SecurityZones

What SecurityZones does

SecurityZones is a London-headquartered commercial reseller and authorized distribution partner for leading independent cyber threat intelligence providers, founded in December 2010. The company serves as the longest-serving authorized partner for Spamhaus, SURBL BV, Koli-Loks, and Rspamd, providing commercial access to real-time IP and domain reputation data feeds used to block phishing, ransomware, malware, spam, and botnet traffic. Customers span ISPs, security vendors, enterprises, governments, and universities across North America, Europe, Latin America, and Asia, with named logos including LinkedIn, Yahoo, AOL, AT&T, Telenor, Virgin Media, ESET, Volkswagen, Aflac, Afilias, Columbia University, State of Michigan, Locaweb, and UOL. The company operates additional offices in the United States and is privately held with no disclosed external funding.

The core technology is a portfolio of commercial data feeds and APIs rather than internally developed threat research. Offerings include Spamhaus IP Blocklists (ZEN), Domain Blocklist (DBL), Zero Reputation Domains (ZRD), HASH Blocklist, Passive DNS, DNS Firewall (RPZ), and the Spamhaus Intelligence API; SURBL MULTI, FRESH, HASHBL, and DNS RPZ; Rspamd Premium commercial support and data; and Koli-Loks raw spam feeds and Spamtrap Intelligence Service. Data is refreshed every 1–2 minutes with a reported 0.02% false positive rate, and is delivered via API, rsync, BGP, or DNS zone transfer. Detection efficacy is anchored in the underlying providers' 20+ years of human-curated research rather than in proprietary AI/ML models.

SecurityZones operates a B2B subscription model with quote-based annual commercial licensing, supported by a freemium 30-day trial and direct enterprise sales with technical consultation. Distribution is primarily direct plus authorized reseller channel, with the company explicitly positioned as the longest-standing commercial route to Spamhaus and SURBL data globally. Revenue streams include threat intelligence data feed subscriptions, Rspamd Premium commercial support, Koli-Loks spam feeds, and DNS RPZ / DNS firewall services — all subscription recurring in nature. No revenue figure, funding history, or institutional ownership is disclosed in the available data.

Name

SecurityZones

Legal name

SecurityZones

Website

https://securityzones.net

Company type

Private

Founded year

2010

Operating status

Operating

Headcount range

11–50 employees

Short description

London-based commercial reseller and authorized distribution partner for Spamhaus, SURBL BV, Koli-Loks, and Rspamd threat intelligence data feeds. Serves ISPs, security vendors, enterprises, governments, and universities globally with real-time IP/domain reputation, DNS firewall, and anti-spam data.

Ownership category

akta.pro rank

Product category

Cybersecurity Threat Intelligence Feeds

akta.pro primary industry

Vulnerability Intelligence & Exploit Prediction (HDADAHAI)

akta.pro secondary industries

DNS Security & Protective DNS (HDADABAF), Email Authentication & Domain Protection (DMARC/SPF/DKIM) (HDADAKAC)

Keywords

• Threat intelligence feeds
• IP reputation data
• Domain blocklists
• DNS firewall services
• Anti-spam filtering

Headquarters

HQ city

London

HQ country

United Kingdom

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Threat Intelligence Data Feed Subscriptions: Commercial subscriptions for access to Spamhaus, SURBL, and other threat intelligence data feeds including IP blocklists, domain blocklists, Passive DNS, DNS RPZ, and advanced threat feeds. Data feeds are delivered via API, rsync, BGP, or DNS zone transfer with real-time updates every 1-2 minutes.
2. Rspamd Premium Commercial Support: Commercial support and premium data packages for Rspamd open-source spam filtering platform, including project-based support, priority support, and access to premium fuzzy hash data
3. Koli-Loks Spam Feeds: Raw spam feeds and Spamtrap Intelligence Service for threat researchers and anti-spam product companies
4. DNS RPZ/DNS Firewall Services: Subscription-based DNS Response Policy Zone feeds providing real-time threat intelligence at DNS resolver level

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels6 records

Core offering

SecurityZones is a commercial distribution partner that provides real-time cyber threat intelligence data feeds to organizations worldwide. It monetizes Spamhaus IP and domain blocklists, SURBL BV domain reputation feeds, Koli-Loks spam trap intelligence, and Rspamd Premium commercial support through subscription-based licensing. Customers receive continuously updated IP, domain, and hash reputation data (refreshed every 1-2 minutes) via API, rsync, BGP, or DNS zone transfer for use in email filtering, DNS firewalling, and network protection.

Product overview

SecurityZones is a realtime cyber threat intelligence provider offering a comprehensive portfolio of threat data feeds and security solutions. The core offering centers on distributing and supporting Spamhaus data products (IP Blocklists, Domain Blocklist, Zero Reputation Domains, HASH Blocklist, Advanced Threat Feeds, Passive DNS, and DNS Firewall via RPZ) and SURBL BV domain threat intelligence (MULTI, FRESH, HASHBL, and DNS RPZ). Additional offerings include Rspamd Premium commercial support and data, Koli-Loks spam feeds and Spamtrap Intelligence Service, and BGP Firewall. The company operates as an authority reseller and commercial partner for Spamhaus (the #1-rated anti-spam blocklist) and SURBL BV, providing access to realtime threat intelligence with global coverage, data updated every 1-2 minutes, to protect email and networks against cyber threats including phishing, ransomware, malware, and botnets.

Differentiator

Problem solved

Functional benefit

Products and services

• Spamhaus IP Blocklists IP reputation and intelligence data feed to combat abuse and spam, providing ZEN IP-based blocklists (SBL, XBL, CSS, PBL) as the most widely used anti-spam blocklist in the world. Delivered to ISPs, enterprises, and security vendors for subscriber protection and email filtering.
• Spamhaus Domain Blocklist (DBL) Comprehensive list of malicious domains associated with malware, ransomware, phishing, and other malicious activities. Used by email providers and security vendors to block connections to known-bad domains.
• Spamhaus Zero Reputation Domains (ZRD) Blocklist of newly registered domains based on Spamhaus temporal data, automatically identifying newly-registered domains as potential threats until they can establish domain reputation. Prevents abuse from fresh domains at the source.
• Spamhaus HASH Blocklist (HASHBL)

Quantifiable outcome

• Block up to 95% of unsolicited and malicious messages when SURBL is used with an effective IP blocklist
• +8 more outcomes

Named customers14 records

Segments7 records

Ideal customer profiles6 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

Feature12 records

Partnerships

Six partnerships are on record, tiered secondary, core and strategic.

• OpSec SecuritysecondaryStrategic or Co-development Partner · 15 December 2020OpSec Security partnered with SURBL to strengthen its AntiFraud and AntiPhishing Solution. SURBL's intelligence includes URI reputation data and real-time domain registration data, helping OpSec accelerate takedown of malicious domains. OpSec shares high-quality intelligence back with SURBL to improve data coverage.
• SpamhauscoreTechnology or IntegrationSecurityZones is the longest-serving authorized commercial partner and distributor of Spamhaus Technologies. Spamhaus is a 23+ year old cyber research organization providing IP and domain reputation data protecting over 3 billion users globally. SecurityZones provides commercial access to Spamhaus IP blocklists, Domain Blocklists, Passive DNS, DNS Firewall, Advanced Threat Feeds, and Intelligence API.
• SURBL BVcoreTechnology or IntegrationSecurityZones provides commercial access to SURBL BV threat intelligence including SURBL MULTI, FRESH, and HASHBL data feeds. SURBL BV is an independent cyber research organization with over 20 years of experience protecting over 2 billion mailboxes worldwide with approximately 800,000 current active bad domains.
• RspamdcoreStrategic or Co-development PartnerSecurityZones partners with the author of Rspamd to offer premium commercial data and support for the open-source spam filtering platform. This includes Rspamd Premium Fuzzy Hash Data, URL Blocklist, Email Blocklist, project-based support, and priority support for critical issues.
• Koli-LokssecondaryTechnology or IntegrationSecurityZones provides access to Koli-Loks spam feeds and Spamtrap Intelligence Service. Koli-Loks is a trusted cybersecurity research organization with over 25 years of experience tracking abuse in email and other messaging platforms.
• ICANNstrategicTechnology or IntegrationSURBL BV serves as a key input to ICANN Domain Metrica, providing domain abuse data for the global platform tracking domain registration, usage, and behavior. ICANN selected SURBL as a primary source to identify abusive domains including phishing and malware after extensive evaluation.

Scale indicators10 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Mimecast: Email and collaboration security provider that integrates and competes with threat intelligence feeds for email filtering. Comparable customer base (enterprises, ESPs) and overlapping spam/phishing detection use cases.
• Proofpoint: Major email security vendor that consumes threat intelligence feeds and offers competing IP/domain reputation data. Overlaps with SecurityZones in email anti-spam and phishing intelligence, but as a larger platform player.
• Recorded Future (now Mastercard): Large-scale threat intelligence platform serving enterprise and government customers. Comparable in providing threat data feeds, but at much broader scope (geopolitical, dark web, identity) and significantly larger scale.
• BrightCloud (by Akamai / Webroot): Threat intelligence data feed provider for IP, domain, and URL reputation, now part of Akamai's security portfolio. Directly comparable data feed model with similar OEM/security vendor integration channel.
• Cisco Talos Intelligence: Cisco's threat intelligence division providing IP, domain, and file reputation data. Competes with SecurityZones' IP/domain blocklists but bundles into Cisco's broader security portfolio (IronPort, Umbrella).

Emerging players

• ZeroFox: External threat intelligence and digital risk protection platform with comparable phishing, domain abuse, and brand protection intelligence. Overlaps in the domain reputation and threat data feed space, with a focus on social/digital channels.
• PhishLabs (by Fortra): Specializes in email phishing threat intelligence and takedown services. Direct overlap with SecurityZones' phishing domain data feeds, though PhishLabs leans more into managed service and takedown rather than pure data.

Direct peers

• Spamhaus Technology: The original data originator that SecurityZones resells. Directly comparable IP/domain reputation data feeds, but operates upstream as a non-profit research org with its own commercial arm. Closest comparable in product, though not in business model.
• DomainTools: Provides domain reputation, WHOIS, and DNS intelligence feeds for security and fraud use cases. Highly comparable to SecurityZones' domain reputation and Passive DNS offerings, with similar customer profiles in security and fraud teams.
• SURBL BV: Independent cyber research organization whose domain reputation data (MULTI, FRESH, HASHBL) is distributed by SecurityZones. Direct data originator with overlapping threat intelligence offerings for email and DNS security.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/securityzones
• Xx.com/seczones

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about SecurityZones