ThreatBook

ThreatBook (Weibu) is China’s leading threat-intelligence company, combining AI-driven detection with one of the industry’s broadest vulnerability and adversary knowledge bases.

Overview

ThreatBook built its reputation on threat intelligence: vulnerability analysis, adversary tracking, and malware research covering both domestic and international campaigns. Its One platform extends that intelligence into detection and response, correlating telemetry against known indicators and behavioral patterns, with AI assisting triage and investigation narrative construction. The company’s vulnerability database is a standard reference for Chinese security teams, and its API feeds intelligence directly into SIEM, SOAR, and firewall products. Cloud workload protection and endpoint detection extend coverage into modern infrastructure, while managed detection services support lean teams. The combination of original research and operational tooling makes ThreatBook a common backbone for security operations that need to know what is actually attacking them. Its research team’s continuous publication of campaign analysis ensures the intelligence driving detections reflects active threats, not stale indicator lists that age out within days of an incident. Its cloud and endpoint modules extend intelligence-driven protection into modern infrastructure, covering workloads and identities alongside the traditional network perimeter most tools still concentrate on.

Key Features

• Original vulnerability and adversary intelligence for domestic and global threats
• AI-assisted alert triage and investigation narratives
• Intelligence APIs for SIEM, SOAR, and firewall integration
• Endpoint detection and cloud workload protection
• Managed detection services for lean security teams
• Behavioral detection patterns that survive adversary infrastructure rotation

Pricing

ThreatBook offers free intelligence access for individuals with usage limits. Enterprise licensing covers platform modules, API volume, and managed services, priced through direct engagement and partner channels.

Who Is It For

Chinese security operations teams that want current adversary intelligence driving their detections, and enterprises seeking detection, response, and research depth from one domestic provider. It particularly fits organizations that have experienced alert fatigue and want fewer, better-informed investigations backed by original research.