Sold by: eSentire
Deployed on AWS
eSentire Threat Intelligence offers high-fidelity Indicators of Compromise (IOCs), rigorously vetted by eSentire experts. Use our cyber threat intelligence feed across your existing security tool stack to reduce false positive alerts and enhance your threat detection and response capabilities.
4.6
Overview
Mediocre threat intelligence has become common in cybersecurity, causing many security leaders to collect multiple threat intelligence feeds that have redundant, outdated data. Inaccurate threat intelligence sources can lead to false positives that waste valuable resources.
The eSentire Threat Intelligence feed offers a curated list of high-fidelity Indicators of Compromise (IOCs), meticulously vetted and approved by our Elite Threat Hunters and Threat Response Unit (TRU), so you can confidently integrate the actionable intelligence into your existing security tool stack.
Integrate our threat intelligence feed with your existing tools (e.g., firewalls, email servers, EDR) using the STIX™ format for a cost-effective approach to operationalize threat intelligence and enhance detection capabilities.
With coverage of 71 industries and a 99% true positive rate, leveraging our high-quality threat intelligence feed allows you to focus your threat detection and response on the critical threats that matter, not false positives.
The result? Your team can cut the noise, minimize false positive alerts, and improve the automated blocking capabilities of known cyber threats.
Highlights
- Get access to IOCs with 95% true positive rate that have been verified by our Elite Threat Hunters and Threat Response Unit (TRU).
- Our threat feed is refreshed every 24 hours and every IOC in the feed has been observed in positive investigations across customer environments, significantly reducing the number of false positives.
- Cover a broad spectrum of potential threats and malicious activities with multiple IOCs (i.e., IP addresses, domain names, file hashes) so your team can improve your detection accuracy and gain full context into the threat.
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
eSentire Threat Intelligence Feed | API access for organizations up to 250 users | $20,650.00 |
Dimensions summary
This listing offers one pricing dimension billed under a contract. You buy access in units, where each unit provides API access to the eSentire Threat Intelligence Feed for an organization of up to 250 users. Pricing scales by the number of units you commit to, so larger organizations add units to cover more users. The feed delivers vetted indicators of compromise that you integrate with your existing security tools. Because there is a single dimension, you do not choose between tiers or instance sizes — you select the quantity of units that matches your user count.
Top-of-mind questions for buyers
One unit provides API access to the feed for an organization of up to 250 users. The user count reflects the size of the organization consuming the feed. If your organization exceeds 250 users, you add more units to cover the additional headcount.
You receive a continuous stream of vetted indicators of compromise, such as malicious IP addresses, malware hashes, and domains. These are reviewed by eSentire's Threat Response Unit based on positive Security Operations Center investigations. You integrate this feed with your existing security tools.
Because each unit covers up to 250 users, growth beyond that count means adding units. You purchase the quantity of units that matches your user total. There are no tiers or instance sizes to choose — cost scales only with the number of units committed.
www.esentire.com
Helpful?
Vendor refund policy
All orders and fees are non-cancellable and non-refundable once placed except as required by law.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
eSentire MDR for Endpoint offers you the flexibility and choice of leveraging technology platforms from our best in class ecosystem of endpoint partners. We also go beyond other MDR providers by developing custom detection engineering based on our threat intelligence and proprietary Machine Learning (ML) applications that hunt and respond to endpoint threats.
eSentire MDR for Log provides critical visibility, data correlation, deep investigation and enhanced threat detection enabling complete response across your multi-cloud or hybrid environments.
See and understand cloud changes at scale without requiring manual interventions by your team every time a new cloud service or technology is adopted. Our Cloud Workload Protection Platform (CWPP) offering runs natively in the cloud and provides continuous build to run-time threat detection, behavioral anomaly detection, and compliance across multi-cloud environments, workloads, accounts, containers, and Kubernetes.
eSentire MDR for Network on AWS provides deep packet inspection and real-time traffic interruption capabilities at virtual firewalls in AWS cloud when malicious activities are detected, reducing the mean time to detect, and respond (MTTR).
Customer reviews
Luciana S.
24/7 Proactive MDR with Strong Integration and Centralized Visibility
Reviewed on May 12, 2026
Review provided by G2
What do you like best about the product?
eSentire operates 24/7 with the aim of managed detection and response, ensuring that it applies proactive security measures
The process of incident response and containment is well underway and this helps firms in eliminating security risks immediately
The integration support from eSentire is well enhanced across cloud, endpoint, network and even SIEM tools
The app conducts paramount security analysis, and this includes offering expertise help and guidance about security occurrences
eSentire issues highly centralized visibility, and this involves possible investigations, security events and others
The process of incident response and containment is well underway and this helps firms in eliminating security risks immediately
The integration support from eSentire is well enhanced across cloud, endpoint, network and even SIEM tools
The app conducts paramount security analysis, and this includes offering expertise help and guidance about security occurrences
eSentire issues highly centralized visibility, and this involves possible investigations, security events and others
What do you dislike about the product?
Organizations with limited security budgets finds eSentire extensively expensive
The alerts offered by eSentire are noisy and some users need to tune them out for clarity
The alerts offered by eSentire are noisy and some users need to tune them out for clarity
What problems is the product solving and how is that benefiting you?
eSentire issues a comprehensive monitoring system for companies and this happens 24/7, through the internal cybersecurity teams
The app speedily detects and responds to suspicious malware, logins and threats, more so from unusual networks
eSentire helps in reducing alert fatigue, where it helps in filtering large security volumes and this ensures actionable security remediation
The program is impactful in facilitating organizations to manage and improve compliance, creating some preparedness on different security issues
The entire security monitoring is well centralized, and this includes endpoints, network environments and even identity management
The app speedily detects and responds to suspicious malware, logins and threats, more so from unusual networks
eSentire helps in reducing alert fatigue, where it helps in filtering large security volumes and this ensures actionable security remediation
The program is impactful in facilitating organizations to manage and improve compliance, creating some preparedness on different security issues
The entire security monitoring is well centralized, and this includes endpoints, network environments and even identity management
Rinalon E.
Comprehensive 24/7 Monitoring with Fast Threat Containment and Precise Analysis
Reviewed on May 05, 2026
Review provided by G2
What do you like best about the product?
eSentire gives a comprehensive 24/7 monitoring system and this helps the team to identify threats all day
The containment of threats is so quickly and this helps in stopping any attack before damage is done
eSentire issues comprehensive security analysis with high precision.
The app connects identify, endpoints, logs and even cloud to a centralized view
eSentire establishes comprehensive internal cybersecurity controls and this makes the user more resilient
The containment of threats is so quickly and this helps in stopping any attack before damage is done
eSentire issues comprehensive security analysis with high precision.
The app connects identify, endpoints, logs and even cloud to a centralized view
eSentire establishes comprehensive internal cybersecurity controls and this makes the user more resilient
What do you dislike about the product?
The pricing for eSentire is high, limiting the usage or adoption rate by small companies
The communication offered by eSentire is not too clear, more so on reporting
The communication offered by eSentire is not too clear, more so on reporting
What problems is the product solving and how is that benefiting you?
eSentire ensures there is a professional and brilliant cybersecurity guide and this handles every security breach or risk
The detection of cyberattacks is continuous and immediate ad this saves on response time
The app gives instant security alerts and brilliant investigation to help the security team in prioritizing the best security measures to deploy
The app combines all security management tools including network, endpoints and even identity, and this gives quality services
The response that eSentire app offrs on threats is very immediate and calculated
The detection of cyberattacks is continuous and immediate ad this saves on response time
The app gives instant security alerts and brilliant investigation to help the security team in prioritizing the best security measures to deploy
The app combines all security management tools including network, endpoints and even identity, and this gives quality services
The response that eSentire app offrs on threats is very immediate and calculated
Quintin H.
Quick Response That Helps Remediate Cyber Attacks
Reviewed on Mar 24, 2026
Review provided by G2
What do you like best about the product?
Quick responses to remediate cyber attacks
What do you dislike about the product?
The interface could be more interactive.
What problems is the product solving and how is that benefiting you?
Helping block IP addresses from bad people
Luis G.
Comprehensive Security Featuring Atlas Portal
Reviewed on Mar 18, 2026
Review provided by G2
What do you like best about the product?
I like the new Atlas portal and the way eSOC is available for support. The Atlas puts everything in one place and helps us get a good overview of what's going on.
What do you dislike about the product?
Sometimes the support after an alert has been made isn't great. We're told they can identify outside public IPs causing the alerts, even though we have a sensor installed on site. Set up is also done for our firewall. It leads to more work for us when eSentire can't locate the public IP trying to do reconnaissance scanning. Additionally, setup could have been clearer with someone to help, as the documentation wasn't entirely clear or was missing some points.
What problems is the product solving and how is that benefiting you?
I use eSentire to monitor Microsoft Defender alerts for critical issues like endpoint infections, and the Atlas portal provides a centralized overview.
Chad R.
Security Alerts Made Effortless with eSentire
Reviewed on Mar 10, 2026
Review provided by G2
What do you like best about the product?
I use eSentire for security checks and reviews in our company's IT infrastructure and devices. It alerts us to issues with devices being compromised, which is incredibly helpful. I like that I can easily check alerts and drill down to see which devices should be looked at. The drill-down feature is valuable because it allows us to quickly act on threats and clear out issues on devices to help safeguard our company. Additionally, the initial setup was very easy, mostly handled by our account managers.
What do you dislike about the product?
I did have an issue with my SSO but was able to get another account made and tied to my company's account.
What problems is the product solving and how is that benefiting you?
I use eSentire for security checks and IT infrastructure review. It alerts us to device compromises, allowing us to quickly act on threats and safeguard our company.