ThreatQ
Ashburn, Virginia, United States
What it is
ThreatQ is a cyber threat intelligence platform for teams that collect, assess, and act on threat information. It takes in intelligence from commercial feeds, open sources, ISACs, partners, and internal tools, then normalizes, correlates, and enriches it. Its Threat Library scores and prioritizes intelligence according to customer-defined parameters and organizational context. Adaptive Workbench supports configurable enrichment, workflows, prioritization rules, watchlists, and operations using existing tools. The marketplace has over 450 integrations; teams can also customize through APIs and SDKs. Integration listings have different support designations, and ThreatQuotient does not maintain integrations published by other parties. ThreatQ v6 has standard and air-gapped installation guides. Investigations, Data Exchange, and TDR Orchestrator are optional modules outside the default deployment. Authentication options include local accounts, LDAP, SAML, and SSL client certificates, with account-level two-step verification. Sessions time out after sixty minutes of inactivity by default, though maintenance or administrative users can change or disable that setting for a specific user. Pricing is on request.
For and against
For
- Processes intelligence from multiple source types.
- Prioritizes using customer-defined parameters and context.
- More than 450 marketplace integrations.
- Supports air-gapped installation.
- Includes two-step verification at the account level.
Against
- Pricing is available on request.
- Additional modules are not part of the default deployment.
- Third-party integrations are not maintained by ThreatQuotient.
The verdict
ThreatQ combines intelligence processing, prioritization, and workflow tools for security teams. Organizations should account for optional module licensing and varying integration support when evaluating it.
Who it suits
ThreatQ suits organizations managing threat hunting, vulnerability management, alert triage, threat intelligence, or spear-phishing investigations. It is designed for teams that need to process intelligence and connect workflows with existing tools.
Plans and prices
ThreatQ Platform
License required; licenses are not perpetual; additional modules require license updates
Read 7 Oct 2026 · helpcenter.threatq.com
On the record
- Access security
- User authentication can be local or use LDAP, SAML, or SSL client certificates, and account-level two-step verification is available.helpcenter.threatq.com · read 7 Oct 2026
- Deployment
- ThreatQ v6 provides standard and air-gapped installation guides.helpcenter.threatq.com · read 7 Oct 2026
- Integrations
- ThreatQ’s marketplace offers over 450 integrations, and the platform supports customization through APIs and SDKs.threatq.com · read 7 Oct 2026
- Integration support
- Marketplace integrations are designated ThreatQ Supported, Developer Supported, or Not Actively Supported; ThreatQuotient does not maintain integrations published by other parties.helpcenter.threatq.com · read 7 Oct 2026
- Intelligence processing
- The platform ingests intelligence from commercial feeds, open-source sources, ISACs, partners, and internal tools, then normalizes, correlates, and enriches it.helpcenter.threatq.com · read 7 Oct 2026
- Intended users
- ThreatQuotient describes use cases including threat hunting, vulnerability management, alert triage, threat intelligence management, and spear-phishing investigations.threatq.com · read 7 Oct 2026
- Modules
- ThreatQ Investigations, ThreatQ Data Exchange, and ThreatQ TDR Orchestrator are additional modules that are not included in the default deployment.helpcenter.threatq.com · read 7 Oct 2026
- Prioritization
- Threat Library intelligence is automatically normalized, enriched, scored, and prioritized using customer-defined parameters and organizational context.helpcenter.threatq.com · read 7 Oct 2026
- Purpose
- ThreatQ is a cyber threat intelligence platform for collecting, prioritizing, analyzing, and operationalizing threat intelligence.helpcenter.threatq.com · read 7 Oct 2026
- Security reporting
- ThreatQuotient says it aims to confirm vulnerability reports within 72 hours when researchers follow its responsible disclosure policy.threatq.com · read 7 Oct 2026
- Session timeout
- User sessions time out after sixty minutes of inactivity by default, and maintenance or administrative users can change or disable the timeout for a specific user.helpcenter.threatq.com · read 7 Oct 2026
- Support
- The ThreatQ Help Center provides product documentation, developer resources, integration information, and support contact options.helpcenter.threatq.com · read 7 Oct 2026
- Workflows
- Adaptive Workbench supports customizable enrichment, workflows, prioritization logic, watchlists, and operations using existing tools and workflows.helpcenter.threatq.com · read 7 Oct 2026
