15-second summary

Triaging indicators of compromise (IoCs) often means reviewing the IoC list associated with a threat actor and deciding whether any of them are malicious enough to act on. That typically means manually compiling VirusTotal data with data surfaced by Feedly's Threat Context Engine to get the full picture.

You can now bring your VirusTotal license to Feedly to see VirusTotal detection data inside IoC Insights Cards. That means you can:

• Confirm if malicious in seconds with VirusTotal verdicts embedded in IoC Insights Cards.
• Judge zero-detection domains from WHOIS, certs, and hosting.
• Trace your investigation into VirusTotal in one click.

From research to validation, in one view.

Validating indicators can require context-switching back to VirusTotal

Feedly already gives you the threat context behind an indicator. But to determine whether it's actively malicious, you still have to look it up in VirusTotal separately, then manually reconcile the two. Do that across dozens of IoCs, and you've spent the afternoon moving between tools, assembling what should already be in one place.

Confirm if malicious in seconds with VirusTotal verdicts embedded in IoC Insights Cards

By bringing your VirusTotal license into Feedly, everything tied to an indicator, including malware families, threat actors, and campaigns, plus VirusTotal's verdicts and reputation scores, can live on the same IOC Insights Card.

Judge zero-detection domains from WHOIS, certs, and hosting

You'll also find WHOIS records, certificate data, network attribution, and community votes on the IoC Insights Card. Say you're checking a domain tied to ShinyHunters' latest infrastructure; it's all there, so you can go deeper without leaving the card.

Trace your investigation into VirusTotal in one click

If you want to check VirusTotal's full dataset yourself, one click opens the indicator directly in VirusTotal from the IoC Insights Card. It's also how your team can trace the enrichment back to its source, so you can stand behind the context when needed.

Set it up in minutes with the VirusTotal license you already have

Connecting VirusTotal doesn't require professional services or backend configuration. Paste your existing VirusTotal API key into your account settings, and the enrichment appears across your IoC Insights Cards from that point on.

Your VirusTotal data stays yours

The VirusTotal data you bring into Feedly belongs to you, not to the platform. It's visible only to your account, never stored by Feedly, and never shared with other users, including others in your own organization.