BrightCloud® Threat Intelligence Overview for Embedded Security Partners

BrightCloud Threat Intelligence Services unify access to the Webroot® Threat Intelligence Platform through SDKs and API calls for integration by security and other vendors.
Learn more about each service below.

Enterprises looking to use the BrightCloud Web Services API should
visit the BrightCloud Web Services for Enterprises page.

BrightCloud Threat Intelligence Services

Web Classification and Web Reputation

BrightCloud Web Classification provides content classification for billions of web pages, classified across 82 categories, to keep end users compliant with policies and improve network performance by blocking unwanted content.

BrightCloud Web Reputation forecasts the security risk of visiting a website, enabling our embedded security partners to protect their customers from malicious sites, regardless of classification, through finely tuned security settings based on unique business needs.

BrightCloud supports API calls to return content classification and reputation information on one or more URLs, as well as extended reputation information, WHOIS information, category name and ID listing, phishing score, and many other attributes.

Learn More

IP Reputation

This service analyzes IP threats and publishes a dynamic data set of millions of high-risk IP addresses, to protect users from inbound traffic from malicious IPs.

BrightCloud supports API calls to return threat information, geographical information, or threat information on one or more IPs.

Learn More

Real-Time Anti-Phishing

Purpose-built to catch advanced phishing attacks that can expose an organization to breaches and data loss, this service provides time-of-need protection through real-time scans faster than the time it takes for a page to download.

Learn More

Streaming Malware Detection

Streaming Malware Detection provides a pre-compiled SDK for integration to make extremely fast and reliable good, bad, or unknown determinations on files as they stream through network edge or other devices.

Learn More

File Reputation

A continuously updated real-time lookup service of known malicious and white-listed file identifiers helps security teams allow good traffic and stop the distribution of malware threats through networks.

BrightCloud supports API calls to return reputation information for a file given its binary MD5.

Learn More

Mobile Security SDK

This UI-less SDK can be embedded into mobile solutions to address device vulnerabilities through enhanced security features such as antivirus, antimalware, device and app interrogation, and an overall device risk score.

Learn More

Mobile App Reputation

This service collects detailed application data, then categorizes and assigns a score to help ensure mobile applications are safe and compliant, and that connected devices don't pose unnecessary risk.

We support API calls to return reputation information for an application. The method will attempt to obtain sample-specific reputation first, and if no sample is found, it will attempt to compute aggregate reputation for the package.

Learn More

Brightcloud APIs

Supplementary Intelligence


Contextual Database APIs

This database exposes the connection between URLs, IP addresses, files, and mobile applications via API calls to complement the core BrightCloud Threat Intelligence services.


Threat Insight APIs

These supplementary API calls are offered as an addition to the core BrightCloud Threat Intelligence services to provide additional indicators of compromize on URLs and IP addresses.

Get Started

Reach out to a Webroot representative about BrightCloud Threat Intelligence Services for Embedded Security Partners.