Best Threat Intelligence Platforms in 2026
Updated
In short: IBM X-Force Exchange is ranked #1 of 31 as of 4 October 2026, ahead of OpenAEV and ThreatForge. The best-ranked option with a free plan is OpenAEV. The lowest first paid tier on this page is SOCRadar Extended Threat Intelligence Platform at $379.17/mo.
Security teams comparing threat intelligence platforms can look at how they handle indicators, reports, and cases. Check indicator enrichment and STIX/TAXII support, then compare case management and report management for the workflows you need. Deployment options and workflow automation provide additional points of comparison, alongside free plans and paid-from pricing. SOCRadar Extended Threat Intelligence Platform, Anomali Platform, and EclecticIQ Platform lead the ranking, followed by Cyware Intelligence Exchange and ThreatQ. Consider how your team organizes intelligence and related work, and weigh those needs against the capabilities listed for each platform.
31 threat intelligence platforms ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
Recognised 40% · Phone app 26% · Documented 20% · Free plan 14% of the score
- 1 IBM X-Force Exchange No phone app RecognisedPhone appDocumentedFree plan 6.3Free Indicator enrichment: YesSTIX/TAXII support: YesReport management: Yes
- 2 OpenAEV No phone app RecognisedPhone appDocumentedFree plan 6.3Free Indicator enrichment: YesSTIX/TAXII support: YesReport management: Yes
- 3 ThreatForge No phone app RecognisedPhone appDocumentedFree plan 6.3Free Indicator enrichment: YesReport management: Yes
- 4 SOCRadar Extended Threat Intelligence Platform No phone app RecognisedPhone appDocumentedFree plan 5.9$379.17/mo Indicator enrichment: YesSTIX/TAXII support: YesReport management: Yes
- 5 Flashpoint Ignite No phone app RecognisedPhone appDocumentedFree plan 5.8 Indicator enrichment: YesSTIX/TAXII support: YesReport management: Yes
- 6 Security Vision TIP No phone app RecognisedPhone appDocumentedFree plan 5.8 Indicator enrichment: YesSTIX/TAXII support: YesReport management: Yes
- 7 Anomali Platform No phone app RecognisedPhone appDocumentedFree plan 5.7 Indicator enrichment: YesSTIX/TAXII support: YesReport management: Yes
- 8 AhnLab V3 Internet Security No phone app RecognisedPhone appDocumentedFree plan 5.5 Indicator enrichment: YesReport management: Yes
- 9 Bitsight External Attack Surface Management No phone app RecognisedPhone appDocumentedFree plan 5.5 Indicator enrichment: YesSTIX/TAXII support: YesReport management: Yes
- 10 EclecticIQ Platform No phone app RecognisedPhone appDocumentedFree plan 5.5 Indicator enrichment: YesSTIX/TAXII support: YesReport management: Yes
- 11 Group-IB Attack Surface Management No phone app RecognisedPhone appDocumentedFree plan 5.5 Indicator enrichment: YesSTIX/TAXII support: YesReport management: Yes
- 12 Cyware Intelligence Exchange No phone app RecognisedPhone appDocumentedFree plan 5.4 Indicator enrichment: YesSTIX/TAXII support: YesReport management: Yes
- 13 Intel 471 Verity471 No phone app RecognisedPhone appDocumentedFree plan 5.4 Indicator enrichment: YesSTIX/TAXII support: YesReport management: Yes
- 14 SİBERAT No phone app RecognisedPhone appDocumentedFree plan 5.4 Indicator enrichment: YesSTIX/TAXII support: YesReport management: Yes
- 15 Cyble Vision No phone app RecognisedPhone appDocumentedFree plan 5.3 Indicator enrichment: YesSTIX/TAXII support: Yes
- 16 DAS-Security ATIP No phone app RecognisedPhone appDocumentedFree plan 5.3 Indicator enrichment: YesReport management: Yes
- 17 IntelOwl No phone app RecognisedPhone appDocumentedFree plan 5.3 Indicator enrichment: YesReport management: Yes
- 18 Kaspersky Threat Intelligence Portal No phone app RecognisedPhone appDocumentedFree plan 5.3 Indicator enrichment: YesSTIX/TAXII support: YesReport management: Yes
- 19 OODA Intelligence No phone app RecognisedPhone appDocumentedFree plan 5.3 Indicator enrichment: YesSTIX/TAXII support: YesReport management: Yes
- 20 Pulse Intelligence No phone app RecognisedPhone appDocumentedFree plan 5.3 Indicator enrichment: YesSTIX/TAXII support: YesReport management: Yes
- 21 ThreatConnect Platform No phone app RecognisedPhone appDocumentedFree plan 5.3 Indicator enrichment: YesSTIX/TAXII support: YesReport management: Yes
- 22 ThreatQ No phone app RecognisedPhone appDocumentedFree plan 5.3 Indicator enrichment: YesSTIX/TAXII support: YesReport management: Yes
- 23 Nirad TIP No phone app RecognisedPhone appDocumentedFree plan 5.2 Indicator enrichment: YesSTIX/TAXII support: Yes
- 24 Open Threat Exchange No phone app RecognisedPhone appDocumentedFree plan 5.2 Indicator enrichment: YesReport management: Yes
- 25 Threatnote No phone app RecognisedPhone appDocumentedFree plan 5.2 STIX/TAXII support: YesReport management: Yes
Is your app on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which threat intelligence platform is ranked first on Samsung Mobile US Press?
IBM X-Force Exchange is ranked #1 of 31 with a score of 6.3. OpenAEV is second and ThreatForge third.
How many of these have a free plan?
3 of the 25 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, SOCRadar Extended Threat Intelligence Platform has the lowest first paid tier we found: $379.17/mo.
How is this list ranked?
Ranked mobile-first: a phone app alongside the web or desktop product, a free tier and the depth of its documentation. Paid placements never change a rank.