No. 10 of 31 ·Threat Intelligence Platforms

ThreatConnect Platform

Web · Self-hosted · API

Freedom report

One barScore 5.4

Free tierNo free tier on record
Open codeNo open-source code on record
Runs widely1 of 6 device platforms
DocumentedPlans, terms and facts published

ThreatConnect Platform is ranked #10 of 31 in threat intelligence platforms on Freedom251. It runs on API, Self-hosted, Web.

ThreatConnect Platform plans and pricing

All plans

ThreatConnect Platform Not published Pricing depends on organizational needs; contact ThreatConnect for pricing threatconnect.com · 5 Oct 2026

Compared on threat intelligence platforms

Indicator enrichment: Yes
STIX/TAXII support: Yes
Report management: Yes
Workflow automation: Yes
Case management: Yes
Deployment: hybrid

Best ThreatConnect Platform alternatives

See all 20

One bar OpenAEV Free tier No. 1Free6.5 One bar IBM X-Force Exchange Free tier No. 2Free6.4 One bar ThreatForge Free tier No. 3Free6.4 One bar Security Vision TIP Paid plans No. 4—5.6 No signal SOCRadar Extended Threat Intelligence Platform Paid plans No. 5$379.17/mo5.5 No signal Anomali Platform Paid plans No. 6—5.4

The record

Purpose: ThreatConnect brings threat intelligence operations, security operations, and cyber risk management teams together for collaborative cyber defense.
AI and risk: The platform incorporates ML- and AI-powered threat intelligence and cyber risk quantification to help teams orchestrate and automate processes.
AI agents: ThreatConnect 8.0 introduced pre-built AI agents for answering questions about data, generating threat models, drafting intelligence reports, and guiding intelligence requirements.
Threat intelligence: The platform aggregates threat data, analyzes it with the CAL analytics engine, and supports prioritization and response using Playbooks.
Workflow and cases: The platform includes case management and Workflow features for managing threat intelligence and conducting security operations.
Integrations: ThreatConnect supports integrations across SIEM, endpoint and network security, malware analysis, XDR, email security, ITSM, vulnerability management, cloud, identity, and collaboration tools.
On-premises responsibility: For on-premises deployments, the customer supplies the hardware and is responsible for physical security.
API: ThreatConnect provides REST APIs, and public-cloud, dedicated-cloud, and on-premises instances expose the API at the instance URL followed by /api.
Security controls: Security Labels let users designate sensitive information and control what is shared with partners or between Communities.
Support: ThreatConnect’s Knowledge Base directs users to contact its Support team at [email protected] for help with questions or issues.
Customer base: ThreatConnect states that more than 200 enterprises and thousands of security professionals rely on the platform.

Where it ranks on Freedom251

Best Threat Intelligence Platforms in 2026#10 of 31

Is ThreatConnect Platform yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote ThreatConnect Platform

Sources

knowledge.threatconnect.com/docs/threatconnect-platform· checked 5 Oct 2026
knowledge.threatconnect.com/docs/8-0-release-notes· checked 5 Oct 2026
threatconnect.com/wp-content/uploads/2023/07/Threat-Intel· checked 5 Oct 2026
docs.threatconnect.com/en/latest/rest_api/rest_api.html· checked 5 Oct 2026
threatconnect.com/wp-content/uploads/2022/12/ThreatConnec· checked 5 Oct 2026
threatconnect.com/wp-content/uploads/Deployment-Options-D· checked 5 Oct 2026
docs.threatconnect.com/en/latest/rest_api/quick_start.html· checked 5 Oct 2026
docs.threatconnect.com/en/latest/rest_api/v3/security_labels/s· checked 5 Oct 2026
knowledge.threatconnect.com· checked 5 Oct 2026
threatconnect.com/wp-content/uploads/ThreatConnect-TEI-St· checked 5 Oct 2026