Asia-Pacific threat intelligence paired with agentic detection, response, and DNS protection

ThreatBook has been collecting and curating threat intelligence since 2015, with a research focus on the Asia-Pacific region that most Western feeds cover thinly. The company says its sensors and analysis pipeline surface tens of millions of malicious IP addresses daily and that its researchers track more than 200 APT groups and over a thousand cybercrime groups. That intelligence is delivered through ThreatBook ATI, a feed and investigation platform used to enrich indicators, attribute activity, and give analysts context on an address, domain, or file before they act on it. Offices are listed in Singapore, Hong Kong, Abu Dhabi, Riyadh, and Beijing.

The rest of the portfolio applies that intelligence at different control points. ThreatBook TDP is a network detection and response sensor that inspects traffic against the same indicator and behavior models. OneDNS applies filtering at the resolver, blocking command-and-control and phishing domains before a connection is established. A digital risk protection service monitors external exposure and leaked assets. More recently the company has moved toward agentic operations with Flocks, an open-source SOC agent framework carrying integrations across common security tools, and SafeSkill, which vets AI agent skills before they are allowed to run.