Skip to content
SPECIFICTION
Get listed

ThreatQ

threatq.com

WebLinuxAPISelf-hosted
Visit threatq.com
Spec score 6.9 #24 of 32 in Threat Intelligence Platforms

What it is

ThreatQ is a cyber threat intelligence platform for collecting, prioritizing, analyzing and operationalizing threat information. It ingests material from commercial feeds, open sources, ISACs, partners and internal tools, then normalizes, correlates and enriches it. Threat Library applies customer-defined parameters and organizational context to score and prioritize intelligence. Adaptive Workbench supports configurable enrichment, workflows, prioritization logic, watchlists and operations using existing tools and workflows. The marketplace lists over 450 integrations, with APIs and SDKs available for customization. Integration listings have differing support designations, and ThreatQuotient does not maintain integrations published by other parties. ThreatQ v6 has standard and air-gapped installation guides. Investigations, Data Exchange and TDR Orchestrator are additional modules outside the default deployment. Authentication can use local accounts, LDAP, SAML or SSL client certificates, and account-level two-step verification is available. The default session timeout is sixty minutes of inactivity. Pricing is on request; the platform requires a license, and licenses are not perpetual.

Spec sheet

Purpose
ThreatQ is a cyber threat intelligence platform for collecting, prioritizing, analyzing, and operationalizing threat intelligence.Read 7 Oct 2026 · helpcenter.threatq.com
Intended users
ThreatQuotient describes use cases including threat hunting, vulnerability management, alert triage, threat intelligence management, and spear-phishing investigations.Read 7 Oct 2026 · threatq.com
Deployment
ThreatQ v6 provides standard and air-gapped installation guides.Read 7 Oct 2026 · helpcenter.threatq.com
Integrations
ThreatQ’s marketplace offers over 450 integrations, and the platform supports customization through APIs and SDKs.Read 7 Oct 2026 · threatq.com
Support
The ThreatQ Help Center provides product documentation, developer resources, integration information, and support contact options.Read 7 Oct 2026 · helpcenter.threatq.com
Headquarters
Ashburn, Virginia, United StatesRead 28 Sep 2026 · threatq.com
Access security
User authentication can be local or use LDAP, SAML, or SSL client certificates, and account-level two-step verification is available.Read 7 Oct 2026 · helpcenter.threatq.com
Integration support
Marketplace integrations are designated ThreatQ Supported, Developer Supported, or Not Actively Supported; ThreatQuotient does not maintain integrations published by other parties.Read 7 Oct 2026 · helpcenter.threatq.com
Intelligence processing
The platform ingests intelligence from commercial feeds, open-source sources, ISACs, partners, and internal tools, then normalizes, correlates, and enriches it.Read 7 Oct 2026 · helpcenter.threatq.com
Modules
ThreatQ Investigations, ThreatQ Data Exchange, and ThreatQ TDR Orchestrator are additional modules that are not included in the default deployment.Read 7 Oct 2026 · helpcenter.threatq.com
Prioritization
Threat Library intelligence is automatically normalized, enriched, scored, and prioritized using customer-defined parameters and organizational context.Read 7 Oct 2026 · helpcenter.threatq.com
Security reporting
ThreatQuotient says it aims to confirm vulnerability reports within 72 hours when researchers follow its responsible disclosure policy.Read 7 Oct 2026 · threatq.com
Session timeout
User sessions time out after sixty minutes of inactivity by default, and maintenance or administrative users can change or disable the timeout for a specific user.Read 7 Oct 2026 · helpcenter.threatq.com
Workflows
Adaptive Workbench supports customizable enrichment, workflows, prioritization logic, watchlists, and operations using existing tools and workflows.Read 7 Oct 2026 · helpcenter.threatq.com

Plans and prices

ThreatQ Platform Priced on request License required; licenses are not perpetual; additional modules require license updates Read 7 Oct 2026 · helpcenter.threatq.com

Every ThreatQ plan and price →

Strong points and limits

Strong points

  • Ingests intelligence from varied sources
  • Customer-defined scoring and prioritization
  • Over 450 marketplace integrations
  • Standard and air-gapped installation guides
  • LDAP, SAML and two-step verification options

Limits

  • Pricing is available on request
  • Licenses are not perpetual
  • Additional modules are outside the default deployment
  • Third-party integrations are not maintained by ThreatQuotient

Who it suits

ThreatQ suits teams handling threat hunting, vulnerability management, alert triage, threat intelligence management or spear-phishing investigations. It may fit organizations that need configurable intelligence workflows and standard or air-gapped installation.

Verdict

ThreatQ combines intelligence processing with configurable workflows and a large integration marketplace. Buyers should clarify licensing, additional-module needs and support responsibility for integrations they depend on.

Where Specifiction places it

Alternatives to ThreatQAll alternatives →

MISP From €0.61/mo · Free plan 9.0 Visit