Best Threat Intelligence Platforms in 2026
Updated
In short: OpenAEV is ranked #1 of 31 as of 4 October 2026, ahead of IBM X-Force Exchange and ThreatForge. The best-ranked option with a free plan is IBM X-Force Exchange. The lowest first paid tier on this page is SOCRadar Extended Threat Intelligence Platform at $379.17/mo.
Threat intelligence platforms help security teams bring indicators, reports, and case work into a more organized workflow. Compared on indicator enrichment, STIX/TAXII support, case management, and report management, the entries show different capabilities for handling intelligence. Deployment and workflow automation can help you assess operational fit, while free-plan availability and paid-from pricing provide cost points to compare. OpenAEV, IBM X-Force Exchange, and ThreatForge are among the named options to consider. Think about how your team gathers and enriches indicators, turns findings into reports, and tracks related cases when weighing the listed features.
31 threat intelligence platforms ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
Threat Intelligence Platforms, ranked on how quickly a newcomer can get going. 5 of the 25 on this page can be tried for free.
- 1 OpenAEVFree plan
- Free to practise on: yes
- Free trial: yes
- Well documented: yes
- Runs where you work: not on record
- 2 IBM X-Force ExchangeFree plan
- Free to practise on: yes
- Free trial: yes
- Well documented: yes
- Runs where you work: not on record
- 3 ThreatForgeFree plan
- Free to practise on: yes
- Free trial: yes
- Well documented: yes
- Runs where you work: not on record
- 4 SOCRadar Extended Threat Intelligence PlatformPaid from $379.17/mo
- Free to practise on: not on record
- Free trial: yes
- Well documented: yes
- Runs where you work: not on record
- 5 Group-IB Attack Surface Management
- Free to practise on: not on record
- Free trial: yes
- Well documented: yes
- Runs where you work: not on record
- 6 Security Vision TIP
- Free to practise on: not on record
- Free trial: not on record
- Well documented: yes
- Runs where you work: yes
- 7 Flashpoint Ignite
- Free to practise on: not on record
- Free trial: not on record
- Well documented: yes
- Runs where you work: not on record
- 8 Anomali Platform
- Free to practise on: not on record
- Free trial: not on record
- Well documented: yes
- Runs where you work: not on record
- 9 Intel 471 Verity471
- Free to practise on: not on record
- Free trial: not on record
- Well documented: yes
- Runs where you work: not on record
- 10 AhnLab V3 Internet Security
- Free to practise on: not on record
- Free trial: not on record
- Well documented: yes
- Runs where you work: not on record
- 11 Bitsight External Attack Surface Management
- Free to practise on: not on record
- Free trial: not on record
- Well documented: yes
- Runs where you work: not on record
- 12 EclecticIQ Platform
- Free to practise on: not on record
- Free trial: not on record
- Well documented: yes
- Runs where you work: not on record
- 13 Pulse Intelligence
- Free to practise on: not on record
- Free trial: not on record
- Well documented: not on record
- Runs where you work: yes
- 14 Cyble Vision
- Free to practise on: not on record
- Free trial: not on record
- Well documented: not on record
- Runs where you work: not on record
- 15 Cyware Intelligence Exchange
- Free to practise on: not on record
- Free trial: not on record
- Well documented: not on record
- Runs where you work: not on record
- 16 Kaspersky Threat Intelligence Portal
- Free to practise on: not on record
- Free trial: not on record
- Well documented: not on record
- Runs where you work: not on record
- 17 OODA Intelligence
- Free to practise on: not on record
- Free trial: not on record
- Well documented: not on record
- Runs where you work: not on record
- 18 SİBERAT
- Free to practise on: not on record
- Free trial: not on record
- Well documented: not on record
- Runs where you work: not on record
- 19 ThreatConnect Platform
- Free to practise on: not on record
- Free trial: not on record
- Well documented: not on record
- Runs where you work: not on record
- 20 ThreatQ
- Free to practise on: not on record
- Free trial: not on record
- Well documented: not on record
- Runs where you work: not on record
- 21 DAS-Security ATIP
- Free to practise on: not on record
- Free trial: not on record
- Well documented: not on record
- Runs where you work: not on record
- 22 IntelOwl
- Free to practise on: not on record
- Free trial: not on record
- Well documented: not on record
- Runs where you work: not on record
- 23 Nirad TIP
- Free to practise on: not on record
- Free trial: not on record
- Well documented: not on record
- Runs where you work: not on record
- 24 Open Threat Exchange
- Free to practise on: not on record
- Free trial: not on record
- Well documented: not on record
- Runs where you work: not on record
- 25 Threatnote
- Free to practise on: not on record
- Free trial: not on record
- Well documented: not on record
- Runs where you work: not on record
Compare all 25 in a table
| # | Platform | Score | Free plan | From | Free plan | Paid from | Indicator enrichment | STIX/TAXII support |
|---|---|---|---|---|---|---|---|---|
| 1 | OpenAEV | 7.7 | Free plan | Free | Yes | — | Yes | Yes |
| 2 | IBM X-Force Exchange | 7.6 | Free plan | Free | Yes | — | Yes | Yes |
| 3 | ThreatForge | 7.5 | Free plan | Free | Yes | — | Yes | — |
| 4 | SOCRadar Extended Threat Intelligence Platform | 7.1 | No | $379.17/mo | Yes | — | Yes | Yes |
| 5 | Group-IB Attack Surface Management | 6.7 | No | — | — | — | Yes | Yes |
| 6 | Security Vision TIP | 6.7 | No | — | — | — | Yes | Yes |
| 7 | Flashpoint Ignite | 6.4 | No | — | — | — | Yes | Yes |
| 8 | Anomali Platform | 6.3 | No | — | — | — | Yes | Yes |
| 9 | Intel 471 Verity471 | 6.3 | No | — | — | — | Yes | Yes |
| 10 | AhnLab V3 Internet Security | 6.1 | No | — | — | — | Yes | — |
| 11 | Bitsight External Attack Surface Management | 6.1 | No | — | No | — | Yes | Yes |
| 12 | EclecticIQ Platform | 6.0 | No | — | — | — | Yes | Yes |
| 13 | Pulse Intelligence | 6.0 | No | — | — | — | Yes | Yes |
| 14 | Cyble Vision | 5.8 | No | — | — | — | Yes | Yes |
| 15 | Cyware Intelligence Exchange | 5.8 | No | — | — | — | Yes | Yes |
| 16 | Kaspersky Threat Intelligence Portal | 5.8 | No | — | Yes | — | Yes | Yes |
| 17 | OODA Intelligence | 5.8 | No | — | — | — | Yes | Yes |
| 18 | SİBERAT | 5.8 | No | — | — | — | Yes | Yes |
| 19 | ThreatConnect Platform | 5.8 | No | — | — | — | Yes | Yes |
| 20 | ThreatQ | 5.8 | No | — | — | — | Yes | Yes |
| 21 | DAS-Security ATIP | 5.7 | No | — | — | — | Yes | — |
| 22 | IntelOwl | 5.7 | No | — | — | — | Yes | — |
| 23 | Nirad TIP | 5.7 | No | — | — | — | Yes | Yes |
| 24 | Open Threat Exchange | 5.7 | No | — | Yes | — | Yes | — |
| 25 | Threatnote | 5.7 | No | — | — | — | — | Yes |
Is your platform on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which threat intelligence platform is ranked first on The Geeks Club?
OpenAEV is ranked #1 of 31 with a score of 7.7. IBM X-Force Exchange is second and ThreatForge third.
How many of these have a free plan?
3 of the 25 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, SOCRadar Extended Threat Intelligence Platform has the lowest first paid tier we found: $379.17/mo.
How is this list ranked?
Ranked on how quickly a newcomer can get going: documentation depth, a free tier or trial, and the platforms it runs on. Paid placements never change a rank.