AlienVault Open Threat Exchange (OTX) vs Scanii

Open Threat Exchange is AT&T Cybersecurity's community threat-intelligence platform, now operated under the LevelBlue brand, where contributors publish "pulses" of malicious IPs, domains, hashes, and URLs that anyone can query. A live, unauthenticated GET against its IPv4 general-info endpoint returned a full 200 JSON response, and both that call and its OPTIONS preflight echoed the request's Origin in Access-Control-Allow-Origin, resolving cors to yes; an OTX-API-KEY is still needed for higher rate limits and pulse subscriptions. Signup, the API key, and the community feed itself are all free.

Scanii is a REST API that scans uploaded files, images, and text for malware, unsafe imagery, and inappropriate language across more than 100 image formats and 20+ languages, returning findings, checksums, and content metadata as JSON. A live GET and OPTIONS preflight against api.scanii.com/v2.2/files both returned Access-Control-Allow-Origin: *, and the GET's 401 carried a WWW-Authenticate: Basic realm="Scanii API" header, correcting the stored auth from API Key to Basic Auth (the API key is used as the Basic-auth username, its secret as the password) over HTTPS. New accounts start with free trial credits before moving to metered Starter/Plus/Enterprise plans billed per file scanned.