Avast Threat Intelligence

Get real-time visibility of any global security threats to your organization with Avast Threat Intelligence.

Speak to an expert

Dealing with constantly evolving security threats is a real challenge for enterprises today. Get real-time protection and the security oversight you need to prevent and manage cyber threats at scale, and all in one place, with Avast’s Threat Intelligence solution — built on the largest, most advanced threat detection network in the world.

435M+

users

Data is drawn from Avast's 435M+ users globally.

300B+

urls

Over 300B URLs are checked, and over 200M files are scanned for threats each month.

1.5B

attacks

Avast blocks 1.5B attacks every month.

Why you need Avast Threat Intelligence

Largest threat detection network in the world

With six times more PC users than the nearest competitor, Avast’s access to immense amounts of security data means we have the largest, most advanced global threat detection network.

State-of-the-art threat detection infrastructure

We combine expansive data with advanced, multi-layered threat detection and prevention architecture to identify threats and inform the entire network in seconds.

Award-winning team specializing in AI/ML

Avast Threat Intelligence uses patented technology built by our award-winning research team, using next-gen technologies to provide you with unrivaled reliability and insight.

Access Avast's robust threat data feeds and APIs

Data feeds

Phishing Feed

Receive a list of phishing URLs you can block or use to alert users or devices directed to those sites.

Blocklist Feed

See IPs or URLs that should be blocked or alerted upon. These IPs or URLs represent C&C, data exfil gateways, technical support scams, web skimming, scams, exploit kits and malvertising IoCs.

CVE Prevalence Feed

Gain a summary of CVE exploits observed from malware collected by Avast.

On-demand APIs

File Reputation API

See the file reputation of a submitted hash.

URL Information API

Find out the categorization of URLs, including whether the URL is malicious, phishing, or not.

Build powerful security on Avast's advanced threat intelligence

Mitigate targeted attacks

Develop proactive security and prevent attacks before they occur. Avast’s threat intelligence data is verified to reduce false positives and ensure high-accuracy data you can count on.

Accelerate incident response

Detect and respond to threats faster with Avast’s contextual, actionable threat data — indicating malware, phishing scams, fraud and more on specific files, IPs, domains and URLs — all in real-time.

Make informed decisions

Use Avast’s flexible integration options to gain maximum value from your threat intelligence. Enhance your organization’s security strategy with full visibility of the risks associated with cyber threats.

Customize your threat intelligence solution based on your needs

Managed Security Service Providers

Improve threat hunting and vulnerability prioritization for faster resolution times by empowering Security Operations Center (SOC) teams with real-time, actionable threat data.

Threat Intelligence platforms

Diversify your data sources to better equip customers with the highest-quality, most accurate, granular data possible — so they can always make informed decisions about threats.

Government agencies

Predict, prevent, and quickly respond to cyber threats including nation-state hacking and espionage, to protect highly sensitive information and critical infrastructures.

Security software

Offer users greater protection online by integrating Avast’s comprehensive threat intelligence to strengthen your existing security infrastructure.

Let’s continue the conversation

Get in touch to learn more about how Avast's advanced Threat Intelligence can enhance your organization's security.

Threat intelligence FAQs

Threat intelligence is evidence-based knowledge about an existing or emerging menace or hazard to assets. This intelligence is used to inform the organization’s response to the threat.

Organizations face the difficult challenge of responding to ever-evolving cyber attacks in order to keep their assets safe. Threat intelligence empowers security analysts with the contextual information needed for improved threat hunting and prioritization—minimizing response times. Threat intelligence also provides enterprises with the insight needed to make more informed strategic decisions, developing a proactive security posture that prevents attacks.

There are two main ways to consume threat intelligence; via data feed or API. A threat feed delivers the required threat information to a threat intelligence database on a regular, defined basis. An Application Programming Interface (API) leverages the threat intelligence hosted in a secure cloud environment by making queries on-demand.

Threat intelligence is leveraged by enterprises across all sectors; including financial services, e-commerce, industrial, telecommunications, government, and more. Managed Security Service Providers (MSSPs), security software providers and security hardware manufacturers often leverage threat intelligence to enhance their core services.

Threat intelligence use cases are growing increasingly diverse, with applications beyond traditional security operations to fraud and risk management, marketing and human resources. They include phishing detection, vulnerability prioritization, threat intelligence analyst augmentation, and more.

Visit our Support Center for more FAQs.