Best Threat Intelligence Platforms in 2026
Updated
In short: OpenAEV is ranked #1 of 31 as of 4 October 2026, ahead of IBM X-Force Exchange and ThreatForge. The best-ranked option with a free plan is IBM X-Force Exchange. The lowest first paid tier on this page is SOCRadar Extended Threat Intelligence Platform at $379.17/mo.
For security teams working with threat data, a threat intelligence platform can bring indicators, reports, and cases into a workflow. Compare indicator enrichment and STIX/TAXII support with report management and case management to see which listed capabilities match your needs. Deployment options and workflow automation offer additional points to weigh, alongside free plans and paid-from pricing. SOCRadar Extended Threat Intelligence Platform and Anomali Platform lead the entries shown, followed by EclecticIQ Platform and Cyware Intelligence Exchange; ThreatQ is also near the start. Consider how your team needs to organize intelligence and handle related work when comparing these ranked options.
31 threat intelligence platforms ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
#1 OpenAEV Top pick · 7.0 Free plan · Free #2 IBM X-Force Exchange Runner-up · 6.9 Free plan · Free
#3 ThreatForge Also great · 6.8 Free plan · Free- Free planFree trial apiLinuxself-hostedWeb
- Free plan
- Yes
- Indicator enrichment
- Yes
- STIX/TAXII support
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms - Free planFree trial apiWeb
- Free plan
- Yes
- Indicator enrichment
- Yes
- STIX/TAXII support
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms - Free planFree trial apiself-hostedWeb
- Free plan
- Yes
- Indicator enrichment
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms - apiLinuxself-hostedWebWindows
- Indicator enrichment
- Yes
- STIX/TAXII support
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms - Free trial apiWeb
- Free plan
- Yes
- Indicator enrichment
- Yes
- STIX/TAXII support
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms$379.17/mofirst paid tier About SOCRadar Extended Threat Intelligence PlatformVisit site - apiWeb
- Indicator enrichment
- Yes
- STIX/TAXII support
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms - apiWeb
- Indicator enrichment
- Yes
- STIX/TAXII support
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms - Windows
- Indicator enrichment
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms - apiWeb
- Free plan
- No
- Indicator enrichment
- Yes
- STIX/TAXII support
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms - apiextensionself-hostedWeb
- Indicator enrichment
- Yes
- STIX/TAXII support
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms - Free trial apiWeb
- Indicator enrichment
- Yes
- STIX/TAXII support
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms - WebWindowsmacOSLinux
- Indicator enrichment
- Yes
- STIX/TAXII support
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms - apiWeb
- Indicator enrichment
- Yes
- STIX/TAXII support
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms - Web
- Indicator enrichment
- Yes
- STIX/TAXII support
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms -
- Indicator enrichment
- Yes
- STIX/TAXII support
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms - Web
- Free plan
- Yes
- Indicator enrichment
- Yes
- STIX/TAXII support
- Yes
- Report management
- Yes
RecognisedDocumentedFree planPlatforms - Web
- Indicator enrichment
- Yes
- STIX/TAXII support
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms -
- Indicator enrichment
- Yes
- STIX/TAXII support
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms - Web
- Indicator enrichment
- Yes
- STIX/TAXII support
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms - Web
- Indicator enrichment
- Yes
- STIX/TAXII support
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms -
- Indicator enrichment
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms - Web
- Indicator enrichment
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms - Web
- Indicator enrichment
- Yes
- STIX/TAXII support
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms - Web
- Free plan
- Yes
- Indicator enrichment
- Yes
- Report management
- Yes
RecognisedDocumentedFree planPlatforms - Web
- STIX/TAXII support
- Yes
- Report management
- Yes
- Workflow automation
- Yes
RecognisedDocumentedFree planPlatforms
Is your app on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which threat intelligence platform is ranked first on Everything Xiaomi?
OpenAEV is ranked #1 of 31 with a score of 7.0. IBM X-Force Exchange is second and ThreatForge third.
How many of these have a free plan?
3 of the 25 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, SOCRadar Extended Threat Intelligence Platform has the lowest first paid tier we found: $379.17/mo.
How is this list ranked?
Ranked on what each maker publishes: documentation depth, a free tier and the platforms it runs on. Paid placements never change a rank.





























