What Maltiverse does

Maltiverse is a Madrid-based threat intelligence platform founded in 2017 that aggregates data from more than 100 public, private, and community threat intelligence feeds and applies a proprietary real-time scoring algorithm to classify indicators of compromise (IoCs) into human-readable threat categories. Its core product surface includes the Maltiverse Query Language (MQL) for building custom feeds, automated IoC extraction from raw text in threat reports and logs, a private IoC vault, blacklist timelines for triage, and MITRE ATT&CK behavioral tagging. The platform exposes these capabilities through 180+ pre-built integrations with SIEM, SOAR, EDR, firewall, and MISP systems, positioning itself as an agnostic threat intelligence layer rather than a replacement for existing security infrastructure.

The company operates a hybrid go-to-market combining a freemium self-serve tier at maltiverse.com with enterprise quote-based pricing delivered through Lumu Technologies' direct sales team, reseller network, and MSP/MSSP channel. Target segments span large enterprises plus regulated verticals—financial services, healthcare, K-12 and education, and state and local government—as well as managed security providers delivering multi-tenant threat intelligence to their own client bases. In March 2025, Maltiverse was acquired by Lumu Technologies and is now integrated as the threat intelligence engine inside the Lumu SecOps platform alongside Lumu Defender (NDR), Lumu Autopilot (autonomous incident response), Lumu Discover (attack surface assessment), and Lumu Archive (log storage), creating an end-to-end network protection stack rather than a standalone intel feed.

Name

Maltiverse

Legal name

Lumu Technologies

Website

https://whatis.maltiverse.com

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

1–10 employees

Short description

Maltiverse is a Madrid-based threat intelligence platform that aggregates 100+ feeds and applies proprietary real-time scoring to classify IoCs, serving enterprises, government, financial services, healthcare, education, and MSP/MSSPs via 180+ integrations; it was acquired by Lumu Technologies in March 2025.

Ownership category

akta.pro rank

Product category

Threat Intelligence

NAICS

Software Publishers (5132)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Identity Threat Detection & Response (ITDR) (HDAEAJAH)

akta.pro secondary industry

OT Threat Detection & Monitoring (NDR/IDS for ICS) (HDADAJAF)

Keywords

• Threat intelligence platform
• IoC analysis
• Cyber threat feeds
• Threat data aggregation
• Security operations tooling

Headquarters

HQ city

Madrid

HQ country

Spain

HQ region

Europe

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales

Revenue model

1. Threat Intelligence as a Service Subscription: Subscription-based threat intelligence service that provides high-fidelity threat intelligence feeds. Customers can subscribe to pre-built feeds from over 100 sources or customize feeds according to their specific needs. The platform delivers real-time threat intelligence to customers' existing security infrastructure.

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels6 records

Core offering

Maltiverse operates as a Threat Intelligence-as-a-Service platform that aggregates data from more than 100 public, private, and community threat intelligence sources and applies a proprietary real-time scoring algorithm across hundreds of conditions to deliver accurate, human-readable classifications of Indicators of Compromise (IoCs). The platform enables customers to build custom threat feeds using a proprietary query language (MQL), automate IoC extraction from raw threat-report text, and deliver the resulting intelligence through 180+ pre-built integrations with SIEM, SOAR, firewall, EDR, and MISP security tools. Private IoCs can be uploaded and analyzed without external exposure, and the service is offered both as a self-serve freemium signup and as an enterprise subscription sold through Lumu's direct and channel motions.

Product overview

Maltiverse is a threat intelligence platform acquired by Lumu Technologies. It operates as part of Lumu's broader SecOps Platform ecosystem, which includes core products (Maltiverse, Lumu Defender) and add-on modules (Autopilot, Archive, Discover). Maltiverse provides the underlying threat intelligence engine (100+ sources, real-time classification, MQL-based queries) that feeds into Lumu Defender for network detection and Lumu Autopilot for automated incident response. The platform offers threat analysis, incident triage, threat feeds, threat hunting, private IoC management, and IoC dissemination capabilities.

Differentiator

Problem solved

Functional benefit

Brands

• Maltiverse Platform: Threat intelligence platform providing quality Threat Intelligence for decisive defense, including threat analysis, incident triage, threat feeds, threat hunting, private IoCs, and IoC dissemination.

Products and services

• Maltiverse Threat Intelligence Platform A SaaS Threat Intelligence-as-a-Service platform that aggregates data from more than 100 public, private, and community threat intelligence sources and applies a proprietary real-time scoring algorithm across hundreds of conditions to deliver accurate, human-readable classifications of Indicators of Compromise (IoCs), with delivery through 180+ pre-built integrations into SIEM, SOAR, firewall, EDR, and MISP security tools.

Quantifiable outcome

• Cuts incident triage time by 40-50%
• +2 more outcomes

Segments6 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

AI capability6 records

Feature7 records

Partnerships

Five partnerships are on record, tiered core.

• Firewall VendorscoreTechnology or IntegrationMaltiverse integrates agnostically with firewall solutions, delivering threat intelligence feeds to enhance firewall threat detection and blocking capabilities.
• SIEM PlatformscoreTechnology or IntegrationIntegrates with SIEM platforms to deliver high-fidelity threat intelligence directly into security information and event management workflows.
• EDR VendorscoreTechnology or IntegrationMaltiverse delivers threat intelligence to EDR (Endpoint Detection and Response) solutions to enhance endpoint security with contextual threat data.
• MISP (Malware Information Sharing Platform)coreTechnology or IntegrationIntegrates with MISP threat intelligence platform for interoperability with open-source threat sharing community.
• SOAR PlatformscoreTechnology or IntegrationDelivers threat intelligence to SOAR (Security Orchestration, Automation and Response) platforms for automated security response workflows.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Anomali: Threat intelligence platform offering aggregation from public/commercial feeds, threat detection, and SIEM/SOAR integrations — directly comparable to Maltiverse's feed-aggregation and IoC-dissemination capabilities.
• LookingGlass Cyber: Threat intelligence and attack surface management vendor aggregating feeds and providing scored indicator intelligence to enterprises and MSSPs — overlaps directly with Maltiverse's aggregation + scoring thesis.
• ThreatConnect: Threat intelligence platform (TIP) combined with SOAR and analytics, used by enterprises and MSSPs. Overlaps with Maltiverse on multi-source aggregation and threat scoring/intelligence orchestration.
• Group-IB: Threat intelligence and fraud-prevention vendor combining proprietary feeds, IoC reputation, and attribution analytics — directly competitive with Maltiverse's intel-as-a-service offering, especially in financial services.
• Recorded Future: Largest commercial threat intelligence platform, acquired by Mastercard. Closest direct competitor to Maltiverse's threat-aggregation and indicator-classification proposition, serving enterprise SOCs with multi-source intel feeds.
• VirusTotal: Google-owned multi-engine malware/indicator lookup service aggregating 70+ engines. Comparable to Maltiverse on the indicator-classification and multi-source verdicting layer.
• Flashpoint: Threat intelligence provider combining underground-forum monitoring, vulnerability intel, and IOC feeds. Comparable to Maltiverse's multi-source aggregation model, particularly for SOC and fraud teams.

Broad incumbents

• CrowdStrike: Endpoint and XDR leader that bundles CrowdStrike Intelligence into its Falcon platform. Comparable as a threat-intelligence source that Maltiverse consumes but also competes with at the platform layer.
• Mandiant (Google Cloud): Google-owned threat intelligence and incident response giant. Overlaps on intel feeds, indicator scoring, and MITRE ATT&CK-style context for enterprise customers.

Emerging players

• MISP (Open Source): Open-source Malware Information Sharing Platform that Maltiverse integrates with. Operates as a community-driven TIP that smaller organizations use instead of commercial platforms like Maltiverse.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xtwitter.com/lumutech
• YouTubeyoutube.com/c/lumutechnologies
• Facebookfacebook.com/lumutech
• LinkedInlinkedin.com/company/maltiverse
• Instagraminstagram.com/lumutech

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds1 record

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Maltiverse