Best Threat Intelligence Platforms in 2026

In short: OpenAEV is ranked #1 of 31 as of 4 October 2026, ahead of IBM X-Force Exchange and ThreatForge. The best-ranked option with a free plan is IBM X-Force Exchange. The lowest first paid tier on this page is SOCRadar Extended Threat Intelligence Platform at $379.17/mo.

For security teams working with threat data, a threat intelligence platform can bring indicators, reports, and cases into a workflow. Compare indicator enrichment and STIX/TAXII support with report management and case management to see which listed capabilities match your needs. Deployment options and workflow automation offer additional points to weigh, alongside free plans and paid-from pricing. SOCRadar Extended Threat Intelligence Platform and Anomali Platform lead the entries shown, followed by EclecticIQ Platform and Cyware Intelligence Exchange; ThreatQ is also near the start. Consider how your team needs to organize intelligence and handle related work when comparing these ranked options.

31 threat intelligence platforms ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.

31ranked
3free plans on this page
$379.17/molowest paid tier
4 Oct 2026last checked
#1 OpenAEV Top pick · 7.0 Free plan · Free #2 IBM X-Force Exchange Runner-up · 6.9 Free plan · Free #3 ThreatForge Also great · 6.8 Free plan · Free
  1. 1 7.0
    Free planFree trial apiLinuxself-hostedWeb
    Free plan
    Yes
    Indicator enrichment
    Yes
    STIX/TAXII support
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  2. Free planFree trial apiWeb
    Free plan
    Yes
    Indicator enrichment
    Yes
    STIX/TAXII support
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  3. 3 6.8
    Free planFree trial apiself-hostedWeb
    Free plan
    Yes
    Indicator enrichment
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  4. apiLinuxself-hostedWebWindows
    Indicator enrichment
    Yes
    STIX/TAXII support
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  5. Free trial apiWeb
    Free plan
    Yes
    Indicator enrichment
    Yes
    STIX/TAXII support
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  6. apiWeb
    Indicator enrichment
    Yes
    STIX/TAXII support
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  7. apiWeb
    Indicator enrichment
    Yes
    STIX/TAXII support
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  8. Windows
    Indicator enrichment
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  9. apiWeb
    Free plan
    No
    Indicator enrichment
    Yes
    STIX/TAXII support
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  10. apiextensionself-hostedWeb
    Indicator enrichment
    Yes
    STIX/TAXII support
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  11. Free trial apiWeb
    Indicator enrichment
    Yes
    STIX/TAXII support
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  12. WebWindowsmacOSLinux
    Indicator enrichment
    Yes
    STIX/TAXII support
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  13. apiWeb
    Indicator enrichment
    Yes
    STIX/TAXII support
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  14. Web
    Indicator enrichment
    Yes
    STIX/TAXII support
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  15. Indicator enrichment
    Yes
    STIX/TAXII support
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  16. Web
    Free plan
    Yes
    Indicator enrichment
    Yes
    STIX/TAXII support
    Yes
    Report management
    Yes
    RecognisedDocumentedFree planPlatforms
  17. Web
    Indicator enrichment
    Yes
    STIX/TAXII support
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  18. 18 5.7
    Indicator enrichment
    Yes
    STIX/TAXII support
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  19. Web
    Indicator enrichment
    Yes
    STIX/TAXII support
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  20. 20 5.7
    Web
    Indicator enrichment
    Yes
    STIX/TAXII support
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  21. Indicator enrichment
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  22. 22 5.6
    Web
    Indicator enrichment
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  23. 23 5.6
    Web
    Indicator enrichment
    Yes
    STIX/TAXII support
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms
  24. Web
    Free plan
    Yes
    Indicator enrichment
    Yes
    Report management
    Yes
    RecognisedDocumentedFree planPlatforms
  25. 25 5.6
    Web
    STIX/TAXII support
    Yes
    Report management
    Yes
    Workflow automation
    Yes
    RecognisedDocumentedFree planPlatforms

Is your app on this list?

Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.

Questions about this list

Which threat intelligence platform is ranked first on Everything Xiaomi?

OpenAEV is ranked #1 of 31 with a score of 7.0. IBM X-Force Exchange is second and ThreatForge third.

How many of these have a free plan?

3 of the 25 on this page publish a free plan on their own pricing pages.

Which is the cheapest paid option?

On this page, SOCRadar Extended Threat Intelligence Platform has the lowest first paid tier we found: $379.17/mo.

How is this list ranked?

Ranked on what each maker publishes: documentation depth, a free tier and the platforms it runs on. Paid placements never change a rank.

More in IT & Infrastructure

All IT & infrastructure lists