MISP is an open-source platform for gathering, storing, analyzing, and sharing cybersecurity indicators and threat information for incident and malware analysis.
Alternatives to Threatnote
Pulse Intelligence is a free, open-source threat intelligence workspace that organizations host themselves.
- 4
Kaspersky Threat Intelligence Portal
Kaspersky Threat Intelligence Portal is a cloud investigation workspace for security teams working with cyberthreat intelligence.
Free planWebAPI6.5Free plan - 5
SOCRadar Extended Threat Intelligence Platform
SOCRadar Extended Threat Intelligence Platform (XTI) combines threat intelligence with external attack surface management, brand protection, and dark web monitoring.
WebAPI6.5From $4,550 a year - 6
IBM X-Force Exchange
IBM X-Force Exchange is a cloud-based threat intelligence platform for researching threats, gathering intelligence and collaborating with peers.
Free planWebAPI6.3Free plan - 7
Shodan Monitor
Shodan Monitor tracks Internet-connected devices and sends real-time notifications when unexpected devices or events appear.
WebAPILinux6.3From $69 a month - 8
Security Vision TIP
Security Vision TIP collects, analyzes and enriches cybersecurity threat data to support detection, investigation and response across an organization's infrastructure.
WebAPILinuxSelf-hosted6.2 - 9
IntelOwl
IntelOwl is an open-source threat intelligence platform that enriches files and observables from multiple sources through one API.
Free planWebAPILinuxSelf-hosted6.1Free plan - 10
ThreatForge
ThreatForge is an open-source CTI and Digital Risk Protection platform for threat monitoring, brand protection, and digital risk investigation.
Free planWebAPISelf-hosted6.1Free plan - 11
Threat Intelligence Platform
Threat Intelligence Platform combines threat intelligence feeds with in-house databases to analyze threat hosts and attack infrastructure in real time.
Free planWebAPI5.9Free plan - 12

Flashpoint Ignite
Flashpoint Ignite is a cloud platform for helping security teams identify and respond to cyber, fraud, vulnerability, physical security, and national security risks.
WebAPI5.8 - 13

Cyble Vision
Cyble Vision is a cloud threat intelligence platform for monitoring cyber, brand, third-party, and physical security risks.
WebAPI5.7 - 14

DAS-Security ATIP
DAS-Security ATIP is a threat intelligence center that combines information from multiple sources with network threat analysis and APT tracking, using Hengnao AI.
WebAPISelf-hosted5.7 - 15

OODA Intelligence
WebAPI5.7 - 16
Nirad TIP
Nirad TIP is a threat intelligence platform focused on threat actors targeting India.
WebAPISelf-hosted5.6 - 17

Anomali Platform
Anomali Platform brings security data, threat intelligence, and agentic AI together for security operations.
WebAPI5.5 - 18
DomainTools Monitors
WebAPI5.4 - 19

EclecticIQ Platform
EclecticIQ Platform, also called Intelligence Center, is an AI-embedded threat intelligence platform for helping teams prioritize threats relevant to their business.
WebAPIExtensionSelf-hosted5.4 - 20
Recorded Future Intelligence Cloud
WebAPIExtension5.4 - 21

ThreatQ
WebAPILinuxSelf-hosted5.4 - 22
Yeti
Yeti is a free, open-source Forensics Intelligence platform for digital forensics and incident response teams.
WebAPISelf-hosted5.4 - 23
Intel 471 Verity471
Intel 471 Verity471 is a cloud platform that turns adversary tradecraft from criminal underground sources into pre-attack cyber intelligence.
WebAPI5.3 - 24
SİBERAT
SİBERAT AX is a self-hosted security operations platform for IT and operational technology.
Self-hosted5.3 - 25
ThreatConnect Platform
ThreatConnect Platform brings threat intelligence operations, security operations, and cyber risk management teams together for collaborative cyber defense.
WebAPISelf-hosted5.3 - 26

Cyware Intelligence Exchange
APISelf-hosted5.1 - 27
OpenCTI
WebLinux4.8 - 28
AhnLab TIP
Web4.7 - 294.7
- 304.7
