SECURITY

Team Cymru launches Total Insights Feed to replace legacy threat intelligence lists

Real-time threat intelligence company Team Cymru Inc. today announced the launch of Total Insights Feed, a unified threat intelligence platform that is designed to replace legacy indicator list-based feeds with machine-actionable, scored intelligence across the full surface of the internet.

The new platform evaluates more than 57 million IP addresses and classless inter-domain routing blocks daily using weighted risk scores on a 0-to-100 scale with decay modeling. That allows security operations centers to automate block policies without analyst review.

The new platform also assesses more than 400 million domains daily, with 3.5 million tagged as malicious, covering phishing infrastructure, algorithmically generated domains and malicious hosting.

Each indicator used by the platform is enriched with more than 2,000 contextual tags spanning malware families, command-and-control frameworks, botnet membership, MITRE ATT&CK mapping, kill-chain stage and actor attribution where available. The intelligence is delivered as a single JSON stream that is compatible with security information and event management, security orchestration automation and response, extended detection and response and threat intelligence platforms.

Team Cymru says that the platform addresses a structural breakdown in how traditional feeds operate. The problem in 2026 is that modern adversaries rotate infrastructure within hours, operate across tens of millions of IPs and run phishing campaigns across hundreds of millions of domains, something that legacy reputation feeds are not able to handle.

“The era of the indicator list is over,” explained Josh Picolet, team leader of the S2 Threat Research Team at Team Cymru. “Coverage without context is noise and context without coverage creates blind spots. Total Insights Feed delivers both across the full surface of the internet in a single integration that security teams can act on at machine speed.”

The platform draws on Team Cymru’s network visibility across more than 700 internet service providers and operators globally. It’s offered in three tiers: a risk-scoring tier for IP and domain reputation, a tags and analysis tier for deeper contextual intelligence, and a complete tier that unifies all capabilities into a single stream.

Existing customers using Team Cymru’s Controller Feed, Reputation Feed and BARS architectures are supported within Total Insights Feed, with current intelligence preserved and expanded. The company said migration is available through account representatives and that Total Insights Feed is available from today.

Image: Team Cymru