IP Defense

A Threat Intelligence Platform that Delivers

Updating network devices with the latest threat data is tedious, time-consuming, and ultimately not effective. So most “Threat Intelligence” is used for forensics to detect breaches that have already happened.

ThreatSTOP is cloud-based automated threat intelligence platform that converts the latest threat data into enforcement policies, and automatically updates your firewalls, routers, DNS servers and endpoints to stop attacks before they become breaches.



Every Network Device Needs Real-Time Threat Enforcement

The pace of today's threats makes it impossible to keep all of your network firewalls, routers and switches updated with manual methods. ThreatSTOP IP Defense enables your existing firewalls and routers to block the latest inbound and outbound communications to cyber-criminals.

ThreatSTOP IP Defense is deployable within an hour without the expense, complexity and delay of hardware upgrades, network reconfigurations, retraining or manual updates. The cloud-based service is easy to manage and works immediately on the devices you already own.

Automate and Augment your Network Threat Defense

  • Automatically delivers the latest actionable threat intelligence to network firewalls, routers and switches based upon user-defined policies.
  • Proactively blocks or redirects inbound malware, DDoS and other attacks, regardless of the attack type or vulnerability. Renders your network invisible to scanners, so attackers move on.
  • Prevents data theft and corruption by stopping malware from “phoning home” to threat actors. Prevents activation of ransomware such as Cryptowall and Cryptolocker.

How It Works

ThreatSTOP's IP Defense provides a list of active bad IP addresses to your existing firewalls that is updated in near real time via a patented distribution mechanism. When a Bot or other malware attempts to "call home," ThreatSTOP IP Firewall prevents this from happening by blocking the communication to the criminals' computers.

  • ThreatSTOP's detection engine maintains an active database of untrustworthy
    IP addresses. The database is updated every 15 minutes and automatically downloaded onto your firewalls, routers and switches.
  • If malware makes an attempt to "call home”, the bad IP addresses are blocked by your firewall preventing communication. Since there is no possibility of communication, the criminals in the outside world are unable to see the network.
  • The firewall sends its logs back to ThreatSTOP resulting in intelligent actionable reports showing infected internal hosts for easy remediation. A closed-loop system, each user becomes part of a defense community by sharing the collected data.
  • The platform is vendor-agnostic and is out-of-the-box compatible and integrated with nearly all major network vendors.

IP Defense Datasheet


IP Defense Check IOCIP Defense ReportingIP Defense Policy Creation


Want to Learn More?

Request a free, 30-minute online walk-through of the ThreatSTOP Platform.

Request a Free Demo

Already in Prevention Mode?

Sign-up for a free, 14-day trial of the ThreatSTOP Platform.

Start a Free Trial

Prefer a Free Assessment?

Use any of our free assessment tools to better
understand your need for proactive defense.

Get a Real-time Assessment