Freedom251 › Security Orchestration, Automation, and Response Software
ThreatConnect Platform
What ThreatConnect Platform is
ThreatConnect Platform brings threat intelligence operations, security operations, and cyber risk management teams together for collaborative cyber defense. It aggregates threat data, analyzes it with the CAL analytics engine, and supports prioritization and response through Playbooks. Case management and Workflow features support managing threat intelligence and conducting security operations. The platform incorporates machine learning and AI-powered threat intelligence and cyber risk quantification to help teams orchestrate and automate processes. ThreatConnect 8.0 introduced pre-built AI agents that can answer questions about data, generate threat models, draft intelligence reports, and guide intelligence requirements. Integrations span SIEM, endpoint and network security, malware analysis, XDR, email security, ITSM, vulnerability management, cloud, identity, and collaboration tools. Deployment options include cloud and on-premises, with orchestration across multi-cloud or hybrid environments. On-premises customers supply hardware and handle physical security. REST APIs are available at an instance URL followed by /api. Security Labels let users mark sensitive information and control sharing with partners or Communities. Pricing depends on organizational needs and is available on request.
Who it suits
ThreatConnect suits organizations coordinating threat intelligence, security operations, and cyber risk work. Its cloud and on-premises options may fit teams operating in multi-cloud or hybrid environments.
What it does well
- Aggregates and analyzes threat data with CAL.
- Includes Playbooks, case management, and Workflow.
- Pre-built AI agents address four intelligence tasks.
- Integrates across security and business tool categories.
What to know first
- Pricing is available on request.
- On-premises customers supply hardware.
- On-premises customers handle physical security.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| ThreatConnect Platform | Pricing depends on organizational needs; contact ThreatConnect for pricing | On request |
As threatconnect.com lists them, read 5 Oct 2026. The maker's own page has the final word.
Getting started
- Visit the ThreatConnect Platform website.
- Contact ThreatConnect to discuss organizational needs and pricing.
- Choose a cloud or on-premises deployment.
- For on-premises deployment, supply the hardware and manage physical security.
- Use the instance URL followed by /api to access the REST APIs.
Verdict
ThreatConnect combines threat data analysis, operational workflows, case management, and cyber risk capabilities. Organizations considering it will need to request pricing, and on-premises deployment brings hardware and physical-security responsibilities.
Questions
How is ThreatConnect priced?
Pricing depends on organizational needs. Contact ThreatConnect for pricing.
Can ThreatConnect be deployed on-premises?
Yes. It is available in cloud and on-premises deployments, with multi-environment orchestration for hybrid or multi-cloud environments. On-premises customers supply the hardware and are responsible for physical security.
What integrations does it support?
Integrations span SIEM, endpoint and network security, malware analysis, XDR, email security, ITSM, vulnerability management, cloud, identity, and collaboration tools.
Does ThreatConnect provide an API?
Yes. It provides REST APIs. Public-cloud, dedicated-cloud, and on-premises instances expose the API at the instance URL followed by /api.
What do its AI agents do?
Pre-built agents can answer questions about data, generate threat models, draft intelligence reports, and guide intelligence requirements.
How can users contact support?
ThreatConnect directs users to its Support team at [email protected] for questions or issues.
Facts from ThreatConnect Platform's own pages
- AI agents
- ThreatConnect 8.0 introduced pre-built AI agents for answering questions about data, generating threat models, drafting intelligence reports, and guiding intelligence requirements. · knowledge.threatconnect.com, 5 Oct 2026
- AI and risk
- The platform incorporates ML- and AI-powered threat intelligence and cyber risk quantification to help teams orchestrate and automate processes. · knowledge.threatconnect.com, 5 Oct 2026
- API
- ThreatConnect provides REST APIs, and public-cloud, dedicated-cloud, and on-premises instances expose the API at the instance URL followed by /api. · docs.threatconnect.com, 5 Oct 2026
- Customer base
- ThreatConnect states that more than 200 enterprises and thousands of security professionals rely on the platform. · knowledge.threatconnect.com, 5 Oct 2026
- Deployment
- ThreatConnect is available in cloud and on-premises deployments, with multi-environment orchestration for multi-cloud or hybrid environments. · threatconnect.com, 5 Oct 2026
- Integrations
- ThreatConnect supports integrations across SIEM, endpoint and network security, malware analysis, XDR, email security, ITSM, vulnerability management, cloud, identity, and collaboration tools. · threatconnect.com, 5 Oct 2026
- On-premises responsibility
- For on-premises deployments, the customer supplies the hardware and is responsible for physical security. · threatconnect.com, 5 Oct 2026
- Purpose
- ThreatConnect brings threat intelligence operations, security operations, and cyber risk management teams together for collaborative cyber defense. · knowledge.threatconnect.com, 5 Oct 2026
- Security controls
- Security Labels let users designate sensitive information and control what is shared with partners or between Communities. · docs.threatconnect.com, 5 Oct 2026
- Support
- ThreatConnect’s Knowledge Base directs users to contact its Support team at [email protected] for help with questions or issues. · knowledge.threatconnect.com, 5 Oct 2026
- Threat intelligence
- The platform aggregates threat data, analyzes it with the CAL analytics engine, and supports prioritization and response using Playbooks. · threatconnect.com, 5 Oct 2026
- Workflow and cases
- The platform includes case management and Workflow features for managing threat intelligence and conducting security operations. · docs.threatconnect.com, 5 Oct 2026