SOFTWARE/SECURITY/THREAT INTELLIGENCE PLATFORMS/BEST THREAT INTELLIGENCE PLATFORMS

Best threat intelligence platforms

10 ranked, with a plain verdict on every entry.

VERIFIEDLISTER SCORE · UPDATED REGULARLY

ANY.RUN leads this ranking for SOC teams and analysts, and enables rapid threat analysis in under two minutes through interactive virtual machines. DomainTools offers visibility into over ninety-seven percent of the Internet. ReversingLabs processes high volume file traffic at the speed of business.

RANKENTRYSCORETRENDFROM

ANY.RUNOffers global threat intelligence derived from investigations by thousands of companies100.0NEW–

DomainToolsIntegrates with AI systems via its MCP Server for LLM connectivity94.0NEW–

ReversingLabsUtilises the world's largest threat repository for intelligence94.0NEW–

CywareAutomatically ingests, deduplicates, and enriches threat data from multiple sources90.0NEW–

FlashpointThe AI tool integrates directly into AI-native workflows via the MCP standard90.0NEW–

CloudSEKDiscovers and secures exposed AI infrastructure across the internet88.0NEW–

CTM360Provides a turn-key solution with no installation required88.0NEW–

Constella IntelligenceDelivers verified identity pedigree to reduce false positives86.0NEW–

PulsediveEnables on-demand passive or active scans on various indicators86.0NEW–

BrandefenseUses AI to handle enrichment, prioritisation, and takedowns autonomously84.0NEW–

CURATED · UPDATED REGULARLY

The ranking, in detail

ANY.RUN

Interactive online malware sandbox

ANY.RUN is an interactive online malware sandbox that empowers SOC performance. It provides threat intelligence solutions to identify cyber threats early.

Best for SOC teams and analysts

100.0

DomainTools

See what others miss and stop what others cannot.

DomainTools maps the Internet to provide comprehensive DNS-focused threat intelligence data. It enables organisations to detect, analyse, and mitigate malicious domains before they cause damage.

Best for SOC teams

94.0

ReversingLabs

Trust nothing. Verify everything.

ReversingLabs provides software supply chain security and malware analysis solutions. It leverages AI-driven binary analysis to identify malicious components within software.

Best for Security and development teams

94.0

Cyware

Agentic AI-powered threat intelligence management

Cyware is an AI-powered threat intelligence platform that operationalises cyber defence through agentic automation. It unifies ingestion, enrichment, and actioning of intelligence within a single ecosystem.

Best for enterprise SOCs and threat intelligence teams

90.0

Flashpoint

The best data for the best intelligence

Flashpoint delivers industry-leading threat data and intelligence. It combines human-powered collection with technology to protect assets.

Best for Security teams

90.0

CloudSEK

Predictive attack graph platform for the AI era

CloudSEK is a predictive attack graph platform for the AI era. It uses graph-based intelligence to disrupt autonomous attacks before they occur.

Best for cybersecurity teams

88.0

CTM360

Preemptive security for external cyber risks and threats

CTM360 offers a turn-key solution requiring no installations or configuration.

Best for IT Security and Risk Management teams

88.0

Constella Intelligence

Defend your digital perimeter with identity threat intelligence

Constella Intelligence provides identity risk intelligence powered by verified breach data. It offers curated datasets for investigative tools and enterprise protection.

Best for Security operations centres

86.0

Pulsedive

Frictionless threat intelligence for growing teams

Pulsedive provides essential and timely threat intelligence that drives proactive abuse monitoring. The platform offers comprehensive enrichment and ease of integration for users.

Best for Security operations teams

86.0

Brandefense

Unified threat intelligence for external cyber risks

Brandefense is a unified threat intelligence platform combining AI-driven analytics with digital risk protection. It transforms fragmented data into contextual insights to help security teams predict threats and prioritise risk.

Best for security teams managing external cyber risks

84.0

Not on this ranking?

Positions 1, 2 and 3 are available to buy for twelve months.

Take a position

Frequently asked questions

Who are these threat intelligence platforms built for?

ANY.RUN says it is built for SOC teams and analysts, and DomainTools for SOC teams. Cyware says it is built for enterprise SOCs and threat intelligence teams.

What should a buyer check before signing up?

ANY.RUN states that the free community plan restricts users to a short sixty-second virtual machine timeout. Those are the limits each product publishes itself, not a full account of any plan.