• Verity471: A unified SaaS-based cyber intelligence platform that consolidates Intel 471's three cyber threat portfolios — Cyber Threat Exposure, Cyber Threat Intelligence, and Cyber Threat Hunting — under a single operational interface.
• HUNTER
• TITAN

Products and services

• Verity471 Platform Next-generation SaaS-based cyber intelligence platform that unifies Intel 471's three core portfolios (Cyber Threat Exposure, Cyber Threat Intelligence, and Cyber Threat Hunting) under a single operational interface, enabling organizations to gain superior visibility of their external attack surface, mitigate third-party cyber risk, and neutralize threats faster.
• HUNTER Threat Hunting Platform Intelligence-driven behavioral threat hunting platform providing an expanding library of nearly 700 pre-validated hunt packages fueled by Intel 471's adversary intelligence. Compatible with major SIEM, EDR, NDR, and XDR platforms including CrowdStrike, Splunk, SentinelOne, and Palo Alto Cortex XDR.
• HUNTER Community Edition Free community edition of HUNTER providing access to dozens of threat hunt packages including behavioral threat hunting packages mapped to MITRE ATT&CK, coverage of emerging threats including ransomware and CVEs, threat emulation and validation bundles, and analyst-focused runbooks.
• Cyber Threat Exposure Bundle Integrated offering on the Verity471 platform that consolidates Attack Surface Exposure, Third-Party Exposure, and Brand Exposure modules into a single bundle, providing comprehensive external attack surface, third-party risk, and brand impersonation monitoring for CISOs and security leaders.
• TITAN Platform Threat intelligence platform that integrates SpiderFoot's open-source intelligence and attack surface management capabilities, used to deliver CTI-driven external attack surface visibility. Capabilities have been folded into the broader Verity471 platform.
• CTI Maturity Pulse Check Free self-assessment tool based on the Cyber Threat Intelligence Capability Maturity Model (CTI-CMM v1.3) designed to help organizations evaluate their CTI program capabilities in 10-15 minutes, providing maturity tier ratings and priority gaps.
• Finished Intelligence Reports Curated finished intelligence reports providing unique threat insights built for stakeholder decision-making across security operations, governance, risk, and compliance teams.

Quantifiable outcome

• Increase hunt frequency by up to 500% with pre-validated hunt content
• +3 more outcomes

Named customers2 records

Segments4 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration14 records

Feature8 records

Partnerships

Six partnerships are on record, tiered core and minor.

• Cyborg SecuritycoreStrategic or Co-development Partner · 1 May 2024Intel 471 acquired Cyborg Security in May 2024 to expand CTI capabilities and threat hunting offerings. Cyborg Security's HUNTER platform provides behavioral threat hunting content that has been integrated into Intel 471's product portfolio.
• SpiderFootcoreStrategic or Co-development Partner · 1 November 2022Intel 471 acquired SpiderFoot, a provider of open-source intelligence and attack surface management, in November 2022. The acquisition enhanced Intel 471's CTI portfolio and integrated SpiderFoot's capabilities into the TITAN platform, strengthening the company's external attack surface management offerings.
• Aviation ISACminorGTM or Marketing PartnerIntelligence sharing and collaboration within aviation sector ISAC.
• FS-ISAC (Financial Services)minorGTM or Marketing PartnerIntelligence sharing and collaboration within financial services sector ISAC.
• H-ISAC (Health)minorGTM or Marketing PartnerIntelligence sharing and collaboration within healthcare sector ISAC.
• RH-ISAC (Retail Hospitality)minorGTM or Marketing PartnerIntelligence sharing and collaboration within retail and hospitality sector ISAC.

Scale indicators6 records

Recent moves7 records

Expansion highlights6 records

Emerging players

• KELA: KELA provides cyber threat intelligence focused on dark web monitoring, fraud, and cybercrime intelligence with an intelligence-centric SaaS model. Emerging player with strong overlap to Intel 471's HUMINT and underground-marketplace intelligence, increasingly cited as a credible challenger in the same CTI category.

Direct peers

• Flashpoint: Flashpoint is a direct competitor offering threat intelligence and vulnerability intelligence with particular strength in illicit communities, fraud, and deep/dark web monitoring. Closely comparable to Intel 471's HUMINT-driven cybercrime intelligence and exposure modules, targeting similar enterprise security buyers.
• Digital Shadows (ReliaQuest): Digital Shadows (now part of ReliaQuest) offered an external attack surface and digital risk protection service closely comparable to Intel 471's Attack Surface Exposure and Brand Exposure modules. Direct overlap with Cyber Threat Exposure portfolio and similar enterprise customer base before its acquisition.
• Recorded Future: Recorded Future is the most direct CTI peer to Intel 471, offering a threat intelligence platform combining automated collection with human analyst insight, serving large enterprise security teams with subscription-based intelligence feeds and threat hunting content. Acquired by Mastercard in 2024, it competes head-to-head with Intel 471's Verity471 platform on intelligence breadth and enterprise CTI delivery.
• ThreatConnect: ThreatConnect delivers a threat intelligence platform (TIP) combined with SOAR and analytics, used by enterprise SOC teams to operationalize threat data. Direct overlap with Intel 471's intelligence-driven threat hunting and exposure workflows, addressing similar CISOs and threat operations use cases.
• Mandiant (Google Cloud): Mandiant, now part of Google Cloud, is a direct competitor providing cyber threat intelligence, threat hunting, and incident response services with deep adversary-tracking expertise. Comparable to Intel 471 in HUMINT-led intelligence, breach research, and Fortune 500/government customer focus, with overlapping IR investigative offerings.
• Anomali: Anomali provides a threat intelligence platform with feeds, threat sharing, and SIEM-integrated intelligence management. Direct peer to Intel 471 with overlapping enterprise CTI platform, integration partnerships (Anomali-Intel 471 integration is publicly listed), and similar security operations buyer personas.

Broad incumbents

• Palo Alto Networks Unit 42: Unit 42 is Palo Alto Networks' threat intelligence and incident response arm, providing intelligence that feeds the Cortex XDR platform and competes with Intel 471 HUNTER integrations. Comparable as a HUMINT-led intelligence provider serving enterprises, but embedded within a much larger network security vendor.
• CrowdStrike: CrowdStrike is a broad-incumbent endpoint security and XDR platform that ships native threat intelligence (CrowdStrike Intelligence) and integrates with Intel 471 HUNTER queries. Comparable as a vendor competing for CTI budget in large enterprise deals, with overlapping threat hunting and adversary intelligence themes, though CrowdStrike's intelligence is bundled into a much wider Falcon platform.
• Microsoft Defender Threat Intelligence: Microsoft delivers enterprise CTI capabilities (Defender Threat Intelligence, formerly RiskIQ) as part of its broader Defender and Sentinel ecosystem. Relevant broad incumbent competing for the same enterprise intelligence budget pool, with the strategic risk of bundling CTI into platform deals at favorable economics.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/Intel471Inc
• YouTubeyoutube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg
• Facebookfacebook.com/Intel471Inc
• LinkedInlinkedin.com/company/intel-471
• Instagraminstagram.com/intel471inc/?hl=en

Revenue estimate

Valuation estimate

Number of profiles

Profiles7 records

Subsidiaries1 record

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A2 records

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Intel 471