Top Free Threat Intelligence Software

How Many Threat Intelligence Software Products Does G2 Track?

Total Products under this Category: 265

Category Stats (Nov 2026)

  • Average Rating: 4.59/5 (↑0.01 vs Oct 2026) The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Darktrace / EMAIL (+0.63%) - Among all products in this category, Darktrace / EMAIL recorded the largest rating increase compared to last month

Last updated: November 01, 2026

How Does G2 Rank Threat Intelligence Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 6,300+ Authentic Reviews
  • 265+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Threat Intelligence Software

G2 Grid® for Threat Intelligence Software plotting products by satisfaction and market presence

Highlighted products: CrowdStrike Falcon Endpoint Protection Platform, Recorded Future, Ivanti Autonomous Endpoint Management, Cyble, ZeroFox, CTM360, CloudSEK, and SOCRadar Extended Threat Intelligence.

Underlying data: [Grid® JSON](https://www.g2.com/categories/threat-intelligence/grids.json?focus%5B%5D=crowdstrike-falcon-endpoint-protection-platform&focus%5B%5D=recorded-future&focus%5B%5D=ivanti-autonomous-endpoint-management&focus%5B%5D=cyble&focus%5B%5D=zerofox&focus%5B%5D=ctm360-ctm360&focus%5B%5D=cloudsek&focus%5B%5D=socradar-extended-threat-intelligence)

CrowdStrike Falcon Endpoint Protection Platform

Organizations today face a serious challenge: managing numerous security vendors and tools while confronting an ever-evolving threat landscape. Sophisticated adversaries are becoming smarter, faster, and more evasive, launching complex attacks that can strike in minutes or even seconds. Traditional security approaches struggle to keep pace, leaving businesses vulnerable. The CrowdStrike Falcon Platform addresses this by offering a unified, cloud-native solution. It consolidates previously siloed security solutions and incorporates third-party data into a single platform with one efficient and resource-conscious agent, leveraging advanced AI and real-time threat intelligence. This approach simplifies security operations, speeds analyst decision making, and enhances protection to stop the breach, allowing organizations to reduce risk with less complexity and lower costs. CrowdStrike's Falcon Platform includes: - Endpoint Security: Secure the endpoint, stop the breach - Identify Protection: Identity is the front line, defend it - Next-Gen SIEM: The future of SIEM, today - Data Protection: Real-time data protection from endpoint to cloud - Exposure Management: Understand risk to stop breaches - Charlotte AI: Powering the next evolution of the SOC

Average Rating: 4.7/5.0

Total Reviews: 636

How Do G2 Users Rate CrowdStrike Falcon Endpoint Protection Platform?

  • Security Validation: 9.4/10 (Category avg: 9.1/10)
  • Intelligence Reports: 9.3/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 9.4/10 (Category avg: 8.7/10)
  • Ease of Use: 8.9/10 (Category avg: 9.1/10)

Who Is the Company Behind CrowdStrike Falcon Endpoint Protection Platform?

  • Seller: CrowdStrike
  • Company Website:
  • Year Founded: 2011
  • HQ Location: Sunnyvale, CA
  • LinkedIn® Page: www.linkedin.com
    21,058 employees on LinkedIn®
  • Ownership: NASDAQ: CRWD

Who Uses This Product?

  • Who Uses This: Security Engineer, Security Analyst
  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 49% Large, 37% Medium

What Do G2 Reviewers Say About CrowdStrike Falcon Endpoint Protection Platform?

AI-generated summary from verified user reviews

Pros
  • Users value the cloud-native architecture and effective features like workflow automation and asset management in CrowdStrike Falcon.
  • Users value the advanced threat detection capabilities of CrowdStrike Falcon, enhancing security and streamlining response efforts.
  • Users value the ease of use of CrowdStrike Falcon, benefiting from its lightweight agent and intuitive interface.
  • Users appreciate the robust security features of CrowdStrike Falcon, enhancing endpoint protection and system performance.
  • Users praise the superior detection capabilities of CrowdStrike Falcon, consistently delivering reliable and swift responses.
Cons
  • Users find that CrowdStrike Falcon's high licensing cost can be burdensome, particularly for smaller teams and organizations.
  • Users express frustration over the complexity of CrowdStrike Falcon's management console and its steep learning curve.
  • Users find the steep learning curve of CrowdStrike Falcon challenging due to its complex management console.
  • Users face limited functionality in adding hash values to CrowdStrike Falcon, which restricts monitoring capabilities.
  • Users express concern over the high pricing of CrowdStrike Falcon, especially for smaller organizations.

What Are Recent G2 Reviews of CrowdStrike Falcon Endpoint Protection Platform?

What Are G2 Users Discussing About CrowdStrike Falcon Endpoint Protection Platform?

Cyble

Cyble is an AI-native cybersecurity solution designed to help organizations enhance their digital security posture through real-time intelligence, detection, and response capabilities. By leveraging advanced agentic AI and processing vast amounts of data, Cyble empowers businesses to navigate the complexities of the cyber threat landscape effectively. Its unique approach involves collecting and enriching signals from various sources, including the dark web, deep web, and surface web, providing unparalleled visibility into emerging threats and adversarial activities. Targeting a wide range of industries, Cyble's platform is particularly beneficial for security teams, risk management professionals, and organizations that prioritize safeguarding their digital assets. The comprehensive suite of solutions offered by Cyble includes Threat Intelligence, Dark Web & Deep Web Monitoring, Attack Surface Management (ASM), and Brand Intelligence, among others. These tools are designed to address specific use cases such as identifying vulnerabilities, monitoring brand reputation, and managing third-party risks, making it an essential resource for organizations aiming to bolster their cybersecurity measures. Cyble's key features are centered around its unified platform, which integrates multiple cybersecurity functions into a single interface. This integration allows for seamless communication between different security components, enabling teams to anticipate, identify, and neutralize threats with remarkable speed and precision. For instance, the Digital Forensics & Incident Response (DFIR) capabilities equip organizations with the tools needed to investigate and respond to incidents effectively, while the DDoS Protection and Cloud Security Posture Management (CSPM) features ensure that businesses can maintain operational integrity even under attack. Moreover, Cyble stands out in its category by combining vast data intelligence with cutting-edge AI automation. This proactive defense strategy not only helps organizations react to cyber threats but also empowers them to stay ahead of potential risks. By enhancing visibility into the threat landscape and providing actionable insights, Cyble enables enterprises to protect their assets, safeguard brand trust, and operate with confidence in an increasingly complex digital environment. The result is a robust cybersecurity framework that supports organizations in navigating the ever-evolving challenges of the cyber world.

Average Rating: 4.8/5.0

Total Reviews: 146

How Do G2 Users Rate Cyble?

  • Security Validation: 9.3/10 (Category avg: 9.1/10)
  • Intelligence Reports: 9.6/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 9.3/10 (Category avg: 8.7/10)
  • Ease of Use: 9.5/10 (Category avg: 9.1/10)

Who Is the Company Behind Cyble?

  • Seller: Cyble
  • Company Website:
  • Year Founded: 2019
  • HQ Location: Alpharetta, US
  • LinkedIn® Page: www.linkedin.com
    233 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 39% Large, 17% Medium

What Do G2 Reviewers Say About Cyble?

AI-generated summary from verified user reviews

Pros
  • Users value the ease of use of Cyble, appreciating its quick setup and streamlined reporting capabilities.
  • Users highly value Cyble for its first-hand threat intelligence, enabling timely responses to potential cybersecurity risks.
  • Users value Cyble for its comprehensive threat intelligence, offering real-time data and advanced protection features for cybersecurity.
  • Users find Cyble to be invaluable for threat intelligence, providing accurate data and rapid insights for effective cybersecurity.
  • Users value Cyble's comprehensive threat detection, enabling proactive responses to security risks and enhanced visibility.
Cons
  • Users find the inefficient alerts lead to overwhelming notifications, causing critical threats to be missed.
  • Users face occasional false positives in alerts, requiring extra effort to validate findings and manage notifications.
  • Users find limited customization in Cyble restrictive, hindering their ability to tailor alerts and dashboards effectively.
  • Users highlight the need for poor customer support, citing slow responses and a lack of available resources.
  • Users feel that poor support management affects response times and overall experience with Cyble.

What Are Recent G2 Reviews of Cyble?

CloudSEK

CloudSEK is a contextual AI company that predicts Cyber Threats. We combine the power of Cyber Crime monitoring, Brand Monitoring, Attack Surface monitoring, and Supply Chain intelligence to give context to our customers’ digital risks.

Average Rating: 4.8/5.0

Total Reviews: 137

How Do G2 Users Rate CloudSEK?

  • Security Validation: 9.4/10 (Category avg: 9.1/10)
  • Intelligence Reports: 9.3/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 9.4/10 (Category avg: 8.7/10)
  • Ease of Use: 9.6/10 (Category avg: 9.1/10)

Who Is the Company Behind CloudSEK?

  • Seller: CloudSEK
  • Year Founded: 2015
  • HQ Location: Singapore, SG
  • LinkedIn® Page: www.linkedin.com
    247 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Security Analyst, Analyst
  • Top Industries: Financial Services, Airlines/Aviation
  • Company Size: 53% Large, 31% Medium

What Do G2 Reviewers Say About CloudSEK?

AI-generated summary from verified user reviews

Pros
  • Users value the ease of use of CloudSEK, enhancing efficiency in managing security threats and brand monitoring.
  • Users value the proactive monitoring of CloudSEK, enabling early detection of threats and enhancing overall security response.
  • Users commend the excellent customer support of CloudSEK, enhancing their experience in managing security risks effectively.
  • Users appreciate the timely and actionable visibility provided by CloudSEK for managing external threats effectively.
  • Users value the real-time threat intelligence of CloudSEK, enhancing their ability to respond swiftly to potential threats.
Cons
  • Users find the high number of false positives in CloudSEK alerts overwhelming and hinders effective analysis.
  • Users find the inefficient alerts overwhelming, complicating analysis and management during busy periods.
  • Users find the dashboard issues overwhelming and complex, requiring time to properly interpret the information presented.
  • Users find the inefficient alert system overwhelming due to excessive and repetitive alerts, complicating analysis and responses.
  • Users find the complex UI of CloudSEK overwhelming, requiring time to understand and navigate effectively.

What Are Recent G2 Reviews of CloudSEK?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

SOCRadar Extended Threat Intelligence

Since 2019, SOCRadar has been a pioneer in SaaS cybersecurity, now serving over 900 customers across 75 countries. Our mission is to provide accessible, proactive threat intelligence. Today, SOCRadar empowers security teams with our groundbreaking Extended Threat Intelligence (XTI) platform and is leading the charge toward the future with Agentic Threat Intelligence (ATI). What does SOCRadar do? At its core, SOCRadar provides a unified, cloud-hosted platform designed to enrich your cyber threat intelligence by contextualizing it with data from your attack surface, digital footprint, dark web exposure, and supply chain. We help security teams see what attackers see by combining External Attack Surface Management, Cyber Threat Intelligence, and Digital Risk Protection into a single, easy-to-use solution. This enables your organization to discover hidden vulnerabilities, detect data leaks, and shut down threats like phishing and brand impersonation before they can harm your business. By combining these critical security functions, SOCRadar replaces the need for separate, disconnected tools. Our holistic approach offers a streamlined, modular experience, providing a complete, real-time view of your threat landscape to help you stay ahead of attackers. Our vision for Agentic Threat Intelligence (ATI) goes beyond today's chatbots and LLMs. We are focused on making it practical for security teams to use AI agents to solve real-world problems. Our initiative will empower you to either deploy pre-built agents or easily create your own, leveraging deep integrations to automate complex tasks that were previously difficult to perform accurately. SOCRadar is dedicated to pioneering this change, making autonomous security an accessible reality for your team.

Average Rating: 4.7/5.0

Total Reviews: 125

How Do G2 Users Rate SOCRadar Extended Threat Intelligence?

  • Security Validation: 8.9/10 (Category avg: 9.1/10)
  • Intelligence Reports: 9.1/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 8.5/10 (Category avg: 8.7/10)
  • Ease of Use: 9.2/10 (Category avg: 9.1/10)

Who Is the Company Behind SOCRadar Extended Threat Intelligence?

  • Seller: SOCRadar
  • Company Website:
  • Year Founded: 2018
  • HQ Location: Delaware
  • LinkedIn® Page: www.linkedin.com
    195 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Financial Services, Information Technology and Services
  • Company Size: 42% Medium, 41% Large

What Do G2 Reviewers Say About SOCRadar Extended Threat Intelligence?

AI-generated summary from verified user reviews

Pros
  • Users value the ease of use of SOCRadar Extended Threat Intelligence, appreciating its intuitive interface and smooth integration.
  • Users value the comprehensive Threat Intelligence of SOCRadar, enabling proactive responses to potential cyber threats.
  • Users value the real-time alerts from SOCRadar, enabling proactive responses to emerging security threats.
  • Users appreciate the comprehensive threat intelligence of SOCRadar, enabling effective data leak detection and proactive risk management.
  • Users value the real-time monitoring capabilities of SOCRadar, enhancing their threat detection and incident response efficiency.
Cons
  • Users experience inefficient alerts, leading to overwhelming noise and necessitating manual verification for actionable intelligence.
  • Users experience inefficient alert systems that create noise, requiring extensive manual verification and leading to analyst fatigue.
  • Users express concerns over false positives from alerts, requiring manual verification and careful tuning to manage effectively.
  • Users feel there is insufficient information on critical CVEs and updates, limiting effective third-party risk assessments.
  • Users express concerns about limited features, particularly regarding alert noise and insufficient depth in supply chain intelligence.

What Are Recent G2 Reviews of SOCRadar Extended Threat Intelligence?

CTM360

CTM360 is a consolidated external security platform that integrates External Attack Surface Management, Digital Risk Protection, Cyber Threat Intelligence, Brand Protection & Anti-phishing, Surface, Deep, & Dark Web Monitoring, Security Ratings, Third-party risk Management, and fully managed unlimited Takedowns. As a pioneer and innovator in preemptive security, CTM360 operates as an external CTEM technology platform outside an organization’s perimeter. Seamless and turn-key, CTM360 requires no configurations, installations or inputs from the end-user, with all data pre-populated and specific to your organization. All aspects are managed by CTM360.

Average Rating: 4.6/5.0

Total Reviews: 174

How Do G2 Users Rate CTM360?

  • Security Validation: 8.6/10 (Category avg: 9.1/10)
  • Intelligence Reports: 8.7/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 8.0/10 (Category avg: 8.7/10)
  • Ease of Use: 9.3/10 (Category avg: 9.1/10)

Who Is the Company Behind CTM360?

  • Seller: CTM360
  • Company Website:
  • Year Founded: 2014
  • HQ Location: Manama, BH
  • LinkedIn® Page: www.linkedin.com
    136 employees on LinkedIn®
  • Phone: +97377360360

Who Uses This Product?

  • Top Industries: Banking, Financial Services
  • Company Size: 37% Medium, 37% Large

What Do G2 Reviewers Say About CTM360?

AI-generated summary from verified user reviews

Pros
  • Users value the responsive and reliable customer support of CTM360, enhancing their overall experience and satisfaction.
  • Users appreciate the ease of use of CTM360, finding its dashboard intuitive for all users, including executives.
  • Users value the seamless onboarding and efficient takedowns, appreciating CTM360's customer-centric approach and ease of use.
  • Users value the strong monitoring and efficient case handling, enhancing their cyber risk visibility and response capabilities.
  • Users value the high detection efficiency of CTM360, appreciating the minimal false positives and quick impersonation detection.
Cons
  • Users find CTM360 has limited features, lacking capabilities found on the web portal and needing additional tools for security.
  • Users face integration issues with CTM360, as it struggles to seamlessly connect with existing security infrastructures.
  • Users note a lack of features in CTM360, indicating a need for improvements and additional tools for better functionality.
  • Users are frustrated by the lack of integration with existing security tools, hindering effective automated security management.
  • Users note a significant lack of integrations with existing security infrastructure, limiting automated security workflows.

What Are Recent G2 Reviews of CTM360?

GreyNoise

GreyNoise provides security teams with real-time, verifiable perimeter threat intelligence. We observe and analyze both global and targeted internet scanning and exploitation traffic, and make this intelligence available to customers in real-time. This allows security teams to improve the efficiency of their SOC, perform threat hunting campaigns, and focus on critical threats to their network.

Average Rating: 4.8/5.0

Total Reviews: 128

How Do G2 Users Rate GreyNoise?

  • Security Validation: 9.1/10 (Category avg: 9.1/10)
  • Intelligence Reports: 8.7/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 9.0/10 (Category avg: 8.7/10)
  • Ease of Use: 9.6/10 (Category avg: 9.1/10)

Who Is the Company Behind GreyNoise?

  • Seller: GreyNoise
  • Company Website:
  • Year Founded: 2017
  • HQ Location: Washington, D.C.
  • LinkedIn® Page: www.linkedin.com
    64 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Network Engineer
  • Top Industries: Information Technology and Services, Financial Services
  • Company Size: 70% Medium, 34% Small

What Do G2 Reviewers Say About GreyNoise?

AI-generated summary from verified user reviews

Pros
  • Users find GreyNoise incredibly easy to use, simplifying network monitoring and enhancing their ability to track unusual traffic.
  • Users value the automation of vulnerability scans in GreyNoise, enhancing security and prioritizing critical threats effortlessly.
  • Users value the strong visibility and detailed analysis provided by GreyNoise, enhancing security and simplifying threat assessments.
  • Users value the accurate threat detection of GreyNoise, enabling informed decisions and effective vulnerability management.
  • Users value the alert system of GreyNoise, enhancing their understanding of network traffic and improving security measures.
Cons
  • Users experience slow loading times with GreyNoise, particularly when running multiple IP lookups in succession.
  • Users experience dashboard issues, including shallow historical views and confusion navigating UI and reports, affecting productivity.
  • Users experience integration issues with GreyNoise, requiring extra effort to mesh with existing security tools and workflows.
  • Users find the navigation issues in GreyNoise cumbersome, often requiring extra clicks and leading to inefficiencies.
  • Users find the inefficient alert system limits flexibility and increases configuration workload for threat notifications.

What Are Recent G2 Reviews of GreyNoise?

Group-IB Threat Intelligence

The first line of defense shouldn’t be your infrastructure; optimize your security and defeat attacks before they begin with knowledge of who, how, and when you will be attacked. Group-IB’s Threat Intelligence provides unparalleled insight into your adversaries and maximizes the performance of every component of your security ecosystem. Equip your team with it to strengthen your security with the strategic, operational and tactical intelligence. Understand threat trends and anticipate specific attacks with thorough knowledge of your threat landscape. Group-IB provides precise, tailored and reliable information for data-driven strategic decisions. - Revolutionize risk management with tailored on-demand, and regular monthly and quarterly threat reports written by analysts specifically for the board and executives - Enable growth with actionable threat intelligence before expanding into a new region/business line, and get industry-specific threats before digital transformation - Lower the cost of cyber security by avoiding unnecessary purchases and postponing upgrades by maximizing the efficacy of your existing security investments Strengthen defenses with detailed insight into attacker behaviors and infrastructure. Group-IB delivers the most comprehensive insight into past, present and future attacks targeting your organization, industry, partners and clients. - Transform security and adapt instantly, use the insights to block malicious network and endpoint activity the moment it is first observed anywhere in the world - Identify and remove weaknesses before they are exploited by arming your Red Team with detailed knowledge of threat actor’s tools, tactics and processes - Automate workflows and improve team efficiency by enriching your SIEM, SOAR, EDR and vulnerability management platforms with out-of-the-box API integrations supporting TAXII and STIX Identify attacks faster and reduce response time with comprehensive visibility of the stages of attack used by threat actors. Group-IB gives your teams the best possible insight into the methods used by adversaries. - Prioritize vulnerability patching for your technology stack with automated alerts that inform you the moment vulnerabilities are discovered or exploited by threat actors targeting your industry - Eliminate false positive alerts and focus on legitimately risky events with a database of indicators of compromise for cybercriminals in your threat landscape - Reduce response time and quickly remove attackers from your network with knowledge of the cyber kill chain used by threat actors in the MITRE ATT&CK matrix format

Average Rating: 4.7/5.0

Total Reviews: 30

How Do G2 Users Rate Group-IB Threat Intelligence?

  • Security Validation: 8.8/10 (Category avg: 9.1/10)
  • Intelligence Reports: 9.0/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 8.7/10 (Category avg: 8.7/10)
  • Ease of Use: 8.9/10 (Category avg: 9.1/10)

Who Is the Company Behind Group-IB Threat Intelligence?

  • Seller: Group-IB
  • Company Website:
  • Year Founded: 2003
  • HQ Location: Singapore
  • LinkedIn® Page: www.linkedin.com
    572 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Banking, Financial Services
  • Company Size: 60% Large, 20% Medium

What Do G2 Reviewers Say About Group-IB Threat Intelligence?

AI-generated summary from verified user reviews

Pros
  • Users value the focused threat intelligence from Group-IB, enabling swift and effective analysis of relevant threats.
  • Users value the automation features for early detection of compromised accounts, enhancing organizational security.
  • Users value the early detection capability of Group-IB Threat Intelligence for compromised accounts, enhancing organizational security.
  • Users find the ease of use of Group-IB Threat Intelligence makes it accessible while enjoying its robust features.
  • Users appreciate the strong local support and user-friendly features of Group-IB Threat Intelligence, enhancing their experience.
Cons
  • Users note that Group-IB Threat Intelligence is expensive, but it offers significant value justifying the cost.

What Are Recent G2 Reviews of Group-IB Threat Intelligence?

What Are G2 Users Discussing About Group-IB Threat Intelligence?

OpenCTI by Filigran

OpenCTI is an open-source threat intelligence platform designed to help users manage and operationalize threat intelligence effectively. Built by practitioners for practitioners, OpenCTI aims to break down data silos and ensure that threat intelligence is not only accessible but also actionable. This platform facilitates the seamless flow of threat intelligence across various security systems, making it relevant by integrating business context and enabling the creation of comprehensive threat exposure reports for enhanced executive visibility. The target audience for OpenCTI includes cybersecurity professionals, threat analysts, and organizations looking to improve their threat intelligence capabilities. By providing a centralized platform for threat data, OpenCTI allows users to visualize, link, and enrich threat intelligence, fostering collaboration among teams and enhancing the overall security posture of an organization. The platform is particularly beneficial for organizations that need to streamline their threat intelligence processes and ensure that critical information is readily available to decision-makers. Key features of OpenCTI include its unified and consistent data model based on the Structured Threat Information Expression (STIX) standard. This allows users to integrate diverse threat data sources into a single framework, making it easier to analyze and respond to threats. The platform supports various data formats and can ingest information from multiple feeds, enabling users to maintain a comprehensive view of the threat landscape. Additionally, OpenCTI offers advanced visualization tools that help users identify patterns and relationships within the data, facilitating more informed decision-making. Moreover, OpenCTI enhances the operationalization of threat intelligence by providing users with the tools to enrich their data with contextual information. This capability allows organizations to tailor their threat intelligence to their specific business needs, ensuring that the information is not only relevant but also actionable. By generating detailed threat exposure reports, OpenCTI empowers executives with the insights needed to understand their organization's risk landscape and make informed strategic decisions regarding cybersecurity investments and initiatives. Overall, OpenCTI stands out in the realm of threat intelligence platforms by prioritizing collaboration, accessibility, and contextual relevance. Its open-source nature encourages community involvement and continuous improvement, making it a valuable resource for organizations seeking to enhance their threat intelligence capabilities and strengthen their cybersecurity defenses.

Average Rating: 4.6/5.0

Total Reviews: 50

How Do G2 Users Rate OpenCTI by Filigran?

  • Intelligence Reports: 9.0/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 8.1/10 (Category avg: 8.7/10)
  • Ease of Use: 8.0/10 (Category avg: 9.1/10)

Who Is the Company Behind OpenCTI by Filigran?

  • Seller: Filigran
  • Company Website:
  • Year Founded: 2022
  • HQ Location: New York, US
  • LinkedIn® Page: www.linkedin.com
    270 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 56% Large, 28% Medium

What Do G2 Reviewers Say About OpenCTI by Filigran?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of OpenCTI, enabling seamless integration and streamlined team collaboration for effective threat analysis.
  • Users value the powerful integration and flexibility of OpenCTI, enhancing team collaboration and threat intelligence efficiency.
  • Users commend the exceptional customer support from OpenCTI, highlighting prompt responses and valuable assistance from the team.
  • Users value the bi-directional integration capabilities of OpenCTI, enhancing their intelligence workflows and centralizing data sources.
  • Users praise the excellent integration capabilities of OpenCTI, enhancing their ability to manage intelligence seamlessly.
Cons
  • Users find some feature limitations in OpenCTI, especially in dashboard flexibility and information display options.
  • Users find the complexity of self-hosting OpenCTI overwhelming, preferring a hosted option for ease of use.
  • Users report experiencing poor customer support, with inconsistent documentation and challenges in connector reliability affecting usability.
  • Users find the poor documentation of OpenCTI hinders adoption, requiring extra effort to navigate and implement features.
  • Users find dashboard issues frustrating due to limitations in customization and restricted output capabilities.

What Are Recent G2 Reviews of OpenCTI by Filigran?

UpGuard Breach Risk

UpGuard Breach Risk is an AI-powered attack surface management solution that empowers lean security teams to see what attackers see and take control of their external risk. As part of the UpGuard Cyber Risk Posture Management (CRPM) platform, it integrates seamlessly with Vendor Risk and User Risk to provide a unified defense against modern cyber threats. As organizations scale, their digital footprint expands beyond the firewall, creating dangerous blind spots. Traditional tools often miss these external signals, leaving teams vulnerable to shadow IT, exposed credentials, and brand abuse. Breach Risk solves this by combining Attack Surface Management (ASM), Digital Risk Protection (DRP), and advanced Threat Monitoring into a single, automated platform. Key Capabilities: • Continuous Attack Surface Discovery: You can’t protect what you can’t see. Breach Risk continuously maps your internet-facing assets like domains, IPs, and cloud resources, to uncover shadow IT and misconfigurations. We automatically inventory your digital footprint to close the gaps that attackers exploit, ensuring no asset goes unmonitored. • AI-Powered Threat Monitoring: Move beyond static feeds. Our Threat Monitoring engine scans the open, deep, and dark web to detect leaked employee credentials, infostealer logs, and malware signals before they are weaponized. Unlike traditional threat intelligence that floods you with raw data, our AI Threat Analyst triages signals to filter out noise and prioritize high-fidelity threats for immediate action. • Brand Protection & Disinformation Defense: Safeguard your reputation against fraud. We proactively detect lookalike domains (typosquatting) and fraudulent social media profiles used to launch phishing attacks and disinformation campaigns. Our integrated workflows help you identify and neutralize these impersonation attempts before they erode customer trust. • Actionable Remediation: We don’t just find problems; we help you fix them. Breach Risk provides guided remediation plans and integrates with your security tech stack, allowing lean teams to accelerate response times without adding headcount. By translating complex technical risks into a quantifiable Cyber Risk Score, UpGuard enables security leaders to benchmark performance, justify budget, and prove risk reduction to the board.

Average Rating: 4.4/5.0

Total Reviews: 44

How Do G2 Users Rate UpGuard Breach Risk?

  • Security Validation: 10.0/10 (Category avg: 9.1/10)
  • Intelligence Reports: 8.6/10 (Category avg: 9.1/10)
  • Ease of Use: 9.4/10 (Category avg: 9.1/10)

Who Is the Company Behind UpGuard Breach Risk?

  • Seller: UpGuard
  • Company Website:
  • Year Founded: 2012
  • HQ Location: Mountain View, California
  • LinkedIn® Page: www.linkedin.com
    402 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Financial Services, Information Technology and Services
  • Company Size: 50% Large, 39% Medium

What Are Recent G2 Reviews of UpGuard Breach Risk?

RiskProfiler - External Threat Exposure Management

RiskProfiler is an advanced cybersecurity platform purpose-built for Continuous Threat Exposure Management (CTEM). It unifies external, cloud, vendor, and brand risk intelligence into a single ecosystem—providing organizations with real-time visibility, contextual threat insights, and actionable remediation guidance. Through its integrated suite, External Attack Surface Managemnet, Third_party Risk Management, Cloud Attack Surface Management, and Brand Risk Protection; the platform continuously discovers, classifies, and evaluates external-facing assets and risks across the internet, multi-cloud environments, and third-party ecosystems. Powered by AI-enabled risk questionnaires, RiskProfiler automates the exchange, validation, and scoring of security assessments, dramatically accelerating third-party due diligence and compliance validation. The platform’s context-enriched graph engine correlates vulnerabilities, exposures, and configurations with real-world threat data, revealing how attackers might exploit an organization’s digital footprint. Its newly enhanced Cyber Threat Intelligence (CTI) module provides live insights into industry-specific attack trends, threat actor profiles, and evolving TTPs, directly embedded within the dashboard. By analyzing CVEs, IOCs, and exploit patterns, it maps these to relevant assets and potential attack paths, enabling focused, prioritized mitigation. From identifying exposed cloud resources across AWS, Azure, and Google Cloud to uncovering brand impersonation, phishing campaigns, or logo abuse, RiskProfiler delivers unified visibility and continuous monitoring that extends beyond the perimeter. It helps organizations anticipate, contextualize, and neutralize threats before they turn into breaches, transforming exposure management into a truly intelligent, predictive defense capability.

Average Rating: 5.0/5.0

Total Reviews: 135

How Do G2 Users Rate RiskProfiler - External Threat Exposure Management?

  • Security Validation: 10.0/10 (Category avg: 9.1/10)
  • Intelligence Reports: 10.0/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 10.0/10 (Category avg: 8.7/10)
  • Ease of Use: 9.9/10 (Category avg: 9.1/10)

Who Is the Company Behind RiskProfiler - External Threat Exposure Management?

  • Seller: Riskprofiler
  • Company Website:
  • Year Founded: 2019
  • HQ Location: Rock Hill , US
  • LinkedIn® Page: www.linkedin.com
    35 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Software Engineer, Security Consultant
  • Top Industries: Information Technology and Services, Design
  • Company Size: 65% Medium, 30% Small

What Do G2 Reviewers Say About RiskProfiler - External Threat Exposure Management?

AI-generated summary from verified user reviews

Pros
  • Users value the multi-dimensional threat intelligence of RiskProfiler, enabling efficient management of external threats and vendor risks.
  • Users value the seamless integration features of RiskProfiler, enhancing real-time monitoring and adaptability in their workflows.
  • Users praise the fast and efficient customer support of RiskProfiler, enhancing their overall experience and threat management.
  • Users value the ease of use of RiskProfiler, as it seamlessly integrates and enhances external threat management.
  • Users highlight the easy setup of RiskProfiler, facilitating quick implementation and seamless integration for effective threat management.
Cons
  • Users face a steep learning curve with RiskProfiler, needing sufficient time for training and customization.
  • Users find the complexity of RiskProfiler challenging, requiring time for training and adjustment to navigate effectively.
  • Users find the difficult learning curve challenging, requiring significant time and training for effective platform use.
  • Users find a steep learning curve with RiskProfiler, requiring time and training for effective use.
  • Users find the complex setup of RiskProfiler challenging, hindering smooth adoption and integration for non-specialist teams.

What Are Recent G2 Reviews of RiskProfiler - External Threat Exposure Management?

Feedly Threat Intelligence

Feedly Threat Intelligence is an AI platform for CTI teams. Track the threats aligned to your intelligence requirements, contextualize what matters, and deliver tailored intel in minutes. CTI analysts can configure Intel Agents to monitor the threat actors, malware families, vulnerabilities, industries, and geographies tied to to their intelligence requirements. These Agents collect continuously from open sources, vendor and government advisories, and dark web forums, then extract IoCs, TTPs, CVEs, and victim data into a Threat Graph. Every AI-generated finding links back to its source, so analysts can verify before they report. From there, analysts can curate, enrich, and distribute intelligence as custom reports and Slack or Teams notifications to SOC, IR, vulnerability management, and executive stakeholders. The same intelligence feeds the security stack via native integrations and a STIX 2.1 API into TIPs, SIEMs, and SOARs, and powers SOC agents, Threat hunting agents, and other agentic tooling through Feedly's MCP Server. Used by CTI teams at enterprises, MSSPs, ISACs, and financial institutions.

Average Rating: 4.7/5.0

Total Reviews: 12

How Do G2 Users Rate Feedly Threat Intelligence?

  • Intelligence Reports: 9.7/10 (Category avg: 9.1/10)
  • Ease of Use: 9.4/10 (Category avg: 9.1/10)

Who Is the Company Behind Feedly Threat Intelligence?

  • Seller: Feedly
  • Company Website:
  • HQ Location: Redwood City
  • LinkedIn® Page: www.linkedin.com
    69 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 67% Large, 25% Small

What Are Recent G2 Reviews of Feedly Threat Intelligence?

ThreatMon

ThreatMon is an AI-powered end-to-end cyber risk intelligence platform designed to assist organizations in identifying, analyzing, prioritizing, and responding to external cyber risks within their digital ecosystems. This comprehensive solution caters to security operations, threat intelligence, risk management, and executive teams, offering continuous visibility into exposed assets, emerging threats, threat actors, compromised data, and third-party risks from a unified environment. As a robust cyber risk intelligence platform, ThreatMon combines various capabilities to provide organizations with a thorough understanding of their external exposure and the evolving threat landscape. By collecting and analyzing threat data, the platform supports proactive risk identification, enabling informed security decisions that are crucial in today’s complex digital environment. This proactive approach is essential for organizations aiming to stay ahead of potential cyber threats and vulnerabilities. Key features of ThreatMon include Attack Surface Intelligence, which allows users to discover and monitor internet-facing assets, exposures, and vulnerabilities. Additionally, the platform offers Cyber Threat Intelligence and Dark Web Intelligence, enabling organizations to track threat actors, emerging threats, leaked credentials, and compromised data. Fraud Intelligence capabilities help identify phishing attempts, brand impersonation, and other external fraud-related risks, while Supply Chain Risk Management focuses on monitoring cyber risks associated with vendors and third-party ecosystems. The AI-driven analysis, risk prioritization, dashboards, alerts, and reporting features empower teams to transform complex threat data into actionable intelligence. By integrating these capabilities, ThreatMon provides security teams with a consolidated view of external cyber risks, reducing reliance on fragmented tools and enhancing operational efficiency. Continuous monitoring and contextual intelligence facilitate the identification of relevant threats, the investigation of exposures, and the prioritization of risks based on their potential impact. Furthermore, ThreatMon aids technical security teams in effectively communicating risk information to decision-makers through structured insights, dashboards, and reporting. This comprehensive visibility across the digital environment supports risk-based decision-making and fosters a more proactive, intelligence-driven approach to cyber risk management.

Average Rating: 4.9/5.0

Total Reviews: 33

How Do G2 Users Rate ThreatMon?

  • Security Validation: 9.8/10 (Category avg: 9.1/10)
  • Intelligence Reports: 9.9/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 9.6/10 (Category avg: 8.7/10)
  • Ease of Use: 9.7/10 (Category avg: 9.1/10)

Who Is the Company Behind ThreatMon?

  • Seller: ThreatMon
  • Company Website:
  • Year Founded: 2022
  • HQ Location: Sterling VA
  • LinkedIn® Page: www.linkedin.com
    43 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 42% Large, 39% Medium

What Do G2 Reviewers Say About ThreatMon?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the real-time monitoring capabilities of ThreatMon, enabling proactive management of cybersecurity threats and vulnerabilities.
  • Users value the advanced threat detection capabilities of ThreatMon, offering actionable insights and early warnings.
  • Users find ThreatMon incredibly easy to use, streamlining configuration and management with user-friendly dashboards and reports.
  • Users commend the detailed analysis of ThreatMon, enabling proactive identification of vulnerabilities and informed threat prioritization.
  • Users value the reliable threat intelligence of ThreatMon, enhancing security through proactive threat detection and response.
Cons
  • Users find the excessive notifications from ThreatMon create unnecessary work and can be overwhelming initially.
  • Users find the threat data overwhelming, making it challenging to effectively manage and understand the Mobile Application Monitoring Module.
  • Users find the limited reporting features restrictive, desiring more customization and clarity for specific needs.
  • Users find the inefficient alerts from ThreatMon create unnecessary work and can be challenging to manage.
  • Users face challenges with the inefficient alert system, finding too many alerts create unnecessary work and confusion.

What Are Recent G2 Reviews of ThreatMon?

Dataminr

Dataminr provides a revolutionary real-time AI platform for detecting events, risks and critical information from public data signals. Recognized as one of the world's leading AI companies, Dataminr enables faster real-time response and more effective risk management for public and private sector organizations, including multinational corporations, governments, NGOs, and newsrooms. Dataminr Pulse for Corporate Security With Dataminr Pulse for Corporate Security, you can detect, visualize, and respond to events and threats in real-time to: • Improve People Safety: Improve the safety of your employees, executives, customers, and contractors against external risks and threats wherever they are—in the office, working from home, or on a business trip. • Secure Facilities and Events: Protect all your global premises—including offices, manufacturing plants, warehouses, data centers, retail stores, stadiums, arenas, and temporary work locations—against external threats and hazards. • Increase Operational Resilience: Safeguard your revenue-generating activities against external threats and disruptive events that could directly or indirectly affect core business operations. Dataminr Pulse for Cyber Risk Enhance cyber resilience with Dataminr Pulse for Cyber Risk, a real-time, external cyber threat detection solution that empowers your team to: • Identify Digital Risk: Respond quickly to early warnings of threats to and exposures of your organization's digital assets. • Expose Third-Party Risk: Mitigate risk to your organization with increased visibility into threats to your subsidiaries, vendors, and service providers. • Receive Vulnerability Intelligence: Improve prioritization of patching with visibility into the full lifecycle of vulnerabilities. Get alerts about exploits, emerging and trending vulnerabilities, and more. • Respond to Cyber-Physical Risks: Respond to real-time alerts on cyber threats affecting physical assets and physical threats affecting digital assets.

Average Rating: 4.5/5.0

Total Reviews: 48

How Do G2 Users Rate Dataminr?

  • Security Validation: 7.6/10 (Category avg: 9.1/10)
  • Intelligence Reports: 7.6/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 8.0/10 (Category avg: 8.7/10)
  • Ease of Use: 8.5/10 (Category avg: 9.1/10)

Who Is the Company Behind Dataminr?

  • Seller: Dataminr
  • Year Founded: 2009
  • HQ Location: New York, NY
  • LinkedIn® Page: www.linkedin.com
    880 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Security and Investigations
  • Company Size: 56% Large, 33% Small

What Do G2 Reviewers Say About Dataminr?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Dataminr, highlighting its straightforward setup and fast real-time alerts.
  • Users value the fast and reliable alerts from Dataminr, enhancing decision-making with timely and organized information.
  • Users value the real-time monitoring capabilities of Dataminr, enhancing awareness and decision-making during critical events.
  • Users value the fast and reliable alert notifications from Dataminr, enhancing awareness and timely decision-making.
  • Users value Dataminr for its rapid and reliable detection of emerging issues, enhancing awareness and decision-making.
Cons
  • Users experience inefficient alerts that can be overwhelming, often lacking relevance and requiring better prioritization.
  • Users find complexity and information overload in Dataminr, struggling with overwhelming alerts and customization challenges.
  • Users experience false positives from Dataminr, receiving excessive irrelevant alerts that complicate decision-making and require filtering.
  • Users experience information overload with Dataminr due to excessive notifications, making it hard to focus on relevant updates.
  • Users note the learning curve with Dataminr can be steep, affecting initial usability and accessibility.

What Are Recent G2 Reviews of Dataminr?

What Are G2 Users Discussing About Dataminr?

BlackFog

Data can’t be stolen if it never leaves. BlackFog prevents data exfiltration from endpoints, stopping sensitive information from flowing to ransomware groups, AI tools, cloud services, and other unauthorized destinations. While most cybersecurity solutions focus on detecting threats, BlackFog focuses on preventing the outcome attackers want most: access to your data. Our endpoint-native platform monitors and controls outbound communications in real time, preventing data loss through ransomware, insider threats, shadow AI, and other exfiltration channels. BlackFog pioneered anti data exfiltration (ADX), a category built around a simple principle: the endpoint is the last place data can be stopped before it’s gone. By operating directly on the device, BlackFog provides visibility and control across browsers, cloud applications, AI tools, encrypted connections, and emerging AI workflows that traditional network-based approaches often miss. Today, organizations use BlackFog to prevent ransomware data theft, govern AI usage, reduce data loss risk, and protect sensitive information wherever users work. Key Capabilities * Anti data exfiltration (ADX) * Ransomware Data Theft Prevention * Shadow AI Discovery and Governance * AI Data Loss Prevention * Insider Threat Protection * Real-Time Outbound Traffic Control * Endpoint Data Protection * Compliance and Privacy Enforcement

Average Rating: 4.8/5.0

Total Reviews: 39

How Do G2 Users Rate BlackFog?

  • Security Validation: 9.8/10 (Category avg: 9.1/10)
  • Intelligence Reports: 9.7/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 9.8/10 (Category avg: 8.7/10)
  • Ease of Use: 9.2/10 (Category avg: 9.1/10)

Who Is the Company Behind BlackFog?

  • Seller: BlackFog
  • Company Website:
  • Year Founded: 2015
  • HQ Location: BlackFog Inc. Suite 1400 4 Embarcadero Ctr San Francisco CA 94111, United States
  • LinkedIn® Page: www.linkedin.com
    31 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 60% Small, 28% Medium

What Do G2 Reviewers Say About BlackFog?

AI-generated summary from verified user reviews

Pros
  • Users value the robust security features of BlackFog, effectively preventing data theft and enhancing overall protection.
  • Users feel secure and protected with BlackFog, appreciating its ability to operate quietly while preventing ransomware.
  • Users commend BlackFog for its exceptional customer support, enhancing user experience and ensuring seamless software deployment.
  • Users value the ease of use of BlackFog, praising its simple integration and straightforward management.
  • Users praise BlackFog for its effective real-time protection, ensuring data safety and peace of mind effortlessly.
Cons
  • Users feel that BlackFog lacks advanced features like scheduling reports and device management, necessitating additional solutions.
  • Users find the UI design lacking, with odd translucent windows that detract from an otherwise user-friendly experience.
  • Users find BlackFog has limited features, lacking advanced device management tools for comprehensive security needs.
  • Users often face false positives in alert management, leading to time-consuming processes and frustration in handling alerts.
  • Users find the complex user interface of BlackFog challenging, especially for newcomers unfamiliar with cybersecurity tools.

What Are Recent G2 Reviews of BlackFog?

What Are G2 Users Discussing About BlackFog?

Bitsight

Bitsight is the global leader in cyber risk intelligence, leveraging advanced AI to empower organizations with precise insights derived from the industry’s most extensive external cybersecurity dataset. With more than 3,500 customers and over 68,000 organizations active on its platform, Bitsight delivers real-time visibility into cyber risk and threat exposure, enabling teams to rapidly identify vulnerabilities, detect emerging threats, prioritize remediation, and mitigate risks across their extended attack surface. Bitsight proactively uncovers security gaps across infrastructure, cloud environments, digital identities, and third- and fourth-party ecosystems. From security operations and governance teams to executive boardrooms, Bitsight provides the unified intelligence backbone required to confidently manage cyber risk and address exposures before they impact performance.

Average Rating: 4.5/5.0

Total Reviews: 76

How Do G2 Users Rate Bitsight?

  • Security Validation: 8.3/10 (Category avg: 9.1/10)
  • Intelligence Reports: 8.8/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 7.3/10 (Category avg: 8.7/10)
  • Ease of Use: 8.5/10 (Category avg: 9.1/10)

Who Is the Company Behind Bitsight?

  • Seller: Bitsight
  • Company Website:
  • Year Founded: 2011
  • HQ Location: Boston, MA
  • LinkedIn® Page: www.linkedin.com
    694 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Hospital & Health Care
  • Company Size: 71% Large, 24% Medium

What Do G2 Reviewers Say About Bitsight?

AI-generated summary from verified user reviews

Pros
  • Users value the simple daily security score from BitSight, providing clear insights into cyber risk management.
  • Users appreciate the simple daily "security score" for cyber risk, enhancing safety and risk management easily.
  • Users appreciate the ease of use of BitSight, finding it straightforward and user-friendly for managing security risks.
  • Users value the powerful insights from BitSight's AI features and comprehensive risk monitoring capabilities.
  • Users commend the responsive customer support of Bitsight, ensuring quick assistance and effective use of the platform.
Cons
  • Users express concerns about missing features in Bitsight, particularly regarding transparency and proactive remediation management.
  • Users are frustrated by the lack of clarity in Bitsight's scoring mechanism and accuracy of findings.
  • Users experience poor notifications from Bitsight, with alerts being untimely and often missing critical information.
  • Users experience slow performance with Bitsight, facing lag and delayed updates on remediation efforts and scores.
  • Users report delay issues with BitSight's response times and vulnerability updates, impacting their overall experience.

What Are Recent G2 Reviews of Bitsight?

What Are G2 Users Discussing About Bitsight?

Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller
Updated October 22, 2025