// CHOOSE YOUR CLEARANCE LEVEL
Built for security teams who need signal, not noise.
Free intelligence for everyone. Paid tiers automate the workflow steps that take your team the most time — formatted IOCs, SIEM-ready queries, and custom alerts delivered to your stack.
// FREE
For staying informed
$0/forever
No card required
- Full intel feed access
- CVE tracker with filtering
- Threat actor dossiers
- Vendor advisories
- Free daily email digest
- Dark web signal feed (redacted)
- Formatted IOC delivery
- SIEM queries (SPL, KQL, Sigma)
- Unredacted dark web intel
- STIX/TAXII feed
⚿ OPERATOR
For SOC analysts & defenders
$29/month
$290/year — save 17%
- Everything in Free
- Formatted IOC email delivery
- Splunk SPL queries per advisory
- Microsoft KQL queries
- Sigma rules (ready to deploy)
- Firewall blocklists (auto-generated)
- Unredacted dark web actor names
- Unredacted C2 infrastructure
- STIX/TAXII feed
- Slack/Teams webhooks
★ TEAM
For SOC teams & MSSPs
$99/month
$990/year — save 17%
- Everything in Operator
- STIX/TAXII feed (SIEM-ready)
- Slack channel alerts
- Microsoft Teams alerts
- API access (10K req/day)
- Custom keyword alerts
- Multi-user (up to 5 seats)
- Priority email support
- Sector-specific filtering
- Quarterly threat briefings
// FREQUENTLY ASKED QUESTIONS
How is DMZ different from other threat intel feeds?
Most feeds either dump raw IOCs (too much noise) or curate news articles (too little signal). DMZ does both — surfaces threats from underground sources before mainstream coverage, AND formats the IOCs for your SIEM. The correlated signal mechanic — linking dark web posts to researcher tweets — is something no other publication does visually.
What format do the IOC emails arrive in?
Each advisory triggers a single email containing the executive summary, full IOC list (IPs, domains, hashes), pre-formatted Splunk SPL query, Microsoft KQL query for Sentinel/Defender, ready-to-deploy Sigma rule (YAML), and a firewall blocklist file as an attachment. Copy-paste into your tools and you're done.
Can I cancel anytime?
Yes. No contracts, no commitments. Cancel from your account dashboard and you keep access until the end of your billing period. We'll never auto-charge a renewal without sending you a reminder first.
Do you offer enterprise/custom pricing?
For teams larger than 5 seats, MSSPs reselling to clients, or custom keyword/sector requirements — contact us at enterprise@dmz.example for a custom quote. Volume discounts available.
How does the dark web monitoring work without being illegal?
We aggregate from open-source intelligence (OSINT) services and threat researchers who monitor underground forums professionally. We never directly access forums or facilitate access for subscribers. All dark web content is paraphrased and contextualized — we don't republish stolen data.
Is there a free trial?
The Free tier is unlimited time — it's not a trial, it's a real product. If you want to test the paid IOC delivery, subscribe for one month ($29) and cancel before renewal if it doesn't fit. No tricks.