Tech riderRev. 5 Oct 2026
  1. 1Runs onAPI, self-hosted, Web
  2. 2CostsNot stated by the maker
  3. 3Indicator enrichmentYes
  4. 4STIX/TAXII supportYes
  5. 5Report managementYes
  6. 6Workflow automationYes
  7. 7Case managementYes
  8. 8Deploymenthybrid
7 lines stated Written from the maker's own pages: threatconnect.com

Overview

ThreatConnect Platform is ranked #20 of 31 in threat intelligence platforms on Specifiction. It runs on API, Self-hosted, Web.

ThreatConnect Platform plans and pricing

All plans
ThreatConnect Platform Not published Pricing depends on organizational needs; contact ThreatConnect for pricing threatconnect.com · 5 Oct 2026

Compared on threat intelligence platforms

Indicator enrichment
Yesthreatconnect.com
STIX/TAXII support
Yesthreatconnect.com
Report management
Yesthreatconnect.com
Workflow automation
Yesthreatconnect.com
Case management
Yesthreatconnect.com
Deployment
hybridthreatconnect.com

Facts

Purpose
ThreatConnect brings threat intelligence operations, security operations, and cyber risk management teams together for collaborative cyber defense.knowledge.threatconnect.com · 5 Oct 2026
AI and risk
The platform incorporates ML- and AI-powered threat intelligence and cyber risk quantification to help teams orchestrate and automate processes.knowledge.threatconnect.com · 5 Oct 2026
AI agents
ThreatConnect 8.0 introduced pre-built AI agents for answering questions about data, generating threat models, drafting intelligence reports, and guiding intelligence requirements.knowledge.threatconnect.com · 5 Oct 2026
Threat intelligence
The platform aggregates threat data, analyzes it with the CAL analytics engine, and supports prioritization and response using Playbooks.threatconnect.com · 5 Oct 2026
Workflow and cases
The platform includes case management and Workflow features for managing threat intelligence and conducting security operations.docs.threatconnect.com · 5 Oct 2026
Integrations
ThreatConnect supports integrations across SIEM, endpoint and network security, malware analysis, XDR, email security, ITSM, vulnerability management, cloud, identity, and collaboration tools.threatconnect.com · 5 Oct 2026
On-premises responsibility
For on-premises deployments, the customer supplies the hardware and is responsible for physical security.threatconnect.com · 5 Oct 2026
API
ThreatConnect provides REST APIs, and public-cloud, dedicated-cloud, and on-premises instances expose the API at the instance URL followed by /api.docs.threatconnect.com · 5 Oct 2026
Security controls
Security Labels let users designate sensitive information and control what is shared with partners or between Communities.docs.threatconnect.com · 5 Oct 2026
Support
ThreatConnect’s Knowledge Base directs users to contact its Support team at [email protected] for help with questions or issues.knowledge.threatconnect.com · 5 Oct 2026
Customer base
ThreatConnect states that more than 200 enterprises and thousands of security professionals rely on the platform.knowledge.threatconnect.com · 5 Oct 2026

Best ThreatConnect Platform alternatives

See all 20