Webroot® Threat Intelligence for Cybersecurity

Integrated by leading security vendors worldwide, Webroot BrightCloud® Threat Intelligence Services help you give customers proactive protection against modern threats.

The value of cyber threat intelligence

Webroot BrightCloud® Threat Intelligence Services protect your customers from malicious URLs, IPs, files, and mobile apps by integrating accurate and near real-time threat intelligence into your network and endpoint protection. The platform scans billions of IP addresses and billions of URLs across millions of domains, in addition to millions of mobile apps, and leverages machine learning to classify and categorize each according to the threat it represents to your business.

Because today’s cyber threat landscape shifts so rapidly, and much of the malware we see today will be gone tomorrow, cloud-based solutions making instantaneous updates must replace static and list-based antivirus solutions. 

What can threat intelligence do for your business? 

Protect your customers’ networks and end users from malicious and unwanted URLs, IPs, files, and mobile apps by integrating accurate and timely threat intelligence into your solutions.

Keep end users safe and productive

The Webroot BrightCloud® Web Classification and Reputation Services provide categorization and independent reputation scores on over 43 billion URLs, so you can empower your customers’ administrators to block malicious and unwanted web content.

Block malicious inbound traffic

The Webroot BrightCloud® IP Reputation Service monitors and dynamically scores addresses across the entire IPv4 and in-use IPv6 space, and is able to detect, analyze and classify 60,000 new malicious IP addresses daily. This enables your solution to block such traffic and provide customizable settings based on needs and risk tolerance.

Stop phishing in its tracks

The Webroot BrightCloud® Real-Time Anti-Phishing Service lets your solution catch advanced phishing attacks that can expose your customers’ users to breaches and data loss, providing time-of-need protection through real-time scans.

Stay ahead of the latest malware`

Webroot BrightCloud® Streaming Malware Detection is designed to combat polymorphic malware by flagging files at lightning speed as they traverse your network perimeter device, so it can allow, block, or re-route files for further investigation.

Distinguish good and bad files

The Webroot BrightCloud® File Reputation Service provides a cloud-based database of billions of known good and bad file behavior records so your solution can work more efficiently by letting good files pass through while blocking the bad.

Keep end users safe on the go

The lightweight and efficient Webroot BrightCloud® Mobile Security SDK can be integrated into your solution to provide antivirus, antimalware, device and application interrogation, secure web browsing, and device risk scores to keep mobile users safe.

Explore BrightCloud Services

The most dangerous threats span multiple threat vectors. That’s why Webroot continually maps connections between URLs, IPs, files, and apps to provide greater accuracy and predictive risk scores.

and Datasheets

BrightCloud Threat Intelligence Services are powered by the most advanced machine learning in the industry. Discover Webroot machine learning, research, and analysis in intelligence-driven security.

Threat Investigator

The BrightCloud Threat Investigator visually showcases the contextual relationships between URLs, IPs, files, and apps, as well as object information, including threat status, history, geolocation, and more.

Partner with Webroot

Why partner with Webroot

Together with our partners, we’ve built the market’s most proven security platform. 


With a closed loop process, our partner deployments enhance our threat visibility and help us deliver rapid, accurate threat intelligence where it matters most: to your customers. Webroot offers flexible commercial and deployment models, in addition to world-class support, to ensure our partners’ success.

Partners explain how to choose a threat intelligence vendor


“We evaluated a few different vendors and found that Webroot had the best services in place and the best data quality.”

Madhu Reddy
Principal Product Manager
F5 Networks 

“…Webroot had a unique architecture to deliver URL classification at speeds that I needed…”

Manuel Nedbal

“In terms of choosing a vendor, I would advise folks to look at what kind of infrastructure they have to provide regular and reliable updates back to the customers.”

Madhu Reddy
Principal Product Manager
F5 Networks

Take the next step

Discover how BrightCloud threat intelligence services can help you better protect your customers.