Threat intelligence platforms

Open-source alternatives to commercial threat intelligence platforms, run in your own infrastructure.

Recorded Future

Recorded Future, the Mastercard-owned intelligence service, against self-hosted MISP and OpenCTI as the platform that stores and shares intelligence.

Anomali

Anomali ThreatStream, including its on-premises and AirGap options, against self-hosted MISP and OpenCTI.

ThreatConnect

ThreatConnect, now part of Dataminr, offered as public cloud, dedicated cloud or on premises, against self-hosted OpenCTI and MISP.

EclecticIQ

EclecticIQ Intelligence Center, a threat intelligence platform deployed on premises on RHEL or Rocky Linux or as a cloud service. Pages here cover replacing it with self-hosted OpenCTI or MISP.

ThreatQuotient ThreatQ

ThreatQ, the threat intelligence platform from ThreatQuotient, now part of Securonix, deployed on premises or as SaaS. Pages here cover replacing it with self-hosted OpenCTI or MISP.

Cyware Intel Exchange

Cyware Intel Exchange, a threat intelligence platform widely used by ISACs and sharing communities. Pages here cover replacing it with self-hosted MISP or OpenCTI.

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.