Enterprise Scalable threat intelligence
Threat intelligence with OIDC SSO, STIX/TAXII, MMDB downloads, native SIEM connectors, and 1,000,000 API calls a month.
No credit card required · Free API key
SSO
OIDC
1M
API calls / month
Named
Support
Custom
Deployment
Key features.
Available signals and integration options.
OIDC Single Sign-On
Enterprise SSO with Okta, Entra ID, and any OIDC provider. Enforce SSO per email domain.
STIX/TAXII Feeds
Machine-readable threat intelligence via TAXII 2.1 for TIPs and automated enrichment.
MMDB Geo Intelligence
Download MaxMind-compatible MMDB builds for offline geo enrichment in your stack.
SIEM Connectors
Native Splunk HEC, Elastic bulk, and Microsoft Sentinel delivery with managed sync jobs.
Dedicated Deployment on Request
The shared European platform by default, a dedicated deployment on request, and availability terms agreed per contract.
API Scale
1,000,000 API calls a month and 5,000 a minute — built for global SOCs and high-volume automation.
Use cases.
Workflows to evaluate with your existing tools.
Global SOC
Support multiple SOCs worldwide.
High-Volume Security
Up to 1,000,000 lookups a month, more by contract.
Compliance
Meet strict regulatory requirements.
Integration
Custom integrations with your stack.
Why Enterprise Organizations Choose isMalicious
Enterprise security teams face unique challenges: massive scale, complex integrations and strict compliance requirements. Generic threat intelligence solutions often fall short when deployed at enterprise scale. Our enterprise platform is built from the ground up for large organizations. A dedicated deployment is available on request when your lookups must not share capacity with other customers. 1,000,000 API calls a month let you integrate threat intelligence everywhere - from firewalls to custom applications.
Negotiated Limits and Dedicated Deployment on Request
Enterprise customers receive: - **Negotiated Limits**: Rate limits and quotas agreed per contract rather than fixed by plan - **Cached Lookups Under 100ms**: Warm-cache reads measured at 76-97ms; cold lookups depend on the upstreams they fan out to - **Availability Terms by Contract**: We publish no standard uptime SLA and no service credits, because we do not yet measure uptime independently — see our Trust and Status pages - **Single-Tenant Options**: Dedicated deployment is available on request; the shared platform runs on one European host today - **SSO and Audit Logging**: OIDC sign-in with a full audit trail of API activity
Enterprise Security and Compliance
Large organizations have strict security and compliance requirements that we're built to meet: - **OIDC SSO Integration**: Integrate with Okta, Azure AD, OneLogin, and other identity providers - **SOC 2 In Progress**: Type I audit underway with an AICPA-accredited firm, Type II planned for Q1 2027 — we are not certified today - **European Hosting**: The shared platform runs on a European host; ask us for the current sub-processor list before relying on a specific residency guarantee - **Audit Logging**: Complete API access logs for compliance and forensics - **Role-Based Access Control**: Granular permissions for different teams and use cases - **BAA Available**: Business Associate Agreements for HIPAA-covered entities
Custom Integration and Deployment Options
Every enterprise has unique requirements. Our team works with you to design the right solution: - **On-Premise Deployment, on Request**: Run our platform in your own data center, scoped and priced by contract - **Private Cloud, on Request**: Deploy to your AWS, Azure, or GCP account under the same kind of contract - **Custom Integrations**: Purpose-built connectors for your specific tools and workflows - **Named Contact**: Business-hours support, with response terms agreed per contract - **Training and Onboarding**: Custom training sessions for your security teams Contact our sales team to discuss your specific requirements and design a custom solution.
Frequently asked questions.
What makes Enterprise different?
Do you offer on-premise deployment?
What integrations are included?
What is the SLA?
Related articles.
Learn more from our security research blog.
Ready to get started?
Test the available signals in your workflow. Review the sources and limits before integrating.
No credit card required · Free API key