Sunday, October 25, 2026 4,350 lists 78,100 records on file
List your app or device

  1. Home
  2. IT & Infrastructure
  3. Threat Intelligence Platforms
Ranked on the record · 32 apps

Best Threat Intelligence Platforms 2026

Security teams use threat intelligence platforms to organize information about threats and support investigation workflows. Compared on indicator enrichment, STIX/TAXII support, report management, and case management, the entries can be weighed by how they handle intelligence and related work. Deployment, workflow automation, free-plan availability, and paid-from pricing add practical comparison points. IBM X-Force Exchange, OpenAEV, and ThreatForge are among the options, with SOCRadar Extended Threat Intelligence Platform and Flashpoint Ignite also listed. Think about how your team needs to gather, enrich, manage, and act on threat information when comparing these capabilities.

01

MISP is suited to incident analysts, security and ICT professionals, and malware reversers who need to analyze and share threat information.

Free plan Open source From €7.31 a year WebLinuxAPISelf-hosted
03

Pulse Intelligence

It suits analysts and SOC or junior CTI teams that want a self-hosted workspace for threat data, hunting, and reporting.

WebWindowsMac+3
Record5.0 Visit
04

IBM X-Force Exchange

X-Force Exchange may suit security teams researching threat indicators and sharing findings.

WebAPI
Record4.8 Visit
6
IntelOwl

IntelOwl may suit security teams handling threat hunting, incident response, vulnerability management, or related intelligence work.

WebLinuxAPI+1 Free plan Record4.7 Visit
7 WebLinuxAPI $69 a month Record4.7 Visit
8
ThreatForge

ThreatForge may suit security analysts, SOC teams, fraud teams and researchers who need to organize indicators, enrich observables and monitor brand abuse.

WebAPISelf-hosted Free plan Record4.7 Visit
9
Threat Intelligence Platform

It suits cybersecurity teams that want to examine hosts and infrastructure or enrich existing systems with indicators and asset information.

WebAPI Free plan Record4.6 Visit
10 WebAPISelf-hosted Free plan Record4.3 Visit
11
Security Vision TIP

TIP suits security teams that need to combine threat indicators and event sources with investigation and response workflows.

WebWindowsLinux+2 — Record4.0 Visit
12 Web — Record4.0 Visit
13 Web Free plan Record3.8 Visit
14
ThreatQ

ThreatQ suits organizations managing threat hunting, vulnerability management, alert triage, threat intelligence, or spear-phishing investigations.

WebLinuxAPI+1 — Record3.8 Visit
15
Anomali Platform

It suits security teams looking to centralize telemetry and support detection, investigation, and response.

WebAPI — Record3.7 Visit
16
Cyble Vision

Cyble Vision suits organizations and security teams that need to monitor digital, physical, brand, or third-party risks.

WebAPI — Record3.7 Visit
17
DAS-Security ATIP

ATIP is intended for organizations handling threat intelligence, security operations, and incident response.

WebAPISelf-hosted — Record3.7 Visit
18
Flashpoint Ignite

Flashpoint Ignite is intended for security teams working across cyber threat intelligence, vulnerability, physical security, national security and fraud use cases.

WebAPI — Record3.7 Visit
19
Intel 471 Verity471

It suits security teams working across external exposure management, cyber threat intelligence, and threat hunting.

WebAPI — Record3.7 Visit
20
Nirad TIP

It is intended for government and PSUs, BFSI, defence, energy, transport, telecom, healthcare, retail, and enterprise teams needing India-focused intelligence.

WebAPISelf-hosted — Record3.7 Visit
21
OODA Intelligence

It is aimed at organizations and defenders needing combined threat monitoring, leak detection, incident handling, and automated workflows.

WebAPI — Record3.7 Visit
22 WebBrowser extensionAPI+1 — Record3.6 Visit
23 WebBrowser extensionAPI — Record3.6 Visit
24 WebAPI — Record3.5 Visit
25 Self-hosted — Record3.5 Visit