Google Threat Intelligence
By Google Cloud
Google's consolidated threat intelligence product, combining Mandiant's frontline incident-response research, VirusTotal's malware corpus, and Google's own visibility from protecting billions of users. Replaced the separately branded Mandiant Threat Intelligence product, though the Mandiant name lives on for consulting and IR services.
Verified Source: 1
- Product type
- Software
- Deployment
- SaaS
- Organization size
- Mid-marketEnterprise
- Pricing tier
- $$$
Capability checklist
TIHow Google Threat Intelligence measures up against the full Threat Intelligence taxonomy.
- Curated IOC feeds — supported
- Provides vetted lists of malicious IPs, domains, and file hashes.
- Adversary & TTP profiles — supported
- Documents known attacker groups and the techniques they typically use.
- Dark web & brand monitoring — not supported
- Watches for leaked credentials, data, or brand impersonation outside the organization.
- SIEM/SOAR enrichment integration — supported
- Automatically feeds intelligence context into alerts and playbooks.
- Vulnerability & exploit intelligence — supported
- Tracks which vulnerabilities are being actively exploited in the wild.
- Analyst research portal — supported
- Gives analysts a searchable portal to investigate threats manually.
Alternatives
Other Threat Intelligence tools with overlapping capabilities, sized for similar teams.