Freedom251 › Incident Management Software
TheHive
What TheHive is
TheHive is incident response software for teams that need to review and learn from security incidents. TheHive runs on Linux and the web, and its plans are self-hosted except for Platinum, which can also be deployed in the cloud. The Community plan is self-hosted and covers two users and one organization. Gold is self-hosted, priced per user, and supports up to five Cortex and MISP servers. Platinum is priced per user and includes unlimited Cortex and MISP servers, clustering support, and a GDPR feature. The service has a free plan and a 14-day trial. TheHive was founded in 2018 and is headquartered in Paris, France.
Who it suits
TheHive suits incident response teams looking for post-incident reviews and audit logs. Its plans provide self-hosted options, with cloud deployment available on Platinum.
What it does well
- Includes post-incident reviews.
- Provides audit logs.
- Community covers two users and one organization.
- Platinum supports cloud deployment.
- Platinum includes clustering support and a GDPR feature.
What to know first
- Gold and Community are self-hosted.
- Community is limited to two users.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Community | Self-hosted · 2 users · 1 organization | On request |
| Gold | Self-hosted · Paid per user · Up to 5 Cortex and MISP servers | On request |
| Platinum | Self-hosted or cloud · Paid per user · Unlimited Cortex and MISP servers · Clustering support · GDPR feature | On request |
As strangebee.com lists them, read 19 Sept 2026. The maker's own page has the final word.
Verdict
TheHive offers incident review and audit logging, with plan choices spanning self-hosted and cloud deployment.
Facts from TheHive's own pages
- Founded
- 2018 · strangebee.com, 23 Sept 2026
- Headquarters
- Paris, France · strangebee.com, 23 Sept 2026
Where TheHive stands on Freedom251
- Incident Management Software#19 of 29
- Incident Response Software#16 of 21