Ahtapot - IOC Analysis Tool

Fast and secure IOC analysis with multiple threat intelligence providers. Tab-based results, cache management, API validation.

Ahtapot - Professional IOC Threat Intelligence Tool Transform your browser into a powerful cybersecurity command center. Instantly detect and analyze Indicators of Compromise (IOCs) on any webpage using industry-leading threat intelligence services. Quick Setup Required: Configure free API keys from threat intelligence providers (one-time setup, ~15 minutes). The extension guides you through obtaining all required keys. Key Features Smart IOC Detection Automatically identifies IPv4/IPv6 addresses, domains, URLs, file hashes (MD5/SHA1/SHA256), email addresses, CVE numbers, and cryptocurrency addresses. 7 Professional Intelligence Sources VirusTotal - Malware scanning with 70+ engines OTX AlienVault - Community threat intelligence AbuseIPDB - IP reputation scoring MalwareBazaar - Malware hash database ARIN WHOIS - Network registration data (no key required) Shodan - Internet device intelligence GreyNoise - Internet noise detection Privacy-First Architecture All API keys stored locally. No data collection, tracking, or third-party servers. Direct HTTPS connections to official threat intelligence APIs only. Seamless Workflow Google Translate-style floating button on text selection Beautiful side panel with tab-based results Color-coded threat levels (Safe/Suspicious/Malicious) Context menu integration Dark mode optimized Available in English and Turkish Getting Started Install extension Click Ahtapot icon → Settings Add API keys (free tier instructions provided for each service) Select any text containing IOCs Click analyze button View comprehensive threat analysis Who It's For Security analysts, SOC teams, incident responders, threat hunters, IT administrators, cybersecurity researchers, and security-conscious developers. Why API Keys? Direct access to official threat intelligence databases ensures professional-grade analysis. Free tiers provide generous limits for personal and professional use. No middleman servers means your data stays secure. Open Source: Transparent, community-driven development. Visit our GitHub for source code and documentation. Note: This professional cybersecurity tool requires initial API key configuration to function. Setup is straightforward with provided instructions.