Threat intelligence for security teams, $1.9K MRR: feeds plus APIs

A threat-intelligence service for looking up suspicious indicators and feeding security tools. Its $1.9K MRR is verified through the payment provider's API by TrustMRR (Stripe), as of September 30, 2026.

What it actually sells

isMalicious sells threat-intelligence data and security tools. Its products include blocklists, malware hashes, STIX/TAXII feeds, a REST API, and an MCP server. Users can check IPs, domains, URLs, emails, phones, and crypto wallets against indexed threat indicators.

How it charges

Some currency amounts appear on the pages we read, but none could be tied to the product's own price, so no pricing is stated here (pages read 2026-10-01).

Month by month

Monthly revenue as read from the payment provider by TrustMRR, in US dollars, as of September 30, 2026.

Month	Revenue (USD)
2025-10	$112
2025-11	$112
2025-12	$337
2026-01	$450
2026-02	$1,966
2026-03	$1,854
2026-04	$1,067
2026-05	$1,067
2026-06	$1,404
2026-07	$1,521
2026-08	$2,308
2026-09	$1,801

Where customers come from

Visible distribution includes API documentation, an API playground, an OpenCTI guide, a firewall-feed case study, and an MCP server setup guide. The site says, “Get started with basic threat intelligence. Perfect for individuals and small projects.” The founder also lists Blog, Newsletter, SEO, LinkedIn, and X / Twitter as growth channels.

What stands out

The service tracks more than 28 million threat records and aggregates 726 intelligence sources. Its results expose contributing sources and detected categories, while its integrations cover OpenCTI, SIEMs, security tools, JSON responses, SDKs, OpenAPI, and AI-assistant workflows.

From the official site

Get started with basic threat intelligence. Perfect for individuals and small projects.

Bring indicators into OpenCTI or your SIEM through STIX/TAXII. Choose the collections that match your environment.

Excerpts from the official website, fetched October 1, 2026.

Where it sits in the data

isMalicious's $1.9K MRR is higher than 82% of the 5,602 projects with payment-verified revenue in our dataset; the median across them is $150. Within the “Security” category (96 projects) it is higher than 75% (category median $254). Snapshot: 2026-09-02 to 2026-09-30. The dataset only covers founders who chose to publish their numbers, so it leans toward businesses that work; use it for scale, not as an average.

Currency

All figures are in US dollars as published. A rough yuan or euro conversion is not applied here because prices, taxes and acquisition costs differ by country.

Could you build something like this?

In my view, demand comes from security teams, SOC teams, developers, organizations, and individuals working with suspicious indicators. A buyer needs trustworthy verdicts, evidence, integrations, and repeatable access. Distribution would have to come through documentation, technical guides, search visibility, newsletters, developer communities, and direct outreach to practitioners.

In my view, the hard part is maintaining reliable intelligence, handling source quality, documenting APIs, and supporting multiple security environments. Regulation, support load, data freshness, and competition would all matter. The service shows how one threat-intelligence product can combine lookups, feeds, developer access, and agent-facing tools.

Verdict: Needs real work.

One thing to take from it

The clearest lesson is to package underlying data as several usable interfaces: direct lookups, evidence-backed verdicts, machine-readable feeds, REST access, and MCP tools. That gives different security workflows a way to consume the same threat-intelligence product.

Sources

isMalicious official website, fetched October 1, 2026
isMalicious pricing page, fetched October 1, 2026
TrustMRR: revenue verified through the payment provider's API by TrustMRR (Stripe), as of September 30, 2026

Revenue, team and start-cost figures are what the founder reported at the interview date, not current figures and not a prediction of what you will earn. Product and pricing facts come from the business's own website as checked on 30 September 2026. Method & sources · Disclosure