Historical review from 2026-10-02. Current price and availability are unconfirmed; check the original marketplace.

← Back to 2026-10-02 Deals
#13

isMalicious

SecurityListed on TrustMRR· Sep 30
$35.0K
Asking Price
$2.1K/mo
Monthly Revenue
$2.0K/mo
Monthly Profit
1.5x
Profit Multiple
19 months
Business Age
✨

Why We Picked This

isMalicious delivers $2.08K/mo revenue with an exceptional 95% profit margin and a 1.47x annual profit multiple—well below typical SaaS benchmarks and well below the 2.5x threshold for high-quality deals. Platform verification is confirmed, financials are complete and transparent, and the business is 19 months old with established recurring revenue. The cybersecurity intelligence API niche is defensible and the tech stack (STIX/TAXII/OpenCTI/MCP integrations) indicates a sophisticated, developer-focused offering. This is a rare combination of verified profitability, exceptional margins, and attractive valuation.

👍

Strengths

  • ✓Exceptional 95% profit margin on $2.08K/mo revenue—very high cash conversion
  • ✓Attractive 1.47x annual profit multiple, significantly below market for recurring software
  • ✓Platform-verified financials with zero data quality warnings—full transparency
  • ✓19-month operating history demonstrates product-market fit and sustainable revenue
  • ✓Developer-focused API and standards integration (STIX/TAXII/OpenCTI/MCP) suggests defensible niche and sticky use cases
🔎

Details to confirm

  • •Confirm customer concentration and churn/retention rates to validate recurring revenue durability and identify concentration risk
  • •Request historical monthly revenue trend to assess growth trajectory and sustainability of current ARR
  • •Clarify revenue composition: proportion of API subscription revenue vs. threat intelligence data licensing vs. other service lines
  • •Verify the scope of existing integrations and technical dependencies (OpenCTI, MCP server, TAXII endpoints) to understand maintenance obligations and platform lock-in exposure

Additional details to confirm

Evidence 82/100
Unusually high reported profit margin

Buy vs Build: BUY

87
AI-native cash cost
$8.0K–$18.0K
Estimated time
14 weeks
Asking price
$35.0K

The primary asset being purchased is 19 months of verified recurring revenue ($2.08K/mo), a 95% profit margin, and proven customer demand in a specialized cybersecurity intelligence niche. Building a STIX/TAXII/OpenCTI-compliant threat intelligence API from scratch would require 12–16 weeks ($8K–$18K in AI coding subscriptions, hosting, and managed threat data services) plus 6–12 months of security hardening, standards compliance validation, and customer acquisition to reach parity. The acquired business already has operational integrations, paying customers, and a defensible technical moat in standardized threat intelligence protocols. The 1.47x multiple is attractive relative to the effort and risk of organic build. Recommendation: buy at asking price pending verification of customer concentration and churn metrics.

Cash estimate includes the AI tools, APIs and infrastructure needed for a solo founder to recreate the software. Build time is informational and lightly weighted. The verdict is driven mainly by customers, users, verified earnings, retention, distribution, brand, data and operating history.

📊

Financial Snapshot

$25K
Annual Revenue
$24K
Annual Profit
$2.1K
Monthly Revenue
18 mo
Est. Payback
Profit Margin95%
📋

Business Overview

isMalicious is a suite of tools of cyberthreats intelligence, SIEM threatl intelligence API, STIX / TAXII, OpenCTI, MCP server.

📌

Quick Facts

🏢
Type
Security
📅
Age
19 months
🏪
Source
TrustMRR
📌
Listed
Sep 30, 2026

Deal Score

92
Top Pick
Evidence confidence82/100
1.5x
Excellent Multiple
Asking$35.0K
MRR$2.1K/mo
Profit$2.0K/mo
Profit Multiple1.5x
Age19 months
View on TrustMRR→

Opens the original listing on TrustMRR

Share this review

Know a buyer or the founder? Send them the full analysis.

Share on X
New listings by email

See tomorrow’s businesses for sale.

Get new listings with asking prices, monthly profit, deal scores, and key risks.

The best reviewed deals, concise and evidence-first. Unsubscribe anytime.

Preliminary screening based on marketplace and public data. Verify all financial, legal, technical, customer, and operational claims independently before making an acquisition decision. This is not financial or legal advice.