Intelligence & Sample Intake

Submit Intelligence or a Sample

Share threat intelligence or a suspicious file with our analysts. Every submission is reviewed confidentially by US-based staff. Use the form below to tell us what you've found. We'll follow up to securely collect any files.

What are you submitting?

Your Name

Email Address

Organization (optional)

Intelligence Summary

Indicators (optional) Defang if you prefer (e.g. hxxp://, 1.2.3[.]4). We'll normalize on our end.

File Name(s)

SHA-256 Hash (optional)

Where It Came From

Context

Do not attach live malware to your first email. After you submit, we'll reply with secure upload instructions. If you must send a file directly, place it in a password-protected ZIP with the password infected and note that in your message.

How Intake Works

Submitting opens your email app with the details pre-filled, addressed to our intake inbox.
An analyst confirms receipt and, for file samples, sends a secure upload link.
We respond to time-sensitive submissions as quickly as possible.

Handling Samples Safely

Don't open or execute a suspicious file to "check" it.
Isolate the affected device from the network if you suspect an active compromise.
Preserve the original. Avoid renaming, editing, or deleting it.
Zip live samples with the password infected before sending anything directly.

All submissions are handled with strict confidentiality by US-based staff. Prefer to talk first? Contact us.