Anti-Malware · head-to-head
AlienVault Open Threat Exchange (OTX) vs MalShare
Open Threat Exchange is AT&T Cybersecurity's community threat-intelligence platform, now operated under the LevelBlue brand, where contributors publish "pulses" of malicious IPs, domains, hashes, and URLs that anyone can query. A live, unauthenticated GET against its IPv4 general-info endpoint returned a full 200 JSON response, and both that call and its OPTIONS preflight echoed the request's Origin in Access-Control-Allow-Origin, resolving cors to yes; an OTX-API-KEY is still needed for higher rate limits and pulse subscriptions. Signup, the API key, and the community feed itself are all free.
MalShare is a community-run, free public malware sample repository: registered users pull hash lists, per-sample metadata, and the raw binaries themselves through a single api.php endpoint, or upload their own finds back to the pool. A live GET against that endpoint with an invalid key returned a plain-text "user specified in api_key GET variable does not exist" error rather than any CORS header, reconfirming API-key auth over HTTPS and reconfirming cors as no. Standard registered keys are free and capped around 2,000 calls a day, a limit MalShare says it will raise on request.
| AlienVault Open Threat Exchange (OTX) | MalShare | |
|---|---|---|
| Authentication | API Key | API Key |
| Pricing | free | free |
| Formats | JSON | JSON, Binary |
| CORS | yes | no |
| HTTPS | Yes | Yes |
AlienVault Open Threat Exchange (OTX) supports CORS, while MalShare doesn't — pick AlienVault Open Threat Exchange (OTX) for direct browser calls.