Threat intelligence and SOAR

Comparisons of self-hosted threat intelligence platforms and security automation tools: licensing, data model, architecture and which team each one suits.

MISP

Comparisons anchored on MISP, the AGPL-3.0 threat intelligence sharing platform from the CIRCL community: against OpenCTI and Yeti.

OpenCTI

Comparisons anchored on OpenCTI, Filigran's STIX-based cyber threat intelligence platform with an Apache-2.0 Community Edition and a paid Enterprise Edition.

Shuffle

Comparisons anchored on Shuffle, the AGPL-3.0 security automation (SOAR) platform: against n8n, which is not OSI open source, and Tracecat.

Threat intelligence and SOAR compared

Roundups of open-source threat intelligence and security automation platforms, comparing three platforms each on data model, licensing and integrations.

TheHive

Comparisons anchored on TheHive, StrangeBee's incident case management platform, commercial since version 5 with a free Community plan: against open-source DFIR-IRIS, between its plans, and TheHive 4 against TheHive 5.

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.
Book a callhello@deployopen.com