17.9
MISP is an open-source platform for gathering, storing, analyzing, and sharing cybersecurity indicators and threat information for incident and malware analysis.
Free planOpen sourceWebAPILinux
Best Threat Intelligence Platforms in 2026
Threat intelligence platforms give security teams ways to organize indicators, reports, and case work around threat data. Compared on indicator enrichment, STIX/TAXII support, report management, and case management, the entries let you weigh how intelligence work is handled. Deployment, workflow automation, free-plan availability, and paid-from pricing add practical considerations for fitting a platform to your…
26.8
Pulse Intelligence is a free, open-source threat intelligence workspace that organizations host themselves.
Free planWebAPILinux
36.5
Free planWeb
- 4
Kaspersky Threat Intelligence Portal
Kaspersky Threat Intelligence Portal is a cloud investigation workspace for security teams working with cyberthreat intelligence.
Free planWebAPI6.5Free plan - 5
SOCRadar Extended Threat Intelligence Platform
SOCRadar Extended Threat Intelligence Platform (XTI) combines threat intelligence with external attack surface management, brand protection, and dark web monitoring.
WebAPI6.5From $4,550 a year - 6
IBM X-Force Exchange
IBM X-Force Exchange is a cloud-based threat intelligence platform for researching threats, gathering intelligence and collaborating with peers.
Free planWebAPI6.3Free plan - 7
Shodan Monitor
Shodan Monitor tracks Internet-connected devices and sends real-time notifications when unexpected devices or events appear.
WebAPILinux6.3From $69 a month - 8
Security Vision TIP
Security Vision TIP collects, analyzes and enriches cybersecurity threat data to support detection, investigation and response across an organization's infrastructure.
WebAPILinuxSelf-hosted6.2 - 9
IntelOwl
IntelOwl is an open-source threat intelligence platform that enriches files and observables from multiple sources through one API.
Free planWebAPILinuxSelf-hosted6.1Free plan - 10
ThreatForge
ThreatForge is an open-source CTI and Digital Risk Protection platform for threat monitoring, brand protection, and digital risk investigation.
Free planWebAPISelf-hosted6.1Free plan - 11
Threat Intelligence Platform
Threat Intelligence Platform combines threat intelligence feeds with in-house databases to analyze threat hosts and attack infrastructure in real time.
Free planWebAPI5.9Free plan - 12
Flashpoint Ignite
Flashpoint Ignite is a cloud platform for helping security teams identify and respond to cyber, fraud, vulnerability, physical security, and national security risks.
WebAPI5.8 - 13
Cyble Vision
Cyble Vision is a cloud threat intelligence platform for monitoring cyber, brand, third-party, and physical security risks.
WebAPI5.7 - 14
DAS-Security ATIP
DAS-Security ATIP is a threat intelligence center that combines information from multiple sources with network threat analysis and APT tracking, using Hengnao AI.
WebAPISelf-hosted5.7 - 15
OODA Intelligence
WebAPI5.7 - 16
Nirad TIP
Nirad TIP is a threat intelligence platform focused on threat actors targeting India.
WebAPISelf-hosted5.6 - 17
Threatnote
Threatnote is a web-based AI-powered unified threat management platform for enterprise security teams and managed security service providers.
Web5.6 - 18
Anomali Platform
Anomali Platform brings security data, threat intelligence, and agentic AI together for security operations.
WebAPI5.5 - 19
DomainTools Monitors
WebAPI5.4 - 20
EclecticIQ Platform
EclecticIQ Platform, also called Intelligence Center, is an AI-embedded threat intelligence platform for helping teams prioritize threats relevant to their business.
WebAPIExtensionSelf-hosted5.4 - 21
Recorded Future Intelligence Cloud
WebAPIExtension5.4 - 22
ThreatQ
WebAPILinuxSelf-hosted5.4 - 23
Yeti
Yeti is a free, open-source Forensics Intelligence platform for digital forensics and incident response teams.
WebAPISelf-hosted5.4 - 24
Intel 471 Verity471
Intel 471 Verity471 is a cloud platform that turns adversary tradecraft from criminal underground sources into pre-attack cyber intelligence.
WebAPI5.3 - 25
SİBERAT
SİBERAT AX is a self-hosted security operations platform for IT and operational technology.
Self-hosted5.3