CyberIndexBeta

ThreatBook Agent

Beijing ThreatBook TechnologyEnterprise Antimalware (primary)Compare with others in Enterprise Antimalware

Product

ThreatBook Agent is an enterprise antimalware product from Beijing ThreatBook Technology. Supported platforms are macOS and Windows. It is aimed at Enterprise buyers.

Current Version
2.9.2.1600
Product Page
Not known
Market
Enterprise
Licence
Paid
Price
Paid · price unknown
Record Created
2026-09-23
Last Updated
2026-10-22

Vendor

ThreatBook is a Chinese threat intelligence company founded in Beijing in 2015, and intelligence rather than endpoint software is its core business: it collects and analyses attack data and sells the resulting feeds, detection rules and analysis to Chinese enterprises and government bodies. It is among the more internationally visible Chinese security research teams, publishing on campaigns aimed at Chinese and regional targets. Its products build outward from that data: a threat intelligence platform and API, OneDNS for DNS-layer filtering, and the endpoint agent listed here, which applies its intelligence on the device and feeds telemetry back. Its market is domestic and its products are not entered into the Western public test cycles. Intelligence products are also not the sort of thing those cycles measure: what a buyer is assessing is coverage and accuracy of data rather than a detection rate. Vendor page →

Website
threatbook.io
Country
China
Headquarters
Not known
Year Established
2015
Customers
1,000 organisations
Users
420K users
Revenue
$70.0M (2026)

Platforms

macOSnative
Windowsnative

Target Market

Enterprise primary

Capabilities

Malware DetectionkeyNot known
Ransomware ProtectionkeyNot known
Behavioral DetectionkeyNot known
Web ProtectionkeyNot known
Email ProtectionNot known
Host FirewallNot known
Sandbox AnalysisNot known
Cloud-Assisted ScanningNot known
Heuristic DetectionNot known
Device ControlNot known
Vulnerability ShieldingNot known
Central Management ConsoleNot known

12 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPaidnot statedno recurring chargeNot known

Versions

  • 2.9.2.1600macOSWindows

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

OESIS Framework SupportSupported1 activeSupported
OPSWAT Certified Security ApplicationGold1 activeGold

Change History

This record was created 2026-09-23. Everything below is what has changed since.

  • 2026-10-22Certification addedCertified: OPSWAT Certified Security Application (Gold)evidence
  • 2026-10-20Pricing plan addedPrice: paidevidence
  • 2026-10-02New versionNew version: 2.9.2.1600 (Windows)evidence
  • 2026-10-02New versionNew version: 2.9.2.1600 (macOS)evidence
  • 2026-10-01Product updatedListed in Enterprise Antimalwareevidence
  • 2026-10-01Product updatedSold to: Enterpriseevidence
  • 2026-10-01Product updatedListed in Home Antimalwareevidence
  • 2026-09-30Platform addedRuns on macOSevidence
  • 2026-09-30New versionNew version: 1.0 (macOS)evidence
  • 2026-09-23Platform addedRuns on Windowsevidence
  • 2026-09-23Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-09-23New versionNew version: 2.8.8.1000 (Windows)evidence
  • 2026-09-23Product createdNew product listedevidence
Something wrong? Suggest a correction →

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.