ANTI-PHISHING VOLUNTEERS & ASSOCIATES LTD

What ANTI-PHISHING VOLUNTEERS & ASSOCIATES LTD does

APVA (Anti-Phishing Volunteers & Associates), founded in 2012 and registered as a private limited nonprofit in the United Kingdom with headquarters at 27 Old Gloucester Street, London, operates a community-driven phishing detection and threat intelligence platform. Its core technology is a phishing and malware detection engine that ingests millions of URLs from a global partner network, identifies active phishing sites, and extracts metadata including targeted brands, network and geographic locations, phishing kits, and drop accounts in use. The organization self-reports identifying 80,808+ new phishing attacks daily.

The product surface comprises four offerings: a public-facing Phishing URL Reporting Service (web form intake), an API-distributed Phishing and Malware Threat Intelligence Feed, a Content Categorization Database with seventy-plus URL categories and a false-positive feedback mechanism, and supplementary educational resources covering phishing attack types (identity theft, email/SMS/social phishing) and protection guidance. Distribution is API-first and channel-based: APVA lists twenty-plus enterprise security vendor partners receiving its feeds, including McAfee, Kaspersky, Bitdefender, Sophos, ESET, Trend Micro, Fortinet (FortiGuard), Forcepoint, BrightCloud, Cyren, Avira, Dr.Web, PhishLabs, PhishFort, and Quad9.

Revenue is generated through negotiated API access fees under multi-year contracts with security vendors, DNS providers, and antivirus companies; no public pricing tiers exist and intake is via a "Request a Quote" form. Operations are volunteer-driven with no disclosed funding rounds, no disclosed management team, and no external equity ownership. APVA's stated mission is to identify, investigate, and remove phishing content from the internet and to coordinate takedowns alongside security vendors and law enforcement.

Name

ANTI-PHISHING VOLUNTEERS & ASSOCIATES LTD

Legal name

Anti-Phishing Volunteers & Associates Ltd.

Website

https://antiphish.org

Company type

Private

Founded year

2012

Operating status

Operating

Short description

APVA is a London-based nonprofit operating a community-driven phishing detection platform that processes millions of URLs daily, classifies them into seventy-plus categories, and distributes threat intelligence via API to twenty-plus security and DNS vendor partners.

Ownership category

akta.pro rank

Product category

Threat Intelligence Services

akta.pro primary industry

Intrusion Prevention/Detection Systems (IPS/IDS) (HDADABAH)

akta.pro secondary industry

Intrusion Detection & Prevention Systems (IDS/IPS) (HDAFAFAD)

Keywords

• Threat intelligence feeds
• Phishing detection services
• URL categorization database
• Malware identification services
• Cybersecurity education resources

Headquarters

HQ city

London

HQ country

United Kingdom

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Operations, Marketing or Sales

Revenue model

1. API Data Sharing: APVA shares phishing and malware data with security vendors, DNS providers, and antivirus companies via API. Revenue appears to come from API access fees for organizations seeking threat intelligence data.
2. API Access for Partners: Organization provides API access to partners who need phishing/malware URL feeds. Contact form suggests quote-based pricing for API access.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels4 records

Core offering

APVA identifies, investigates, and removes phishing URLs from the internet using a proprietary phishing and malware detection engine that processes millions of URLs contributed by a global volunteer and partner network. It packages the resulting threat intelligence into an API-accessible feed delivered to security vendors, DNS providers, and antivirus companies, and operates a public web-based URL reporting portal that lets any user submit suspicious sites for classification and takedown coordination.

Product overview

APVA operates as a nonprofit organization offering a unified threat intelligence platform centered on phishing URL identification, reporting, and takedown services. The core offerings consist of a Phishing URL Reporting Service (web form for submitting suspicious sites), a Phishing and Malware Threat Intelligence Feed (API-accessible database of millions of phishing URLs with metadata), and a Content Categorization Database (70+ category website classification system with false positive reporting). Educational resources covering phishing types and protection guidance support the core intelligence services. Data is shared with security vendors via API.

Differentiator

Problem solved

Functional benefit

Products and services

• Phishing URL Reporting Service A web-based service allowing users to report suspicious URLs — including phishing, malware, spam, illegal content, cryptocurrency/NFT scams, and brand impersonation sites — for classification by APVA's detection engine and coordinated takedown.
• Phishing and Malware Threat Intelligence Feed (API) A global threat intelligence database providing millions of URLs sourced from APVA's partner network, identifying active phishing URLs and extracting metadata including targeted brands, network and geographic locations, and phishing kits and drop accounts in use. Delivered to security vendors, DNS providers, and antivirus companies via API.
• Content Categorization Database A website content categorization database classifying URLs into 70+ categories including phishing, malware, adult content, gambling, hate speech, spam, illegal content, cryptocurrency/NFT scams, and brand impersonation. Includes a public false-positive feedback channel for users to suggest recategorization.
• Phishing Education and Awareness Resources Free educational content covering types of phishing attacks (identity theft, email phishing, SMS phishing, social phishing), historical context, and protection guidance for individuals and organizations.

Quantifiable outcome

• 80,808+ new phishing attacks detected daily

Named customers3 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

21 partnerships are on record, tiered core.

• bfore.aicoreTechnology or IntegrationSecurity vendor partner that receives APVA's phishing and malware URL feeds for incorporation into their threat intelligence products.
• alphaMountain.aicoreTechnology or IntegrationSecurity vendor partner that receives APVA's phishing and malware URL feeds for incorporation into their threat intelligence products.
• abusixcoreTechnology or IntegrationSecurity vendor partner that receives APVA's phishing and malware URL feeds for incorporation into their threat intelligence products.
• McAfeecoreTechnology or IntegrationMajor antivirus company partner that receives APVA's phishing and malware URL feeds for incorporation into their security products.
• CRDFcoreTechnology or IntegrationSecurity vendor partner that receives APVA's phishing and malware URL feeds for incorporation into their threat intelligence products.
• ForcepointcoreTechnology or IntegrationSecurity vendor partner that receives APVA's phishing and malware URL feeds for incorporation into their security products.
• Fortinet (FortiGuard)coreTechnology or IntegrationMajor security vendor partner that receives APVA's phishing and malware URL feeds for incorporation into their FortiGuard threat intelligence services.
• PhishFortcoreTechnology or IntegrationSecurity vendor partner specializing in anti-phishing solutions that receives APVA's threat intelligence feeds.
• BrightCloudcoreTechnology or IntegrationSecurity vendor partner that receives APVA's phishing and malware URL feeds for incorporation into their threat intelligence products.
• ESETcoreTechnology or IntegrationMajor antivirus company partner that receives APVA's phishing and malware URL feeds for incorporation into their security products.
• Dr.WebcoreTechnology or IntegrationSecurity vendor partner that receives APVA's phishing and malware URL feeds for incorporation into their security products.
• KasperskycoreTechnology or IntegrationMajor antivirus company partner that receives APVA's phishing and malware URL feeds for incorporation into their security products.
• PhishLabscoreTechnology or IntegrationSecurity vendor partner specializing in anti-phishing solutions that receives APVA's threat intelligence feeds.
• CyrencoreTechnology or IntegrationSecurity vendor partner that receives APVA's phishing and malware URL feeds for incorporation into their threat intelligence products.
• AviracoreTechnology or IntegrationSecurity vendor partner that receives APVA's phishing and malware URL feeds for incorporation into their security products.
• SophoscoreTechnology or IntegrationMajor security vendor partner that receives APVA's phishing and malware URL feeds for incorporation into their security products.
• BitdefendercoreTechnology or IntegrationMajor antivirus company partner that receives APVA's phishing and malware URL feeds for incorporation into their security products.
• chongluadaocoreTechnology or IntegrationSecurity vendor partner that receives APVA's phishing and malware URL feeds for incorporation into their threat intelligence products.
• Trend MicrocoreTechnology or IntegrationMajor security vendor partner that receives APVA's phishing and malware URL feeds for incorporation into their security products.
• Quad9coreTechnology or IntegrationDNS security service partner that receives APVA's threat intelligence for DNS blocking and filtering to protect users from malicious websites.
• prebytescoreTechnology or IntegrationSecurity vendor partner that receives APVA's phishing and malware URL feeds for incorporation into their threat intelligence products.

Scale indicators3 records

Recent moves4 records

Expansion highlights4 records

Direct peers

• PhishLabs: PhishLabs is a direct peer offering phishing threat intelligence, email threat detection, and takedown services to enterprises. Like APVA, it collects phishing URLs and coordinates remediation with security vendors and registrars.
• PhishFort: PhishFort is a direct peer that specializes in anti-phishing detection, brand impersonation monitoring, and takedown services. It receives threat intelligence from sources like APVA and offers comparable URL classification and removal capabilities.
• Bolster: Bolster is a direct peer providing automated phishing and scam detection, brand protection, and takedown services. It competes with APVA in identifying malicious URLs and offering threat intelligence feeds to enterprises.
• Cyren: Cyren is a direct peer offering URL categorization, phishing detection, and threat intelligence feeds. It is listed as an APVA partner and competes in the same threat intelligence data-feed market.
• Cofense: Cofense is a direct peer in phishing threat intelligence and defense, with a similar community-fed intelligence model. It provides phishing URL feeds and detection services to enterprises and security vendors, comparable to APVA's core offering.
• Spamhaus: Spamhaus is a direct peer operating community-driven threat intelligence feeds focused on spam, phishing, and malware-related URLs. Like APVA, it is nonprofit-community oriented and supplies data feeds to security vendors, ISPs, and DNS providers.
• URLhaus (abuse.ch): URLhaus is a direct peer operating as a community-driven, nonprofit project sharing malware and phishing URL feeds with security vendors. It mirrors APVA's mission, volunteer-driven model, and threat intelligence distribution approach.

Broad incumbents

• Proofpoint: Proofpoint is a broad incumbent in enterprise security with comprehensive email security, phishing protection, and threat intelligence offerings. It competes with APVA by integrating phishing URL data into its broader enterprise security platform.
• BrightCloud (by Webroot/OpenText): BrightCloud is a broad incumbent offering URL categorization and threat intelligence feeds used by security vendors. It is also a partner of APVA, illustrating the layered relationship between feed providers and integrators.

Emerging players

• SlashNext: SlashNext is an emerging player specializing in phishing and social engineering threat detection across email, mobile, and web channels. It overlaps with APVA's phishing intelligence mission but focuses on real-time AI-based detection rather than community-reported URLs.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about ANTI-PHISHING VOLUNTEERS & ASSOCIATES LTD