FAQ
DugganUSA turns scattered public threat reporting into feeds and pre-install checks a small team can use in minutes. It cites its sources, says what it does not know, and corrects itself in public.
Get a free API key. One key works everywhere.
What is DugganUSA?
Section titled “What is DugganUSA?”A Minnesota threat-intelligence company founded in October 2025. We publish a free threat feed and pre-install checks for packages, GitHub Actions and MCP servers, and we show our work.
Who is it for?
Section titled “Who is it for?”Small and mid-size defenders, people building with AI agents, and anyone who needs a blocklist they can trust without a six-figure contract.
Is it free?
Section titled “Is it free?”The free tier is real and stays free. Paid tiers raise volume and add full context. Current limits and prices are live at /api/v1/billing/prices and on the plans page.
How do I sign up?
Section titled “How do I sign up?”Get a free API key at analytics.dugganusa.com/stix/register. One key works across the feed, the API, the MCP servers, Edge Shield and the Checks Action. The quickstart takes about five minutes.
How do I connect it to Microsoft Sentinel?
Section titled “How do I connect it to Microsoft Sentinel?”Use the built-in Threat Intelligence - TAXII connector in Sentinel. The Sentinel guide was run end to end in our own workspace.
What do I get?
Section titled “What do I get?”Blockable indicators (IPs, domains, hashes, malicious packages), a search API, a package check, an MCP server check, and an edge worker you can run yourself.
Do you see threats before the big vendors?
Section titled “Do you see threats before the big vendors?”Sometimes, and we do not claim it by default. Most of what we carry is other people’s research and public feeds. A lead claim gets both timestamps, and we credit the researchers.
How accurate is it?
Section titled “How accurate is it?”We measure it in public. Confidence never exceeds 95. The live evidence on the About page shows novelty against ThreatFox, independent confirmation by Spamhaus, and how many indicators blocked real traffic, split between our own properties and outside consumers.
Do you have SOC 2?
Section titled “Do you have SOC 2?”No. We do not claim it.
Do you do consulting?
Section titled “Do you do consulting?”No. We license data and automated checks as self-serve subscriptions.
What if you block something that should not be blocked?
Section titled “What if you block something that should not be blocked?”Tell [email protected]. We correct it, keep the evidence, and say so where we first said it.
Are you Duggan Manufacturing or another Duggan company?
Section titled “Are you Duggan Manufacturing or another Duggan company?”No. DugganUSA LLC is a cybersecurity company in Minnetrista, Minnesota, not an embroidery shop, a security-guard company or an Irish food importer.
Who benefits, and who does not
Section titled “Who benefits, and who does not”Benefits: small and mid-size defenders; people building with AI agents; maintainers and researchers (cited by name); people a breach lands on; Microsoft-stack shops.
Does not: anyone who needs a SOC 2 report, anyone who needs us to be first, anyone buying custom work, and anyone who needs customer-outcome proof at scale. The About page shows the evidence live, including the weak spot.