u/Q-Feeds

Hi everyone,

We're the team behind Q-Feeds, a threat intelligence provider focused on delivering IOC feeds and integrations for firewalls (OPNsense), SIEMs, and other security platforms.

We're constantly improving our platform, and we'd really appreciate honest feedback from the community.

If you've used our:

• Threat Intelligence feeds
• OPNsense plugin
• Threat Intelligence Portal
• Website

...what would you improve? What's missing? What's annoying? What features would make it genuinely more useful?

Don't hold back, we're Dutch, we can take direct feedback. 😄

Also, a small update: we've recently added support for checkout in multiple currencies (EUR, USD, GBP, CAD, AUD, and JPY) to make purchasing easier for customers around the world.

Looking forward to hearing your thoughts!

Hey r/sysadmin,

We run Q-Feeds (qfeeds.com), a Dutch cybersecurity company focused on Cyber Threat Intelligence feeds and a Threat Intelligence Portal for organisations without an enterprise-level security budget.

I'm posting here because this community is exactly the kind of audience we built it for: sysadmins who manage real infrastructure and need practical, actionable threat intel without six-figure vendor contracts.

Here's what Q-Feeds does in plain terms:

• CTI feeds sourced from 2,500+ OSINT and proprietary sources, refreshed every 4 hours (every 20 minutes on Premium)
• Works out of the box with OPNsense, Fortinet, Palo Alto, Sophos, Splunk, Elastic, QRadar, and more
• Supports STIX/TAXII, CSV, and JSON, so it fits into whatever you're already running
• IoC lookup portal with MITRE ATT&CK mapping
• Dark web monitoring is included in the platform
• Built and hosted in Europe

It's a paid product, but priced for companies under 500 employees. There's a free trial if you would like to see it before committing to anything.

I'm happy to answer honest questions about how it works, what it doesn't do, or how to integrate it with specific platforms. No sales pitch, just a straight conversation.

Kind Regards, Stefan

Hey r/opnsense,

Like many of you, I was relying on a mix of free blocklists to harden my firewall. They do the job to a point, but the quality and freshness of the data vary widely, and most major threat intelligence providers are extremely costly.

That's why we built Q-Feeds, a European CTI feed service providing regularly updated IP, URL and DNS blocklists, built and processed entirely within the EU.

We've built a plugin for OPNsense together with Deciso, this makes the integration straightforward, no manual list management and feeds update automatically.

What's in the feeds:

• Malicious IPs and domains (C2, botnets, scanners, etc.)
• Phishing and malware domains
• Dark web and OSINT-derived indicators

I've included a screenshot of our Threat Intelligence Portal to give you a feel for what the data looks like.

There's a free tier if you want to try it out. Feel free to share your experiences!

We are happy to answer any questions about the feeds, the data sources, or how any other question you have!

Q-Feeds Threat Intelligence Portal

Phase 1 is live: IOC browser, context, risk scoring & MITRE mapping

A little while ago we've shared a preview of what we were building for the Q-Feeds Threat Intelligence Portal. Phase 1 is now live.

This release is focused on giving more visibility into the data behind the feeds instead of just consuming blocklists.

You can now:

• Browse the full IOC database
• View IOC history, enrichment data, and relationships
• See risk scoring to understand relevance/priority
• Explore MITRE ATT&CK mappings for additional context
• Investigate indicators that are not included in feeds (e.g. lower confidence)

The idea is to make it easier to validate and investigate instead of blindly blocking.

Please note that this update also introduces a brand new risk-scoring system. But be aware that this risk-scoring system is not used (yet) for our current feeds.

Promo for existing users

If you’ve already used your premium trial, you can test the new functionality for 7 days with this code:

1-WEEK-THREAT-LOOKUP

You can activate this code by clicking on your account name on the top-right and then go to licenses -> activate licenses.

What’s next (subject to change)

• Phase 2 (in progress): more granular feed filtering/generation (e.g. only C2, exclude TOR, MITRE-based filtering)

Would be great to get feedback from the community:

• What filtering options would you actually use?
• Anything missing in the IOC view?

Happy to answer any questions as well.

Phase 1 is live: IOC browser, context, risk scoring & MITRE mapping

A little while ago we've shared a preview of what we were building for the Q-Feeds Threat Intelligence Portal. Phase 1 is now live.

This release is focused on giving more visibility into the data behind the feeds instead of just consuming blocklists.

You can now:

• Browse the full IOC database
• View IOC history, enrichment data, and relationships
• See risk scoring to understand relevance/priority
• Explore MITRE ATT&CK mappings for additional context
• Investigate indicators that are not included in feeds (e.g. lower confidence)

The idea is to make it easier to validate and investigate instead of blindly blocking.

Please note that this update also introduces a brand new risk-scoring system. But be aware that this risk-scoring system is not used (yet) for our current feeds.

Promo for existing users

If you’ve already used your premium trial, you can test the new functionality for 7 days with this code:

1-WEEK-THREAT-LOOKUP

You can activate this code by clicking on your account name on the top-right and then go to licenses -> activate licenses.

What’s next (subject to change)

• Phase 2 (in progress): more granular feed filtering/generation (e.g. only C2, exclude TOR, MITRE-based filtering)
• Phase 3: updated OPNsense plugin to support these improvements while keeping it simple

Would be great to get feedback from the community:

• What filtering options would you actually use?
• Anything missing in the IOC view?
• Ideas for improving the OPNsense plugin?

Happy to answer any questions as well.