Reference#

• Subscription Tiers & Features - The free/basic/teams/enterprise ladder and exactly what each tier unlocks (the customer-facing feature matrix)
• BinTrust - Known-Good Hash Lookup - How the BinTrust intel:lookup endpoint works, what the NSRL corpus is, and how it loads (automatically) on deploy
• RevokeRadar - Certificate Revocation Feed - Continuous CRL-based detection of revoked code-signing certificates, on the dashboard and via intel:revocations
• PkgGuard - Package & Supply-Chain Integrity - Verified published-artifact hashes for npm / PyPI / Go / Homebrew / Docker / VS Code / Debian / Ubuntu packages, on the dashboard’s Packages tab
• SigDiff - Authenticode Signer Chain - The signing identity (signer / issuer / thumbprint) recorded for every tracked Windows binary
• FuzzPrint - Similarity & Import Fingerprints - ssdeep / TLSH / imphash fingerprints on every binary, computed in-stream, for near-match and import-cluster detection
• DriftTrack - Per-Product Change Timeline - The version / hash / signer history of each product over time, built from valid_from + SigDiff
• VulnRadar - CVE & Advisory Linkage - Known-CVE and advisory metadata linked to each tracked product version (metadata only)
• Living-off-the-Land Verification - Verifying GTFOBins/LOLBAS-catalogued binaries: the dashboard’s LOTL indicator for tools with standalone releases, and the BinTrust lookup for OS-shipped binaries
• Transparency Log - Signed daily Merkle roots over the public feed, with inclusion proofs anyone can verify

See also: API Reference for endpoint documentation and authentication, and Integrations for the CLI and pull feeds.