Business SecurityAI Core

Webroot BrightCloud® Threat Intelligence

AI-driven cyber threat database & API security intelligence

Product Overview

Webroot BrightCloud® Threat Intelligence is the advanced cloud engine behind the entire Webroot security portfolio. Utilizing contextual machine learning, BrightCloud continuously analyzes millions of IP addresses, domain reputational vectors, file hashes, and active zero-day exploits globally.

How It Works Under The Hood

Technical Mechanics & Engine Architecture

Massive distributed cloud database receiving telemetry from tens of millions of endpoints. Uses deep neural network classifiers and contextual correlation to rate safety vectors of URLs, IPs, domain names, file execution behavior, and mobile APKs.

Key Technical Features

Real-Time URL & IP Classification

Categorizes and rates internet domains across risk levels and content categories dynamically.

File Reputation Service

Provides instant lookup for executable hashes to determine clean, malicious, or unclassified status.

RESTful API Access

Enables custom integration into Palo Alto, Cisco, F5, or custom enterprise SIEM software.

Step-by-Step Installation Guide

apiIntegration Setup
1.Request API Developer credentials from Webroot Enterprise Sales.
2.Log into BrightCloud API portal to generate your unique OAuth API keys.
3.Configure RESTful query endpoints (`https://api.brightcloud.com/v2/...`) inside your SIEM or custom security pipeline.

Sign Up & Sign In Account Process

Account Sign-Up

Enterprise API provisioning through Webroot OEM & Partner portal.

Account Sign-In & 2FA

Access API usage telemetry and key management via developer portal.

New User vs Existing User Setup Workflow

First-Time New User Journey
•Generate BrightCloud API token.
•Integrate IP Reputation endpoint into perimeter firewall for automated IP blocking.
Existing / Returning User Journey
•Monitor API query metrics and analyze automated threat feed reports.

Product FAQ

Is BrightCloud embedded in all Webroot products?
Yes, BrightCloud is the core cloud intelligence engine powering every Webroot desktop, mobile, DNS, and business product.

Deployment Specs

Compatible Operating Systems
REST APICloud API IntegrationsSecurity Appliances
Standard Keycode Format
20-character alphanumeric key (e.g. SA01-AAAA-BBBB-CCCC-DDDD)
Official Licensing Notice
BrightCloud API pricing based on monthly query volume and integration tier.
Request Licensing Info

Related Webroot Security Solutions

Most Popular

Webroot SecureAnywhere AntiVirus

Cloud-powered real-time protection for PCs and Macs

Blazing fast antivirus software that scans in seconds, blocks malware in real-time, and uses virtually zero system resources.

  • Real-time cloud threat intelligence scanning
  • Ransomware protection with behavioral rollback defense
  • Identity shield for online banking and browsing
WindowsmacOS
Learn More
Best Value

Webroot Internet Security Plus

Multi-device protection with password management & mobile security

Protects PCs, Macs, smartphones, and tablets while securely managing your online passwords and sensitive login credentials.

  • Multi-device coverage for up to 3 or 5 PCs, Macs, or Mobile devices
  • Integrated secure password manager for logins & credit card data
  • Advanced identity shield against keyloggers and browser hijackers
WindowsmacOSAndroidiOS
Learn More
Complete Suite

Webroot Internet Security Complete

All-in-one protection with identity shield, password manager & 25GB cloud backup

Complete security suite combining malware protection, identity shield, password security, automated cloud backup, and system optimizer.

  • Multi-device protection for PC, Mac, Android, and iOS
  • Includes 25GB secure cloud storage with automated folder sync
  • System Optimizer to clear tracking cookies and boost workstation performance
WindowsmacOSAndroidiOS
Learn More