The Workspace for Intelligence Teams

An investigation platform for threat intelligence, OSINT, and security research – graph-based analysis, integrated enrichment, real-time collaboration.
The image shows a cyber threat intelligence platform called Malfors with a graph-based interface. The graph visualizes relationships between domains and entities; and enrichment panel.
Benefits

Built for Modern Investigations

Everything your intelligence team needs to work faster, with less friction.

Built-In Enrichments

Enrich entities with data from leading intelligence providers, directly from your graph.

Built-In Enrichments
Private Enrichments

Private Enrichments

Connect your internal intelligence to the graph through a simple API.

Custom Entities

Custom Entities

Define your own entity types when the defaults don't fit your case.

Images and attachments

Images and attachments

Link images and files to entities so evidence stays with your analysis.

Auto Correlations

Malfors detects shared data points between entities as they are enriched, so hidden connections surface right away.

Auto Correlations

Bulk Actions

Enrich, move, or retype multiple entities at once instead of handling them individually.

Bulk Actions
Collaboration

Investigate as a Team

Investigate together with built-in real-time collaboration, granular access controls, and more.

All cases - a list of investigation cases with names and modification dates

Case management

Cases are securely stored in the cloud, synced in real time, and always up to date.

Team multiplayer - add entities and collaborate with team members in real-time

Team multiplayer

Malfors supports real-time collaboration on investigations out of the box, no setup required.

All members - manage team members with different roles like Admin, Editor, and Viewer

Access management

Control access with roles and case-level visibility to keep investigations secure.

Pricing

Simple pricing based on your needs

We have plans for every scale, whether you work independently or across a large organization.

Standard

Ideal for solo analysts
$49/month
All you need to investigate:
Graph-based link analysis
Unlimited entities & links
Case management & cloud storage
All built-in enrichments
Custom enrichments

Professional

Collaboration & scale for teams
$249/seat/month
Everything in Standard, plus:
Invite team members
Real-time collaboration
Role-based access control
SAML / SSO
Audit logs
Custom features & integrations
Priority support + engineering hours

Enterprise

Full control at enterprise scale
Custom
Everything in Professional, plus:
Self-hosted deployment
Air-gapped environments
Dedicated support & engineering