Skip to content
Sign in Submit a tool
mlab.sh logo

Cybersecurity

mlab.sh

IOC and file intelligence platform for security teams to analyze threats and assess risk

IOC and file intelligence platform for security teams. Analyze IPs, domains, hashes and files to detect threats and assess risk in seconds.

Overview

Screenshot of the mlab.sh homepage

A look at mlab.sh

mlab.sh is an IOC and file intelligence platform built by Cyber Dream that helps security teams investigate threats. Users can upload files, search IPs, domains or hashes and receive structured, analyst-ready intelligence in seconds. The platform analyzes multiple indicator types including IPs, domains, URLs, hashes, files, emails, phone numbers, MAC addresses, wallets and scripts. Results include graded findings by severity, passive DNS history, reputation checks, hash analysis with YARA matches, and MITRE ATT&CK mapping. Beyond investigation, mlab offers RedKit for security audits of websites, IP ranges and Microsoft 365 tenants, plus workspaces for analyzing data on your own infrastructure through an outbound-only agent.

Feature notes

  • IP, domain, URL and hash analysis
  • File upload and malware scanning
  • EML parser for phishing analysis
  • Passive DNS history lookup
  • YARA rules and malware detection
  • MITRE ATT&CK mapping
  • RedKit security audits
  • REST API and CLI access
  • Graded risk reports with severity levels
  • AI integration via MCP server

Pricing

Pricing model: Freemium

Free plan with basic limits (2 domain analyses/day, 5 IP analyses/day, 2 file analyses/day, 3 crypto analyses/day). Pro plan at 59€/month (first 2 months at 19.99€) with higher limits (25 domain analyses/day, 50 IP analyses/day, 50 file analyses/day, 30 crypto analyses/day). Team plan at 149€/month

FAQ

Can I cancel my subscription anytime?
Yes. Pro and Team plans renew automatically every month. You can cancel from your account at any time and the plan stays active until the end of the period already paid, with nothing more charged.
Do API and MCP calls count against my quota?
Yes. Calls from the API or from an AI assistant through the MCP server use the same daily quotas as the web app. Email, phone, URL, MAC and hash lookups stay unlimited.
How can I pay for mlab?
You can pay by card through Stripe, or by bank transfer with plan activation within 48 hours. Enterprise and public sector customers can also purchase on quote with a purchase order.
Is there a refund policy?
Individual subscribers have 14 days to withdraw with a refund minus the share of service already used. Business customers have no withdrawal right, and renewals do not open a new withdrawal period.
What types of indicators does mlab analyze?
mlab accepts 11 indicator types: IP addresses, domains, URLs, file hashes, files, email addresses, phone numbers, MAC addresses, crypto wallets, bash scripts, and EML files.

Leave a review for mlab.sh

No reviews of mlab.sh yet. Run the first inspection.

Your rating

Reviews are free and are never paid for. Open the reviews

Reviews and notes · Change log · Share the profile · Maker of this product? Claim the profile · Report a fault

More on this profile

mlab.sh has a free listing. The owner can unlock the full profile with a paid launch for $5:

  • Founder story (locked)
  • Milestones (locked)
  • Demo video (locked)
  • Dofollow website link (locked)

Comparable tools

Help centre