Detection feeds

Detection rules you don’t have to write.

Aggregated from sources whose every licence is vetted for resale, extended with our own rules forged by detonation, validated on the engine you actually run, signed and updated every week.

12 packs, one per technology

from €349 / month
7,000+
Sigma
19,500+
YARA
86,000+
Nuclei
3,589,000+
IOC
SigmaYARANIDSNucleiFalcoosqueryVelociraptorOPAWAFSASTLLMIOC

Every pack shows the share we forge ourselves, up to 57%. The rest is aggregated, deduplicated, and licence-vetted so you can deploy it for your own clients.

NIS2ReCyFDORAMITRE ATT&CKSTIX 2.1
The engine · AGPL v3

We wrote the engine that runs them

ThreatClaw is an open-source detection agent, written in Rust, self-hosted. It is where every rule is compiled and put through a zero-false-positive gate before it ships in a pack. Free and unlimited.

RustAGPL v3self-hostedhuman-in-the-loopWASM sandbox

Questions? Demo request? We reply within 48 hours.

CISO, IT director, MSSP, integrator, direct exchange with the ThreatClaw team. No chatbot, no aggressive funnel.