About Norse

Norse is the global leader in live attack intelligence. Norse delivers continuously updated and unique Internet and darknet intel that helps organizations detect and block attacks that other systems miss. The Norse DarkMatter™ platform detects new threats and tags nascent hazards long before they are spotted by traditional threat intelligence tools. Norse's globally distributed distant early warning grid of millions of dark sensors, honeypots, crawlers, and agents deliver unique visibility into the Internet - especially the darknets, where bad actors operate. The Norse DarkMatter™ network processes hundreds of terabytes daily and computes over 1,500 distinct risk factors, live, for millions of IP addresses and URLs every day. Norse products tightly integrate with popular SIEM, IPS, and next-generation Firewall products to dramatically improve the performance, catch-rate and return-on-investment of your existing security infrastructure.

Collage of Photos


Our Mission is to be the global leader in live attack intelligence that equips organizations with solutions to stop emerging threats beyond their perimeter — before they reach the network.


  • July 2014: Norse releases DarkWatch live attack intelligence appliance, renames IPViking to DarkViking.
  • March 2014: Norse releases Threat Intel App for Splunk Enterprise
  • February 2014: Norse releases first threat report in conjunction with SANS — "Healthcare Cyberthreat Report — Widespread Compromises Detected, Compliance Nightmare on Horizon"
  • December 2013: Norse raises $10M in Series A funding
  • December 2013: Norse releases IPViking™ 2.0, including detection of malware in development and identification of devices including satellites, mobile devices and appliances attempting to connect to networks via malicious IPs
  • December 2013: Norse releases Darklist, the world's first comprehensive blacklist of the Internet's highest risk IPs.
  • October 2013: Norse integrates with McAfee CADS
  • July 2013: Norse-sponsored Ponemon Report reveals lack of live cyberthreat intelligence costs enterprises an average of $10 million over 12 months
  • January 2013: Norse opens Silicon Valley office focused on IT security
  • January 2013: Norse opens new St. Louis headquarters
  • November 2012: IPViking is launched as a stand-alone dark threat intelligence IT security solution
  • September 2012: Norse completes second major round of financing $3.5MM
  • December 2011: Global eTelecom, 2nd largest ACH processor integrates IPViking for use by its 55,000 merchants
  • November 2011: Merchant Partners, the country's 5th largest payment gateway implements IPViking to prevent eCommerce fraud after massive success in proof of concept for its 60,000 merchants
  • April 2011: Norse introduces its proprietary IPQ™ score, based on 1,500+ factors that drive risk for a network connection. April 2011: Norse launches nGate - secure payment gateway incorporating IPViking technology
  • April 2010: Norse Corporation is founded by Tommy Stiansen and Sam Glines