Best Threat Intelligence Platforms in 2026
Updated
In short: OpenAEV is ranked #1 of 31 as of 7 October 2026, ahead of IBM X-Force Exchange and ThreatForge. The best-ranked option with a free plan is IBM X-Force Exchange. The lowest first paid tier on this page is SOCRadar Extended Threat Intelligence Platform at $379.17/mo.
Threat intelligence platforms support work with indicators, reports, and security cases. Compare indicator enrichment and STIX/TAXII support alongside case management and report management. Deployment options and workflow automation offer more ways to assess operational fit, while free-plan availability and the paid starting price provide cost context. OpenAEV, IBM X-Force Exchange, and ThreatForge are among the entries shown. Consider how your team handles intelligence and related workflows when weighing the capabilities listed for each platform.
31 threat intelligence platforms ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
3 of the 25 here have a free tier you can use, 0 have open-source code on record, and 0 have full bars: free, open, on most of your devices and documented.
| # | App | Signal | Free tier | Open code | Devices | From | Score |
|---|---|---|---|---|---|---|---|
| 1 | OpenAEVWeb · Linux · Self-hosted · API | Two bars | — | 2 of 6 | Free | 6.5 | |
| 2 | IBM X-Force ExchangeWeb · API | Two bars | — | 1 of 6 | Free | 6.4 | |
| 3 | ThreatForgeWeb · Self-hosted · API | Two bars | — | 1 of 6 | Free | 6.4 | |
| 4 | Security Vision TIPWeb · Windows · Linux · Self-hosted · API | Two bars | — | — | 3 of 6 | — | 5.6 |
| 5 | SOCRadar Extended Threat Intelligence PlatformWeb · API | One bar | — | — | 1 of 6 | $379.17/mo | 5.5 |
| 6 | Anomali PlatformWeb · API | One bar | — | — | 1 of 6 | — | 5.4 |
| 7 | Flashpoint IgniteWeb · API | One bar | — | — | 1 of 6 | — | 5.4 |
| 8 | Intel 471 Verity471Web · API | One bar | — | — | 1 of 6 | — | 5.4 |
| 9 | Pulse IntelligenceWeb · Windows · Mac · Linux | One bar | — | — | 4 of 6 | — | 5.4 |
| 10 | ThreatConnect PlatformWeb · Self-hosted · API | One bar | — | — | 1 of 6 | — | 5.4 |
| 11 | Cyble VisionWeb | No signal | — | — | 1 of 6 | — | 5.2 |
| 12 | Cyware Intelligence ExchangeNo platforms listed | No signal | — | — | 0 of 6 | — | 5.2 |
| 13 | IntelOwlWeb | No signal | — | — | 1 of 6 | — | 5.2 |
| 14 | Kaspersky Threat Intelligence PortalWeb | No signal | — | — | 1 of 6 | — | 5.2 |
| 15 | OODA IntelligenceWeb | No signal | — | — | 1 of 6 | — | 5.2 |
| 16 | SİBERATNo platforms listed | No signal | — | — | 0 of 6 | — | 5.2 |
| 17 | ThreatQWeb | No signal | — | — | 1 of 6 | — | 5.2 |
| 18 | DAS-Security ATIPNo platforms listed | No signal | — | — | 0 of 6 | — | 5.1 |
| 19 | MISPWeb · Linux | No signal | — | — | 2 of 6 | — | 5.1 |
| 20 | Nirad TIPWeb | No signal | — | — | 1 of 6 | — | 5.1 |
| 21 | Open Threat ExchangeWeb | No signal | — | — | 1 of 6 | — | 5.1 |
| 22 | Threat Intelligence PlatformWeb | No signal | — | — | 1 of 6 | — | 5.1 |
| 23 | ThreatnoteWeb | No signal | — | — | 1 of 6 | — | 5.1 |
| 24 | YetiWeb | No signal | — | — | 1 of 6 | — | 5.1 |
| 25 | AhnLab V3 Internet SecurityWindows | One bar | — | — | 1 of 6 | — | 5.0 |
Compare all 25 in a table
| # | App | Score | Free plan | From | Free plan | Paid from | Indicator enrichment | STIX/TAXII support |
|---|---|---|---|---|---|---|---|---|
| 1 | OpenAEV | 6.5 | Free plan | Free | Yes | — | Yes | Yes |
| 2 | IBM X-Force Exchange | 6.4 | Free plan | Free | Yes | — | Yes | Yes |
| 3 | ThreatForge | 6.4 | Free plan | Free | Yes | — | Yes | — |
| 4 | Security Vision TIP | 5.6 | No | — | — | — | Yes | Yes |
| 5 | SOCRadar Extended Threat Intelligence Platform | 5.5 | No | $379.17/mo | Yes | — | Yes | Yes |
| 6 | Anomali Platform | 5.4 | No | — | — | — | Yes | Yes |
| 7 | Flashpoint Ignite | 5.4 | No | — | — | — | Yes | Yes |
| 8 | Intel 471 Verity471 | 5.4 | No | — | — | — | Yes | Yes |
| 9 | Pulse Intelligence | 5.4 | No | — | — | — | Yes | Yes |
| 10 | ThreatConnect Platform | 5.4 | No | — | — | — | Yes | Yes |
| 11 | Cyble Vision | 5.2 | No | — | — | — | Yes | Yes |
| 12 | Cyware Intelligence Exchange | 5.2 | No | — | — | — | Yes | Yes |
| 13 | IntelOwl | 5.2 | No | — | — | — | Yes | — |
| 14 | Kaspersky Threat Intelligence Portal | 5.2 | No | — | Yes | — | Yes | Yes |
| 15 | OODA Intelligence | 5.2 | No | — | — | — | Yes | Yes |
| 16 | SİBERAT | 5.2 | No | — | — | — | Yes | Yes |
| 17 | ThreatQ | 5.2 | No | — | — | — | Yes | Yes |
| 18 | DAS-Security ATIP | 5.1 | No | — | — | — | Yes | — |
| 19 | MISP | 5.1 | No | — | Yes | — | — | — |
| 20 | Nirad TIP | 5.1 | No | — | — | — | Yes | Yes |
| 21 | Open Threat Exchange | 5.1 | No | — | Yes | — | Yes | — |
| 22 | Threat Intelligence Platform | 5.1 | No | — | Yes | — | Yes | — |
| 23 | Threatnote | 5.1 | No | — | — | — | — | Yes |
| 24 | Yeti | 5.1 | No | — | Yes | — | Yes | — |
| 25 | AhnLab V3 Internet Security | 5.0 | No | — | — | — | Yes | — |
Is your app on this list?
Numbered spots on this list can be sponsored, and a sponsored row is labelled as paid.
Questions about this list
Which threat intelligence platform is ranked first on Freedom251?
OpenAEV is ranked #1 of 31 with a score of 6.5. IBM X-Force Exchange is second and ThreatForge third.
How many of these have a free plan?
3 of the 25 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, SOCRadar Extended Threat Intelligence Platform has the lowest first paid tier we found: $379.17/mo.
How is this list ranked?
Ranked free-and-open first: a usable free tier and open-source code, then the platforms it runs on and its documentation.