Stop adversary contact before it starts. VisionHeight AIR is the Adversary Infrastructure Risk platform that delivers explainable, evidence-backed verdicts on every IP and domain your organization encounters - built on unique global passive telemetry and unified data sources.
Unlike traditional threat feeds that offer static risk scores, VisionHeight AIR predicts, explains, and enforces. Every verdict comes with the evidence behind it, so your analysts understand why a decision was made and your automated workflows can act on it with confidence. Designed as the intelligence foundation for your SIEM, SOAR, and agentic SOC, AIR gives both human teams and AI agents the context they need to trust a verdict and act on it autonomously.
VisionHeight AIR integrates via API into your existing security stack, enriching detections, accelerating investigations, and enabling proactive enforcement across your entire environment - before adversaries ever make contact.
Highlights
Unique Global Passive Telemetry VisionHeight AIR is built on proprietary passive telemetry and unified data sources that deliver visibility into adversary infrastructure you won't find in traditional threat feeds. Every verdict is evidence-backed and explainable, giving your team and your AI agents the confidence to act.
Built for the Agentic SOC VisionHeight AIR is designed as the intelligence foundation for your SIEM, SOAR, and autonomous security workflows. Verdicts include the reasoning behind them, so both human analysts and AI agents can trust decisions and enforce them without manual review.
Predict, Explain, Enforce Go beyond static risk scores. VisionHeight AIR predicts threats before adversary contact, explains why with supporting evidence, and enables automated enforcement across your security stack via API integration.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
One contracted unit of the VisionHeight AIR platform subscription. Each unit represents a predefined entitlement level to AIR capabilities, including access to adversary infrastructure intelligence, predictive risk scoring, and API integrations, as defined in the applicable order agreement.
This listing uses a single pricing dimension: the AIR Annual Subscription Unit. You buy one or more contracted units under a yearly agreement. Each unit represents a predefined entitlement level to the platform. That entitlement covers adversary infrastructure intelligence, predictive risk scoring, and API integrations, as set in your order agreement. Pricing scales by the number of units you contract. There are no separate tiers or usage add-ons in the table. To increase capacity, you add more units. Your specific entitlement level is defined in the applicable order agreement, so contact the vendor to confirm what each unit includes.
Top-of-mind questions for buyers
What does one AIR Annual Subscription Unit actually entitle me to?
Each unit maps to a predefined entitlement level defined in your order agreement. That entitlement covers adversary infrastructure intelligence, predictive risk scoring that flags infrastructure during build-out, and API integrations. The exact scope of one unit is set in your order agreement, so confirm the entitlement details with the vendor before you buy.
What integrations and delivery methods come with the API access included in a unit?
Unit entitlements include API integrations. The platform offers a RESTful API, real-time webhooks, STIX/TAXII feeds, a data lake connection, and a high-throughput MCP server. It connects to security tools across categories such as SIEM/SOAR, network security, endpoint security, threat intel, cloud, attack surface, and identity systems.
How do I add capacity if my needs grow during the subscription?
Pricing scales by the number of units you contract. There are no separate usage add-ons or tiers in the table. To increase capacity, you contract additional units. Since each unit's entitlement level is defined in your order agreement, contact the vendor to align added units with your capacity needs.
visionheight.com+1
Helpful?
Vendor refund policy
No Refunds
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Predictive feed of malicious IPs, identified before they appear on public IOC lists. Sourced from VisionHeight's Pulse Telemetry and refreshed continuously. Add this to block tomorrow's attacks at the firewall today.
Bundled operational threat feeds for AWS Network Firewall, blocking inbound traffic from noisy scanner sources that flood workloads with probe traffic and outbound traffic to Tor exit nodes. Add this to cut SIEM ingestion and SOC alert volume at packet 1, and to enforce policy around anonymized network infrastructure.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.