Saturday, November 14, 2026 4,523 lists 78,992 records on file
List your app or device

  1. Home
  2. IT & Infrastructure
  3. Threat Intelligence Platforms
Ranked on the record · 32 apps

Best Threat Intelligence Platforms 2026

Facts read 22 Sep 2026 – 15 Oct 2026

Security teams use threat intelligence platforms to organize information about threats and support investigation workflows. Compared on indicator enrichment, STIX/TAXII support, report management, and case management, the entries can be weighed by how they handle intelligence and related work. Deployment, workflow automation, free-plan availability, and paid-from pricing add practical comparison points. IBM X-Force Exchange, OpenAEV, and ThreatForge are among the options, with SOCRadar Extended Threat Intelligence Platform and Flashpoint Ignite also listed. Think about how your team needs to gather, enrich, manage, and act on threat information when comparing these capabilities.

The standings: top 10

NameIn a lineRecord scorePrice fromTry it freeRuns onFacts read
01 MISPMISP is suited to incident analysts, security and ICT professionals, and malware reversers who need to analyze and share threat information.5.7€7.31 a yearFree planWeb, Linux, API, Self-hosted15 Oct 2026
02 SOCRadar Extended Threat Intelligence PlatformXTI is aimed at organizations monitoring external threats, brand impersonation, and dark web activity.5.4$4,550 a yearFree planWeb, API30 Sep 2026
03 Pulse IntelligenceIt suits analysts and SOC or junior CTI teams that want a self-hosted workspace for threat data, hunting, and reporting.5.0Free planFree planWeb, Windows, Mac, Linux8 Oct 2026
04 IBM X-Force ExchangeX-Force Exchange may suit security teams researching threat indicators and sharing findings.4.7Free planFree planWeb, API30 Sep 2026
05 Kaspersky Threat Intelligence PortalThe portal is aimed at SOC teams, threat analysts, and threat hunters working on analysis, incident response, or threat hunting.4.7Free planFree planWeb, API8 Oct 2026
06 Shodan Monitor4.7$69 a month—Web, Linux, API9 Oct 2026
07 IntelOwlIntelOwl may suit security teams handling threat hunting, incident response, vulnerability management, or related intelligence work.4.6Free planFree planWeb, Linux, API, Self-hosted9 Oct 2026
08 ThreatForgeThreatForge may suit security analysts, SOC teams, fraud teams and researchers who need to organize indicators, enrich observables and monitor brand abuse.4.6Free planFree planWeb, API, Self-hosted2 Oct 2026
09 Threat Intelligence PlatformIt suits cybersecurity teams that want to examine hosts and infrastructure or enrich existing systems with indicators and asset information.4.6Free planFree planWeb, API10 Oct 2026
10 Yeti4.2Free planFree planWeb, API, Self-hosted9 Oct 2026
01

MISP is suited to incident analysts, security and ICT professionals, and malware reversers who need to analyze and share threat information.

Free plan Open source From €7.31 a year WebLinuxAPISelf-hosted
03

Pulse Intelligence

It suits analysts and SOC or junior CTI teams that want a self-hosted workspace for threat data, hunting, and reporting.

WebWindowsMac+3
Record5.0 Visit
04

IBM X-Force Exchange

X-Force Exchange may suit security teams researching threat indicators and sharing findings.

WebAPI
Record4.7 Visit
6 WebLinuxAPI $69 a month Record4.7 Visit
7
IntelOwl

IntelOwl may suit security teams handling threat hunting, incident response, vulnerability management, or related intelligence work.

WebLinuxAPI+1 Free plan Record4.6 Visit
8
ThreatForge

ThreatForge may suit security analysts, SOC teams, fraud teams and researchers who need to organize indicators, enrich observables and monitor brand abuse.

WebAPISelf-hosted Free plan Record4.6 Visit
9
Threat Intelligence Platform

It suits cybersecurity teams that want to examine hosts and infrastructure or enrich existing systems with indicators and asset information.

WebAPI Free plan Record4.6 Visit
10 WebAPISelf-hosted Free plan Record4.2 Visit
11
Security Vision TIP

TIP suits security teams that need to combine threat indicators and event sources with investigation and response workflows.

WebWindowsLinux+2 — Record4.0 Visit
12 Web — Record4.0 Visit
13
Cyble Vision

Cyble Vision suits organizations and security teams that need to monitor digital, physical, brand, or third-party risks.

WebAPI — Record3.7 Visit
14
DAS-Security ATIP

ATIP is intended for organizations handling threat intelligence, security operations, and incident response.

WebAPISelf-hosted — Record3.7 Visit
15
Nirad TIP

It is intended for government and PSUs, BFSI, defence, energy, transport, telecom, healthcare, retail, and enterprise teams needing India-focused intelligence.

WebAPISelf-hosted — Record3.7 Visit
16
OODA Intelligence

It is aimed at organizations and defenders needing combined threat monitoring, leak detection, incident handling, and automated workflows.

WebAPI — Record3.7 Visit
17
ThreatQ

ThreatQ suits organizations managing threat hunting, vulnerability management, alert triage, threat intelligence, or spear-phishing investigations.

WebLinuxAPI+1 — Record3.7 Visit
18
Anomali Platform

It suits security teams looking to centralize telemetry and support detection, investigation, and response.

WebAPI — Record3.6 Visit
19
Flashpoint Ignite

Flashpoint Ignite is intended for security teams working across cyber threat intelligence, vulnerability, physical security, national security and fraud use cases.

WebAPI — Record3.6 Visit
20 Web Free plan Record3.6 Visit
21
Intel 471 Verity471

It suits security teams working across external exposure management, cyber threat intelligence, and threat hunting.

WebAPI — Record3.6 Visit
22 WebBrowser extensionAPI+1 — Record3.5 Visit
23 WebBrowser extensionAPI — Record3.5 Visit
24 Self-hosted — Record3.5 Visit
25 APISelf-hosted — Record3.4 Visit