What Spamhaus Technology does

Spamhaus Technology Ltd, a private UK company founded in 2004 and headquartered in London, provides real-time threat intelligence data covering IP addresses, domains, URLs, files, cryptographic assets, ASNs, and botnet command-and-control infrastructure. The company's core offering is a data platform that processes 7.5 million IPs and 3 million domains daily, producing reputation, classification, and IOC feeds built on a methodology refined over more than 25 years. Product lines are organized into Email & Network protection (Email Protection, Email Compliance, DNS Protection via Response Policy Zones, and Edge Protection) and Cyber Threat Intelligence solutions (Threat Intelligence Enrichment and Threat Hunting), supported by underlying data products including Malware Intelligence, Phishing Data, Spam Data, Insights & Classification, and Historical Data covering up to 12 months of Passive DNS records.

Distribution is primarily direct to enterprise and government customers through a Customer Portal and multiple delivery mechanisms including real-time APIs and file-based feeds, complemented by a public community platform, live threat map, and free Compromised IP Statistics. Revenue is generated through annual subscription contracts for data products and protection services, augmented by professional services for technical support, delisting requests, and onboarding. The customer base spans hyperscale cloud providers (AWS, Microsoft), major telecom operators (AT&T, Comcast), and security vendors (Cisco Talos), with a stated reach of "billions of users globally" via downstream solution providers and law enforcement.

The business is anchored by the Spamhaus-abuse.ch Alliance, a mission-driven partnership that broadens intelligence source diversity, and by long-tenured methodology and brand authority that position Spamhaus as the de facto industry standard for Internet reputation data. The company operates without disclosed external funding, suggesting a self-funded, profitable posture, and continues to extend its product surface (notably a new practitioner-built hunting platform launched in June 2026) while publishing original threat research.

Name

Spamhaus Technology

Legal name

Spamhaus Technology Ltd

Website

https://spamhaustech.com

Company type

Private

Founded year

2004

Operating status

Operating

Headcount range

11–50 employees

Short description

Spamhaus Technology provides real-time IP, domain, and threat intelligence data feeds, plus email, DNS, and edge protection, to enterprise customers including AWS, Microsoft, and major telecom operators, with a stated reach of billions of end users globally.

Ownership category

akta.pro rank

Product category

Threat Intelligence Data

akta.pro primary industry

Spam, Fake Engagement & Content Abuse Prevention (HDADALAG)

akta.pro secondary industries

Email Phishing & BEC Protection (HDADAKAB), Email Authentication & Domain Protection (DMARC/SPF/DKIM) (HDADAKAC)

Keywords

• Threat intelligence data
• Email protection services
• DNS security solutions
• Botnet detection platform
• IP reputation database

Headquarters

HQ city

London

HQ country

United Kingdom

HQ region

Europe

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Operations, Marketing or Sales

Revenue model

1. Threat Intelligence Data Subscriptions: Provide cyber threat intelligence data products in various formats and delivery mechanisms to enterprise customers, government agencies, and security solution providers. Data covers IPs, domains, URLs, files, crypto, ASNs and botnet C2 IPs.
2. Email and Network Protection Services: Gold standard reputation data and protection services applied across customer tech stacks for email protection, DNS protection, and edge protection.
3. Professional Services and Support: Technical support and professional services including delisting requests, partner onboarding, and renewal quotes.

Pricing tiers

Go-to-market motion3 records

Distribution channels2 records

Marketing channels6 records

Core offering

Spamhaus Technology provides commercial real-time threat intelligence data covering IPs, domains, URLs, files, crypto, ASNs, and botnet command-and-control infrastructure. It delivers this data as subscription-based Email and Network Protection services (spam/phishing blocking, DNS RPZ, edge protection) and as Cyber Threat Intelligence solutions (enrichment, threat hunting), sold to enterprises, governments, and security solution providers.

Product overview

Spamhaus Technology provides a unified threat intelligence platform offering real-time IP, domain, and threat intelligence data. The product portfolio consists of Email & Network protection solutions (Email Protection, Email Compliance, DNS Protection, Edge Protection) and Cyber Threat Intelligence solutions (Threat Intelligence Enrichment, Threat Hunting), supported by underlying data products (Malware Intelligence, Phishing Data, Spam Data, Insights & Classification, Historical Data). The platform delivers actionable intelligence data across IPs, domains, URLs, files, crypto, ASNs and more, provided in real-time through multiple delivery mechanisms.

Differentiator

Problem solved

Functional benefit

Brands

• Spamhaus-abuse.ch Alliance: A partnership between Spamhaus and abuse.ch platforms delivering objective, real-time IP, domain, and threat intelligence.

Products and services

• Email Protection Reputation-data-based service that blocks more than 99% of spam and email-related threats, including phishing, Business Email Compromise (BEC), and emails containing malware. Designed for email service providers, network operators, and enterprises handling inbound mail.
• Email Compliance Data and expert insights that help organizations maintain a clean, compliant email-sending environment, minimize risk, and protect users from email-borne threats. Aimed at organizations managing outbound email compliance.
• DNS Protection DNS-layer protection using Response Policy Zones (RPZ) to automatically block malicious activity and safeguard networks and users against a variety of online threats. Used by network operators and enterprise security teams.
• Edge Protection Network edge protection that blocks potentially harmful connections from and to known malicious IPs, including cybercrime hosters, hijacked networks, and botnet C2s. Targets large organizations protecting infrastructure at the network perimeter.
• Threat Intelligence Enrichment Malware-signal intelligence used to increase detection rates and enrich alerting context, helping security teams uncover and address attack behavior faster. Built for SOC teams, SIEM users, and threat intel analysts.
• Threat Hunting Malware-focused intrusion data designed to improve detection fidelity, drive hunting hypotheses, surface trends and correlations, and prioritize investigation paths. Aimed at threat hunters and incident responders.
• Malware Intelligence Dataset Dataset of millions of data points spanning the attack chain — initial email-related access tactics through tracked malware IOCs such as URLs, files, and botnet communication endpoints. Sold as raw data for ingestion by security platforms and researchers.
• Phishing Data Phishing-focused data feed built on one of the largest databases of SMTP connections, linking hundreds of thousands of Internet resources to phishing attacks. Provided as a raw data source for tailored security integrations.
• Spam Data Reputation data covering millions of Internet resources associated with spam, derived from a methodology refined over 25 years. Designed to deliver accurate spam detections with fewer false positives.
• Insights & Classification Classified datasets of millions of domains, IPs, malware URLs, and other IOCs, giving security teams an objective basis for analysis and decision-making.
• Historical Data Historical dataset spanning up to 12 months, including individual IP records and expansive Passive DNS data, used for infrastructure mapping, retrospective hunting, and trend/pattern analysis.

Quantifiable outcome

• Block more than 99% of spam and email-related threats
• +2 more outcomes

Named customers5 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature6 records

Partnerships

One partnership is on record.

• abuse.chcoreStrategic or Co-development PartnerThe Spamhaus-abuse.ch Alliance is a mission-driven partnership delivering objective, real-time IP, domain, and threat intelligence. Built on a commitment to making the internet safer, the alliance provides data that is uniquely diverse and uncompromised by commercial bias. The partnership serves billions of users globally including law enforcement, analysts, defenders, and solution providers.

Scale indicators5 records

Recent moves5 records

Expansion highlights5 records

Broad incumbents

• CrowdStrike: CrowdStrike's Falcon Intelligence offering provides adversary, malware and IOC intelligence, integrated into its endpoint platform. Comparable as a threat intelligence vendor targeting large enterprise buyers.
• Proofpoint: Proofpoint is a major enterprise email security, anti-phishing and threat intelligence vendor. It overlaps directly with Spamhaus's email protection and phishing data products at the platform level, serving the same enterprise customer base.
• Mimecast: Mimecast provides email security, archiving and anti-phishing offerings to mid-market and enterprise customers. It is comparable as a buyer of threat intel feeds and a direct functional alternative to Spamhaus-powered email protection.
• PhishLabs / Fortra: PhishLabs (now under Fortra) provides email threat intelligence, brand abuse monitoring, and phishing takedown services. It competes in the same phishing-data and email-protection adjacency that Spamhaus addresses.

Direct peers

• Mandiant (Google Cloud): Mandiant provides threat intelligence, incident response and adversary tracking, now part of Google Cloud. Its intelligence subscriptions and IOC feeds target the same enterprise and government buyer as Spamhaus, with comparable emphasis on attribution-quality data.
• Recorded Future: Recorded Future is a leading commercial threat intelligence platform offering real-time data on malicious infrastructure, threats and actors. Like Spamhaus, it monetizes curated, continuously updated intelligence datasets — most comparable as a data-first threat intelligence subscription vendor.
• Cisco Talos Intelligence: Talos is Cisco's threat intelligence unit, producing IP, domain, file and malware reputation data and sharing it across the security ecosystem. As a listed Spamhaus partner and similarly positioned data-driven intel provider, it's a direct functional comparable.

Emerging players

• VirusTotal (Google): VirusTotal aggregates file/URL malware intelligence through community and partner feeds, now owned by Google. It parallels Spamhaus's malware intelligence and IOC data products with overlapping enterprise use cases.
• GreyNoise Intelligence: GreyNoise specializes in internet-wide scanning and benign-vs-malicious traffic intelligence, offering API-based feeds to SOC teams. It is comparable to Spamhaus as a data-only threat intelligence vendor targeting enterprise security buyers.

Others

• abuse.ch: abuse.ch is Spamhaus's strategic partner in the Spamhaus-abuse.ch Alliance, operating not-for-profit threat intel platforms (URLhaus, MalwareBazaar, ThreatFox). Relevant as a partner and adjacent intelligence source rather than a competitor.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/spamteq
• YouTubeyoutube.com/@spamhaustechnology
• LinkedInlinkedin.com/company/spamhaus-technology-ltd

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Spamhaus Technology