Pricing
Community access is free forever and covers the case most people need: block today's phishing. Paid tiers buy history, STIX/MISP, and dedicated TAXII — and they fund the infrastructure the free tier runs on.
Supporter
Support the project. Full history and STIX for security teams.
Try Free for 14 DaysSponsor
Annual plan for SOCs and MSSPs requiring TAXII and real-time feeds.
Become a Sponsor| Full Comparison | Community | Supporter | Sponsor |
|---|---|---|---|
| Feed Coverage | |||
| Last 24h IOC feed | |||
| Last 30 days | |||
| Full historical archive | |||
| Real-time stream | |||
| Formats | |||
| JSON / CSV / TXT | |||
| STIX 2.1 | |||
| MISP | |||
| DNSBL | |||
| DNSBL RPZ zone (DNS) | |||
| Dedicated RPZ zone | |||
| Feeds | |||
| All public named feeds | |||
| Specialized feeds (JA3, C2, etc.) | |||
| TAXII 2.1 endpoint | |||
| API Access | |||
| Feed downloads / day | 100 | 1,000 | 10,000 |
Basic blocklist queries over DNS work on every tier with no account and no key. If all you need is “should my MTA reject this”, you never have to sign up.
dig +short <domain>.dnsbl.vspam.orgNot better verdicts, not faster review, not influence over a listing. Every tier sees the same corpus at the same accuracy. You are buying reach and format, never a different truth.
Threat data is free for non-commercial use; commercial use requires a license. The platform core is AGPL-3.0.