Free Threat Intelligence Services in the US: DugganUSA STIX Feed

By Patrick Duggan, DugganUSA LLC • April 2, 2026

DugganUSA provides free threat intelligence services to organizations across the United States. Our STIX 2.1 feed delivers 1M+ indicators of compromise from 15 upstream sources — and the free tier costs $0/month with no credit card required.

What You Get for Free

• 500 API calls/day — enough for most small and mid-size organizations
• STIX 2.1 feed access — 1M+ IOCs from URLhaus, ThreatFox, Spamhaus DROP, PhishTank, and more
• 2 search indexes — query threat intelligence data directly
• OPNsense blocklists — IP, domain, and URL blocklists for firewall integration
• SIEM integration guides — step-by-step setup for Splunk, Sentinel, CrowdStrike, Cortex XSOAR, Wiz, and OPNsense

Who Uses DugganUSA

275+ organizations in 46 countries consume DugganUSA's threat intelligence feed. US customers include enterprises, government agencies, financial institutions, healthcare organizations, and managed security service providers (MSSPs). The platform serves organizations in California, New York, Texas, Florida, Washington, and all 50 states.

How to Get Started

1. Register: Create a free account at analytics.dugganusa.com/stix/register
2. Get your API key: Claim your Bearer token from the dashboard
3. Connect your SIEM: Point your STIX/TAXII connector to https://analytics.dugganusa.com/api/v1/stix/feed
4. Start blocking threats: IOCs flow into your security stack automatically

Paid Tiers for Larger Organizations

Need more than 500 calls/day? Paid tiers start at $45/month (Starter, 1,000 calls/day) through $2,495/month (Enterprise, 50,000 calls/day with full Medusa compliance suite). All tiers include the same high-quality IOCs from DugganUSA's 3-layer cascade pipeline. Compare plans.

Why DugganUSA Over Other Free Feeds

Unlike raw OSINT feeds, DugganUSA applies multi-framework validation (CARVER, DREAD, Diamond Model, ACH) through a 3-layer cascade pipeline. This means fewer false positives, richer context, and IOCs validated through behavioral scoring — not just signature matching. The platform has made 5.37M autonomous security decisions, blocking 1.96M threats. DugganUSA detected threats 43 days before Zscaler in documented cases.