Best threat intelligence platforms
Services that tell security teams whether an IP address, domain or indicator is malicious, with lookups, feeds, blocklists and APIs.
4 apps, ordered by visits from AppBreakup and how often our research lists each one as an alternative. Open any app to see its alternatives.
All threat intelligence platforms
- Alternatives to GreyNoise

Threat intelligence on IPs scanning and attacking the internet, from a global sensor network.
Free plan + paidWeb - Alternatives to Recorded Future

Enterprise threat intelligence platform for security, fraud and third-party risk teams
PaidWeb, Browser extension - Alternatives to Anomali

Threat intelligence platform (ThreatStream) combined with a security data lake and SIEM
PaidWeb - Alternatives to MISP

Open-source platform for storing, correlating and sharing threat intelligence and indicators of compromise.
Open sourceSelf-hostableSelf-hosted, Linux
Our picks by need
Common questions
What are the best threat intelligence platforms?
Based on how often our research lists them as alternatives and visits from AppBreakup, the leading threat intelligence platforms right now are GreyNoise, Recorded Future, Anomali and MISP.
Are there free threat intelligence platforms?
Yes. GreyNoise (free plan + paid) and MISP (open source) have a free option, out of 2 free or freemium apps we track.
Which threat intelligence platforms are open source?
MISP.