# Best Threat Intelligence Software - Page 3 *By [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)* Threat intelligence software provides organizations with information related to the newest forms of cyber threats like zero-day attacks, new forms of malware, and exploits. Companies use these tools to keep their security standards up to date and fit to address new threats as they emerge. These tools can improve security performance by providing information on threats to their specific networks, infrastructure, and endpoint devices. Threat intelligence software provides information about hazards and how they function, their capabilities, and remediation techniques. IT administrators and security professionals use the delivered data to better protect their systems from emerging threats and plan for possible vulnerabilities. The tools alert users as new threats emerge and provide information detailing best practices for resolution. Many products, like [security information and event management (SIEM) software](https://www.g2.com/categories/security-information-and-event-management-siem) and [vulnerability management software](https://www.g2.com/categories/vulnerability-management), can integrate with or provide similar information as threat intelligence products. Additionally, these products continue to integrate with artificial intelligence (AI) to better tailor this complex suite of data for specific organizations’ needs. These newer capabilities can include being able to generate threat reports based on newly aggregated threat intelligence data. This data directly pertains to the organization where the software is deployed. The newer capabilities also help in creating threat detection rules based on observed patterns in malicious actors’ behaviors. To qualify for inclusion in the Threat Intelligence category, a product must: - Provide information on emerging threats and vulnerabilities - Detail remediation practices for common and emerging threats - Analyze global threats on different types of networks and devices - Cater threat information to specific IT solutions ## How Many Threat Intelligence Software Products Does G2 Track? **Total Products under this Category:** 187 ### Category Stats (May 2026) - **Average Rating**: 4.58/5 - **New Reviews This Quarter**: 169 - **Buyer Segments**: Mid-Market 54% │ Enterprise 28% │ Small-Business 18% - **Top Trending Product**: StyxView (+0.119) *Last updated: May 31, 2026* ## How Does G2 Rank Threat Intelligence Software Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 4,700+ Authentic Reviews - 187+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. ## Top Threat Intelligence Software at a Glance | # | Product | Rating | Best For | What Users Say | |---|---------|--------|----------|----------------| | 1 | [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) | 4.6/5.0 (395 reviews) | Endpoint threat detection and response | "[Strong Endpoint Protection, But Takes Time to Master](https://www.g2.com/survey_responses/crowdstrike-falcon-endpoint-protection-platform-review-12757620)" | | 2 | [Recorded Future](https://www.g2.com/products/recorded-future/reviews) | 4.6/5.0 (224 reviews) | External threat intelligence investigation | "[Real-Time, Actionable Threat Intelligence with Seamless Security Tool Compatibility](https://www.g2.com/survey_responses/recorded-future-review-12733983)" | | 3 | [CloudSEK](https://www.g2.com/products/cloudsek/reviews) | 4.8/5.0 (136 reviews) | Digital risk and brand threat monitoring | "[Comprehensive threat intelligence with an intuitive interface and top-tier support](https://www.g2.com/survey_responses/cloudsek-review-12721015)" | | 4 | [Cyble](https://www.g2.com/products/cyble/reviews) | 4.8/5.0 (141 reviews) | Dark web and brand exposure intelligence | "[Comprehensive Threat Monitoring with Actionable Alerts](https://www.g2.com/survey_responses/cyble-review-12116483)" | | 5 | [SOCRadar Extended Threat Intelligence](https://www.g2.com/products/socradar-extended-threat-intelligence/reviews) | 4.7/5.0 (103 reviews) | Attack surface and dark web risk visibility | "[Broad, Cost-Effective Threat Intelligence with Smooth Onboarding and Easy Integrations](https://www.g2.com/survey_responses/socradar-extended-threat-intelligence-review-12839690)" | | 6 | [GreyNoise](https://www.g2.com/products/greynoise/reviews) | 4.8/5.0 (128 reviews) | Internet scanning noise reduction | "[Strong IP intelligence with easy integrations into existing tools](https://www.g2.com/survey_responses/greynoise-review-12725962)" | | 7 | [ZeroFox](https://www.g2.com/products/zerofox/reviews) | 4.4/5.0 (133 reviews) | External brand impersonation protection | "[ZeroFox Fills the Gap Traditional Security Tools Miss](https://www.g2.com/survey_responses/zerofox-review-11891542)" | | 8 | [CTM360](https://www.g2.com/products/ctm360-ctm360/reviews) | 4.7/5.0 (122 reviews) | External attack surface and takedown operations | "[Exceptional Cyber Threat Intelligence Platform That Delivers Actionable Security Insights](https://www.g2.com/survey_responses/ctm360-review-11298228)" | | 9 | [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) | 4.5/5.0 (578 reviews) | Application protection with performance controls | "[Cloudflare Application Security and Performence: Reliable, Fast, and Secure Platform](https://www.g2.com/survey_responses/cloudflare-application-security-and-performance-review-12852761)" | | 10 | [Falcon Security and IT operations](https://www.g2.com/products/falcon-security-and-it-operations/reviews) | 4.6/5.0 (21 reviews) | Endpoint security and IT operations visibility | "[Visibility, Traceability and Remediation for Vulnerability and Threat Protection all in one solution](https://www.g2.com/survey_responses/falcon-security-and-it-operations-review-12029947)" | ## Which Threat Intelligence Software Is Best for Your Use Case? - **Leader:** [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - **Highest Performer:** [GreyNoise](https://www.g2.com/products/greynoise/reviews) - **Easiest to Use:** [CloudSEK](https://www.g2.com/products/cloudsek/reviews) - **Top Trending:** [Doppel](https://www.g2.com/products/doppel/reviews) - **Best Free Software:** [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) ## Which Type of Threat Intelligence Software Tools Are You Looking For? - [Threat Intelligence Software](https://www.g2.com/categories/threat-intelligence) *(current)* - [Dark Web Monitoring Tools](https://www.g2.com/categories/dark-web-monitoring) - [ Attack Surface Management Software](https://www.g2.com/categories/attack-surface-management) - [Digital Risk Protection (DRP) Platforms](https://www.g2.com/categories/digital-risk-protection-drp-platforms) --- **Sponsored** ### Pure Signal™ Scout Scout Ultimate is a web-based threat intelligence tool for security analysts of all experience levels. With a simple GUI, graphical displays, tagged results, and easy to use searches, it helps quickly determine if suspicious IPs are malicious or compromised. It is the place to start investigations for single IPs, domains, or entire CIDR ranges related to malicious activity. [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=paid_promo&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=1080&secure%5Bmedium%5D=sponsored&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=1328369&secure%5Bresource_id%5D=1080&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fthreat-intelligence%3Fpage%3D3%26tab%3Dlearn&secure%5Btoken%5D=f4b85e1db858a33407c52838f6c70d7023b6907eb5b7c8739c24bdbb96ce9266&secure%5Burl%5D=https%3A%2F%2Fwww.team-cymru.com%2Fpure-signal-scout&secure%5Burl_type%5D=paid_promos) --- ## Buyer Guide: Key Questions for Choosing Threat Intelligence Software Software ### What does Threat Intelligence Software do? When people ask me about threat intelligence software, I usually explain it as tools that help security teams detect, understand, prioritize, and respond to external cyber risks. But in practice, I see threat intelligence software as something bigger: it gives teams a clearer way to monitor threat feeds, dark web activity, exposed credentials, phishing risks, attack surfaces, brand abuse, vulnerabilities, and risk signals. Instead of reacting only after an incident grows, teams can use real-time alerts, dashboards, and actionable context to identify relevant threats earlier and respond with more confidence. ### Why do businesses use Threat Intelligence Software? From the G2 reviewer patterns I evaluated, businesses use Threat Intelligence Software because external threats are hard to track across dark web sources, domains, IPs, leaked credentials, phishing sites, and exposed assets. Users mention alert overload, limited visibility, false positives, and manual investigation work as common challenges. Common benefits include: - Earlier detection of credential leaks, phishing domains, and brand impersonation. - Clearer visibility into external attack surfaces and exposed assets. - More actionable threat context for SOC and security teams. - Faster investigation through dashboards, reports, and enriched indicators. - Better prioritization of risks, alerts, vulnerabilities, and incidents. - Support for takedown, remediation, and response workflows. ### Who uses Threat Intelligence Software primarily? After I evaluated G2 reviewer roles, I found that Threat Intelligence Software supports several security-focused groups. - **SOC analysts** use alerts, indicators, and context to investigate threats. - **Security administrators** manage configuration, workflows, and platform access. - **Threat intelligence teams** track adversaries, infrastructure, and emerging risks. - **Incident response teams** use intelligence to validate and contain threats. - **Risk and compliance teams** use reports to understand exposure and posture. - **Consultants** support client investigations, assessments, and security programs. - **Security leaders** review risk trends and operational effectiveness. ### What types of Threat Intelligence Software should I consider? From the way reviewers describe the category, buyers should compare several types: - **Threat feed platforms** that provide indicators, reputation data, and enrichment. - **Digital risk protection tools** for brand abuse, phishing, impersonation, and takedown. - **Dark web intelligence platforms** for leaked credentials, actor activity, and underground sources. - **External attack surface platforms** for exposed assets, domains, services, and vulnerabilities. - **SOC-integrated tools** that connect intelligence to SIEM, SOAR, and incident workflows. - **Open-source or community intelligence platforms** for shared indicators and research. ### What are the core features to look for in Threat Intelligence Software? When I break down G2 reviews for this category, I look closely at the themes users repeatedly mention: - Real-time alerts with severity and prioritization that help security teams focus on the most urgent threats first. - Dark web, credential leak, phishing, and brand protection coverage that help teams monitor external risks before they escalate. - External attack surface discovery and vulnerability context that help identify exposed assets and understand where the organization may be at risk. - Indicator enrichment for IPs, domains, URLs, files, and threat actors that help analysts investigate suspicious activity with more context. - Dashboards, reporting, and search tools that help teams track threats, support investigations, and communicate findings clearly. - Integrations with SIEM, SOAR, APIs, and security tools that help connect threat intelligence to existing detection and response workflows. - Takedown, remediation, and case management support that help teams move from identifying threats to resolving them. - Low false-positive rates and alert tuning controls that help reduce noise and improve trust in the platform. - Responsive support and onboarding guidance that help teams configure feeds, alerts, and workflows more effectively. ### What trends are shaping Threat Intelligence Software right now? From the G2 review patterns I evaluated, several trends stand out: - **AI-assisted intelligence** is speeding up analysis as teams use summaries, alerts, and automated context to understand threats faster. - **Actionable context is becoming more important than raw feeds** as buyers look for intelligence that helps teams prioritize and respond, not just collect more data. - **External attack surface and digital risk protection are converging** as platforms combine asset exposure, brand risk, phishing, credential leaks, and threat monitoring. - **Dark web and credential leak visibility** remain core expectations as teams look for earlier warning signs of compromised accounts or exposed business data. - **SOC workflow integrations** are becoming essential as security teams connect intelligence with SIEM, SOAR, ticketing, and incident response tools. - **Alert quality and usability** are shaping satisfaction as buyers scrutinize false positives, interface clarity, pricing, and how easy it is to act on findings. ### How should I choose Threat Intelligence Software? For me, the strongest Threat Intelligence Software fit depends on your exposure profile, investigation process, and response maturity. G2 reviewers praise products with relevant alerts, broad source coverage, clean dashboards, useful integrations, and strong support. I would also examine concerns around false positives, setup effort, learning curve, takedown speed, customization, and cost before making a final choice. --- ## What Are the Top-Rated Threat Intelligence Software Products in 2026? ### 1. [SL Professional](https://www.g2.com/products/sl-professional/reviews) **Average Rating:** 4.7/5.0 **Total Reviews:** 11 **Product Description:** Social Links is a global OSINT (Open Source Intelligence) vendor that empowers investigators and security professionals with ground-breaking AI-powered products. We assemble massive volumes of data from open sources — including social media, messengers, blockchains, and the Dark Web — to analyze and visualize a holistic picture for streamlining data-driven investigations. SL Professional is a Maltego add-on for conducting in-depth investigations across social media, messengers, blockchains, and the Dark Web. It enables real-time data collection, visualization, and analysis from hundreds of sources. #### What Are Recent G2 Reviews of SL Professional? **"[Crucial for global security](https://www.g2.com/survey_responses/sl-professional-review-8333158)"** **Rating:** 5.0/5.0 stars *— Gary S.* [Read full review](https://www.g2.com/survey_responses/sl-professional-review-8333158) --- **"[Social Links: Connecting the Dots to a Better Online Experience!](https://www.g2.com/survey_responses/sl-professional-review-8630350)"** **Rating:** 5.0/5.0 stars *— Hans B.* [Read full review](https://www.g2.com/survey_responses/sl-professional-review-8630350) --- ### 2. [U.S.T.A.](https://www.g2.com/products/u-s-t-a/reviews) **Average Rating:** 4.9/5.0 **Total Reviews:** 9 **Product Description:** PRODAFT, which stands for "PROactive Defense Against Future Threats", is a Swiss cyber threat intelligence company focusing on preventing breaches before they happen. We provide actionable insights right from the source by monitoring darkweb/deepweb channels and cybercriminals' environments. Since 2012, we have been pioneering one of the first cyberthreat intelligence platforms ever developed. Our CTI platform U.S.T.A. (Unified Security Threat Alliance) entails a unique synergy of five main modules: Deep Sight, Brand Protection, Fraud Intelligence, Security Intelligence, and Attack Surface Management. ### What Do G2 Reviewers Say About U.S.T.A.? *AI-generated summary from verified user reviews* **Pros:** - Users value the **accuracy of information** from U.S.T.A., which enhances security efforts and decision-making efficiency. - Users value the **timely alerts** from U.S.T.A., enabling proactive responses to potential cybersecurity threats before escalation. - Users value the **preventive cybersecurity solution** of U.S.T.A., seamlessly integrating robust analytics and proactive monitoring for enhanced security. - Users find U.S.T.A. incredibly **easy to use** , with a clean interface and straightforward navigation for security insights. - Users value U.S.T.A. for its **preventive cybersecurity capabilities** and proactive threat notifications, ensuring uninterrupted operations. **Cons:** - Users find the **incomplete information** in U.S.T.A. lacks depth, especially regarding global threat intelligence. - Users experience **information overload** with U.S.T.A. due to the lack of comprehensive sorting and filtering options. - Users note the need for **limited features** in U.S.T.A., wishing for enhanced filtering and data presentation options. #### What Are Recent G2 Reviews of U.S.T.A.? **"[U.S.T.A: Proactive, Verified, Actionable Threat Intelligence](https://www.g2.com/survey_responses/u-s-t-a-review-12278905)"** **Rating:** 5.0/5.0 stars *— Verified User in Retail* [Read full review](https://www.g2.com/survey_responses/u-s-t-a-review-12278905) --- **"[Strong Team & Fast, Reliable Threat Intelligence](https://www.g2.com/survey_responses/u-s-t-a-review-12275210)"** **Rating:** 5.0/5.0 stars *— Bekir K.* [Read full review](https://www.g2.com/survey_responses/u-s-t-a-review-12275210) --- ### 3. [Breach Risk](https://www.g2.com/products/breach-risk/reviews) **Average Rating:** 4.5/5.0 **Total Reviews:** 13 **Product Description:** UpGuard Breach Risk is an AI-powered attack surface management solution that empowers lean security teams to see what attackers see and take control of their external risk. As part of the UpGuard Cyber Risk Posture Management (CRPM) platform, it integrates seamlessly with Vendor Risk and User Risk to provide a unified defense against modern cyber threats. As organizations scale, their digital footprint expands beyond the firewall, creating dangerous blind spots. Traditional tools often miss these external signals, leaving teams vulnerable to shadow IT, exposed credentials, and brand abuse. Breach Risk solves this by combining Attack Surface Management (ASM), Digital Risk Protection (DRP), and advanced Threat Monitoring into a single, automated platform. Key Capabilities: • Continuous Attack Surface Discovery: You can’t protect what you can’t see. Breach Risk continuously maps your internet-facing assets like domains, IPs, and cloud resources, to uncover shadow IT and misconfigurations. We automatically inventory your digital footprint to close the gaps that attackers exploit, ensuring no asset goes unmonitored. • AI-Powered Threat Monitoring: Move beyond static feeds. Our Threat Monitoring engine scans the open, deep, and dark web to detect leaked employee credentials, infostealer logs, and malware signals before they are weaponized. Unlike traditional threat intelligence that floods you with raw data, our AI Threat Analyst triages signals to filter out noise and prioritize high-fidelity threats for immediate action. • Brand Protection & Disinformation Defense: Safeguard your reputation against fraud. We proactively detect lookalike domains (typosquatting) and fraudulent social media profiles used to launch phishing attacks and disinformation campaigns. Our integrated workflows help you identify and neutralize these impersonation attempts before they erode customer trust. • Actionable Remediation: We don’t just find problems; we help you fix them. Breach Risk provides guided remediation plans and integrates with your security tech stack, allowing lean teams to accelerate response times without adding headcount. By translating complex technical risks into a quantifiable Cyber Risk Score, UpGuard enables security leaders to benchmark performance, justify budget, and prove risk reduction to the board. #### What Are Recent G2 Reviews of Breach Risk? **"[Efficient Risk Tracking and Security Management](https://www.g2.com/survey_responses/breach-risk-review-12877725)"** **Rating:** 4.5/5.0 stars *— Verified User in Information Technology and Services* [Read full review](https://www.g2.com/survey_responses/breach-risk-review-12877725) --- **"[A GRC Analyst’s Take on UpGuard Breach Risk](https://www.g2.com/survey_responses/breach-risk-review-12877070)"** **Rating:** 5.0/5.0 stars *— Jarvin A.* [Read full review](https://www.g2.com/survey_responses/breach-risk-review-12877070) --- ### 4. [LMNTRIX](https://www.g2.com/products/lmntrix/reviews) **Average Rating:** 4.9/5.0 **Total Reviews:** 10 **Product Description:** LMNTRIX has reimagined cybersecurity, turning the tables in favor of the defenders once again. We have cut out the bloat of SIEM, log analysis and false positives resulting in alert fatigue, and we created new methods for confounding even the most advanced attackers. We believe that in a time of continuous compromise you need continuous response – not incident response. Our approach turns inward and assumes that you’re already breached and that you’re continually going to be breached, so we take a pro-active, offensive, hunting, and adversarial pursuit stance as opposed to a reactive, defensive, legacy stance with analysts staring at a SIEM console wishing they could detect an APT. LMNTRIX Active Defense is a best in class Managed Detection & Response (MDR) service that detects and responds to advanced threats that bypass perimeter controls. We combine deep expertise with cutting-edge technology, leading intelligence, and advanced analytics to detect and investigate threats with great speed, accuracy, and focus. The outcomes we deliver clients are validated breaches that are investigated, contained and remediated. All incidents are aligned to the kill chain and Mitre ATT&CK frameworks and contain detailed investigative actions and recommendations that your organisation follows to protect against the unknown, insider threat and malicious attacker. Active Defense is made up of 3 elements: LMNTRIX GRID (XDR) – This is our cyber defence SaaS platform that provides a new utility model for enterprise security, delivering pervasive visibility, automated threat detection & prevention, threat hunting, investigation, validation and unlimited forensic exploration on-demand and entirely from the cloud. It is a single investigative platform for insights into threats on enterprise, cloud, hybrid, and industrial control systems (ICS) networks. The LMNTRIX Grid delivers unique advantages over current network security solutions. It is a holistic and multi-vector platform with unlimited retention window of full-fidelity network traffic, innovative security visualizations, and the ease and cost-savings of an on-demand deployment model. LMNTRIX Technology Stack –This is our powerful proprietary threat detection stack that is deployed onsite, behind existing controls. It combines multiple threat detection systems, with deceptions everywhere, machine learning, threat intel, correlation, static file analysis, heuristics, and behavior and anomaly detection techniques to find threats in real-time. It decreases alarm fatigue by automatically determining which alerts should be elevated to security events, and reduces false positives by requiring consensus across detection. LMNTRIX Cyber Defense Centers - While these technologies are without peer, what sets us apart from the pack is our team of cybersecurity professionals who continually monitor our clients environments 24x7 while simultaneously hunting threats internally as well as monitoring developments on the deep and dark web. Our CDC's are a global network of cyber defense centers with highly trained and certified intrusion analysts who provide constant vigilance and on-demand analysis of your networks. Our intrusion analysts monitor your networks and endpoints 24x7, applying the latest intelligence and proprietary methodologies to look for signs of compromise. When a potential compromise is detected, the team performs an in- depth analysis on affected systems to confirm the breach. When data theft or lateral movement is imminent, our automated perimeter containment blocks attackers in their tracks while endpoint containment feature makes immediate reaction possible by quarantining affected hosts, whether they are on or off your corporate network, significantly reducing or eliminating the consequences of a breach. #### What Are Recent G2 Reviews of LMNTRIX? **"[Ultimate tool for Cyber Defense](https://www.g2.com/survey_responses/lmntrix-review-8328112)"** **Rating:** 4.5/5.0 stars *— Prakash Gupta K.* [Read full review](https://www.g2.com/survey_responses/lmntrix-review-8328112) --- **"[Good level of security service !](https://www.g2.com/survey_responses/lmntrix-review-7834658)"** **Rating:** 4.5/5.0 stars *— Verified User in Computer & Network Security* [Read full review](https://www.g2.com/survey_responses/lmntrix-review-7834658) --- #### What Are G2 Users Discussing About LMNTRIX? - [What is LMNTRIX used for?](https://www.g2.com/discussions/what-is-lmntrix-used-for) ### 5. [Criminal IP TI](https://www.g2.com/products/criminal-ip-ti/reviews) **Average Rating:** 4.6/5.0 **Total Reviews:** 7 **Product Description:** Criminal IP equips security teams with the actionable Threat Intelligence needed to proactively identify, analyze, and respond to emerging threats. Powered by AI and OSINT, it delivers threat scoring, reputation data, and real-time detection of a wide array of malicious indicators, ranging from C2 servers and IOCs to masking services like VPNs, proxies, and anonymous VPNs, across IPs, domains, and URLs. Its API-first architecture ensures seamless integration into security workflows to boost visibility, automation, and response. ### What Do G2 Reviewers Say About Criminal IP TI? *AI-generated summary from verified user reviews* **Pros:** - Users praise the **automation capabilities** of Criminal IP TI, enhancing real-time threat data visualization and navigation. - Users appreciate the **ease of use** of Criminal IP TI, finding its interface intuitive and navigation straightforward. - Users appreciate the **intuitive data presentation and seamless API connectivity** of Criminal IP TI, enhancing their threat management experience. - Users commend the **quick response time** of Criminal IP TI, enhancing real-time threat visualization and actionability. - Users love the **seamless setup** of Criminal IP TI, praising its simplicity and ease of integration into their systems. **Cons:** - Users experience a **difficult learning curve** with advanced search filters, necessitating better onboarding for beginners. - Users experience a **steep learning curve** with Criminal IP TI's advanced features, making onboarding for newcomers challenging. - Users experience **slow loading** with Criminal IP TI, noting occasional lags that hinder real-time data access. #### What Are Recent G2 Reviews of Criminal IP TI? **"[Effortless Threat Detection with Stellar API Integration](https://www.g2.com/survey_responses/criminal-ip-ti-review-12656257)"** **Rating:** 4.5/5.0 stars *— Jieun P.* [Read full review](https://www.g2.com/survey_responses/criminal-ip-ti-review-12656257) --- **"[Seamless OSINT with Outstanding Results](https://www.g2.com/survey_responses/criminal-ip-ti-review-12602869)"** **Rating:** 5.0/5.0 stars *— Julio D.* [Read full review](https://www.g2.com/survey_responses/criminal-ip-ti-review-12602869) --- ### 6. [Cyber Hawk](https://www.g2.com/products/cyber-hawk/reviews) **Average Rating:** 4.0/5.0 **Total Reviews:** 9 **Product Description:** Cyber Hawk detects the critical changes inside the networks you manage that create risk. Whether caused by hackers, internal bad actors, or honest mistakes, Cyber Hawk will sound the alarm on hard-to-detect critical changes in your network. Avoid the negative consequences of unplanned or unauthorized changes in your IT environment. Catch unauthorized log-in attempts, track suspicious changes to network settings, and identify anomalous user behavior ### What Do G2 Reviewers Say About Cyber Hawk? *AI-generated summary from verified user reviews* **Pros:** - Users value the **cloud-based monitoring** of Cyber Hawk, enhancing asset visibility and optimizing results for industrial sites. - Users value the **cloud-based monitoring** of Cyber Hawk, enhancing asset management with actionable insights for better outcomes. - Users love the **ease of use** of Cyber Hawk, making threat detection and management straightforward and efficient. - Users value the **actionable insights** from Cyber Hawk, enhancing monitoring and optimizing results for critical assets. - Users value the **comprehensive monitoring** capabilities of Cyber Hawk, enhancing critical asset oversight and decision-making. **Cons:** - Users report **slow resolution times** for complaint tickets, which can hinder timely problem-solving and satisfaction. - Users experience **slow loading** times, which can hinder the overall effectiveness of Cyber Hawk. - Users experience **slow performance** when it comes to resolving complaint tickets, leading to frustration in addressing issues. #### What Are Recent G2 Reviews of Cyber Hawk? **"[CyberHawk's Solutions](https://www.g2.com/survey_responses/cyber-hawk-review-10304431)"** **Rating:** 5.0/5.0 stars *— Pooja S.* [Read full review](https://www.g2.com/survey_responses/cyber-hawk-review-10304431) --- **"[Cyberhawk: Eagle eye security at your fingertips!](https://www.g2.com/survey_responses/cyber-hawk-review-9926089)"** **Rating:** 4.5/5.0 stars *— Seema S.* [Read full review](https://www.g2.com/survey_responses/cyber-hawk-review-9926089) --- ### 7. [Palo Alto Networks Cortex XSOAR](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/reviews) **Average Rating:** 4.6/5.0 **Total Reviews:** 28 **Product Description:** Palo Alto Networks' Cortex XSOAR is a comprehensive Security Orchestration, Automation, and Response (SOAR) platform designed to streamline and enhance security operations. By integrating automation, case management, real-time collaboration, and threat intelligence management, Cortex XSOAR empowers security teams to respond to incidents more efficiently and effectively. Key Features and Functionality: - Process Standardization and Automation: Cortex XSOAR offers over 270 out-of-the-box playbooks, enabling the automation of numerous security use cases. These playbooks orchestrate response actions across more than 350 third-party products, facilitating seamless integration and operational consistency. - Security-Focused Case Management: The platform unifies alerts, incidents, and indicators from various sources into a single case management framework. This consolidation accelerates incident response by providing a comprehensive view of security events. - Real-Time Collaboration: Cortex XSOAR includes a Virtual War Room equipped with built-in ChatOps and a command-line interface. This feature allows security teams to collaborate in real time, execute commands across the entire product stack, and manage incidents more effectively. - Threat Intelligence Management: The platform aggregates disparate threat intelligence sources, customizes and scores feeds, and matches indicators against the organization's specific environment. This capability enables security teams to take informed actions swiftly. Primary Value and Problem Solving: Cortex XSOAR addresses the challenges faced by security teams, such as the overwhelming volume of alerts and the need for rapid incident response. By automating repetitive tasks and standardizing processes, the platform reduces the time spent on incidents by up to 90%, allowing analysts to focus on critical threats. The integration of threat intelligence management with SOAR capabilities ensures that organizations can operationalize threat feeds effectively, enhancing their overall security posture. Additionally, the platform's extensive integration ecosystem, with over 360 third-party integrations, enables organizations to orchestrate complex workflows across their existing security infrastructure without extensive custom development. ### What Do G2 Reviewers Say About Palo Alto Networks Cortex XSOAR? *AI-generated summary from verified user reviews* **Pros:** - Users value the **customizability and automation capabilities** of Cortex XSOAR for effective incident management and support. - Users appreciate the **great UI** of Palo Alto Networks Cortex XSOAR, enhancing usability and efficiency in incident response. - Users appreciate the **accuracy of information** in Palo Alto Networks Cortex XSOAR, enhancing security and efficiency in operations. - Users value the **powerful automation** features of Palo Alto Networks Cortex XSOAR, streamlining incident response effectively. - Users appreciate the **direct customer support** of Palo Alto Networks Cortex XSOAR, enhancing their incident response efficiency. **Cons:** - Users note a **steep learning curve** with Palo Alto Networks Cortex XSOAR, requiring significant time to become proficient. - Users feel the need for improved reporting and express a desire for **more customization options** in Cortex XSOAR. - Users find **logging issues** challenging as results are hard to read without opening in a new tab. - Users find it challenging to read logs quickly due to **log management issues** , requiring them to open new tabs for clarity. - Users desire improved **reporting** and more customization options for better functionality in Cortex XSOAR. #### What Are Recent G2 Reviews of Palo Alto Networks Cortex XSOAR? **"[Unlocking Security Operations automation with Cortex XSOAR](https://www.g2.com/survey_responses/palo-alto-networks-cortex-xsoar-review-10447892)"** **Rating:** 5.0/5.0 stars *— Jai P.* [Read full review](https://www.g2.com/survey_responses/palo-alto-networks-cortex-xsoar-review-10447892) --- **"[Powerful Tool with Clean Data and Seamless Integrations](https://www.g2.com/survey_responses/palo-alto-networks-cortex-xsoar-review-11967977)"** **Rating:** 5.0/5.0 stars *— Pablo V.* [Read full review](https://www.g2.com/survey_responses/palo-alto-networks-cortex-xsoar-review-11967977) --- #### What Are G2 Users Discussing About Palo Alto Networks Cortex XSOAR? - [What is Palo Alto Networks Cortex XSOAR used for?](https://www.g2.com/discussions/what-is-palo-alto-networks-cortex-xsoar-used-for) ### 8. [ReversingLabs](https://www.g2.com/products/reversinglabs/reviews) **Average Rating:** 4.7/5.0 **Total Reviews:** 10 **Product Description:** ReversingLabs is the trusted name in file and software security. We provide the modern cybersecurity platform to verify and deliver safe binaries. Trusted by the Fortune 500 and leading cybersecurity vendors, RL Spectra Core powers the software supply chain and file security insights, tracking over 422 billion searchable files with the ability to deconstruct full software binaries in seconds to minutes. Only ReversingLabs provides that final exam to determine whether a single file or full software binary presents a risk to your organization and your customers. ### What Do G2 Reviewers Say About ReversingLabs? *AI-generated summary from verified user reviews* **Pros:** - Users highly value the **accuracy of information** provided by ReversingLabs, supported by an extensive file repository. - Users praise the **excellent customer support** from ReversingLabs, highlighting their responsiveness and helpfulness during onboarding. - Users commend ReversingLabs for its **efficient onboarding and setup process** , ensuring a seamless transition and effective risk management. - Users value the **effective prioritization of risk management** and support from ReversingLabs for seamless integration. - Users commend ReversingLabs for its **high reliability** , ensuring efficient support and seamless functionality throughout onboarding. **Cons:** - Users find the **usage endpoints confusing** , which complicates their ability to effectively monitor their usage. - Users find the **interface confusing** , particularly with endpoints for checking usage, affecting their experience negatively. - Users find the **navigation issues** in ReversingLabs challenging, especially with confusing endpoints for checking usage. - Users feel the **UI could be improved** , though it does not significantly hinder their overall experience. #### What Are Recent G2 Reviews of ReversingLabs? **"[Deep File Reputation Intelligence with Excellent Format Coverage](https://www.g2.com/survey_responses/reversinglabs-review-12547875)"** **Rating:** 5.0/5.0 stars *— Verified User in Computer Software* [Read full review](https://www.g2.com/survey_responses/reversinglabs-review-12547875) --- **"[Very good, with small drawbacks in the interface](https://www.g2.com/survey_responses/reversinglabs-review-12310983)"** **Rating:** 4.5/5.0 stars *— Verified User in Computer Software* [Read full review](https://www.g2.com/survey_responses/reversinglabs-review-12310983) --- ### 9. [ThreatWorx](https://www.g2.com/products/threatworx/reviews) **Average Rating:** 4.7/5.0 **Total Reviews:** 9 **Product Description:** ThreatWorx is a next-gen proactive cybersecurity platform that protects servers, cloud, containers and source code from malware and vulnerabilities without scanner appliances or bulky agents. ThreatWorx serves multiple use cases including threat intelligence, DevSecOps, cloud security, vulnerability management and third party risk assessment. #### What Are Recent G2 Reviews of ThreatWorx? **"[Amazing security technology](https://www.g2.com/survey_responses/threatworx-review-4936116)"** **Rating:** 5.0/5.0 stars *— Parikshit S.* [Read full review](https://www.g2.com/survey_responses/threatworx-review-4936116) --- **"[very good product](https://www.g2.com/survey_responses/threatworx-review-6954316)"** **Rating:** 4.5/5.0 stars *— Yogesh S.* [Read full review](https://www.g2.com/survey_responses/threatworx-review-6954316) --- #### What Are G2 Users Discussing About ThreatWorx? - [What is ThreatWorx used for?](https://www.g2.com/discussions/what-is-threatworx-used-for) ### 10. [Bitdefender Advanced Threat Intelligence](https://www.g2.com/products/bitdefender-advanced-threat-intelligence/reviews) **Average Rating:** 4.7/5.0 **Total Reviews:** 6 **Product Description:** Bitdefender Advanced Threat Intelligence is a comprehensive cybersecurity solution designed to provide organizations with real-time, actionable insights into the global threat landscape. By leveraging a vast network of over 500 million sensors and advanced analytics, it delivers enriched intelligence on sophisticated threats, including Advanced Persistent Threats (APTs, ransomware, phishing schemes, and command-and-control infrastructures. This empowers security teams to proactively detect, analyze, and respond to emerging cyber threats, enhancing overall security posture and operational efficiency. Key Features and Functionality: - Unique Insights into Emerging Threats: Offers early detection of hard-to-identify APTs and command-and-control servers, enabling preemptive defense measures. - High-Quality Intelligence Sources: Utilizes data from a global telemetry network, including endpoints, web crawlers, email traps, honeypots, and monitored botnets, ensuring accurate and comprehensive threat information. - Expert Cyber-Threat Analysis: Backed by Bitdefender's Cyber-Threat Intelligence Labs, comprising over 800 researchers and developers employing AI, deep learning, and anomaly detection to maintain precise threat intelligence feeds. - Seamless Integration: Compatible with leading threat intelligence platforms (TIPs, Security Information and Event Management (SIEM systems, and Security Orchestration, Automation, and Response (SOAR applications, facilitating streamlined operations. Primary Value and User Solutions: Bitdefender Advanced Threat Intelligence addresses critical cybersecurity challenges by providing organizations with timely and context-rich threat data. This enables security teams to prioritize alerts effectively, reduce false positives, and accelerate incident response times. By integrating seamlessly with existing security infrastructures, it enhances threat detection capabilities and supports proactive defense strategies, ultimately safeguarding sensitive data and maintaining business continuity. ### What Do G2 Reviewers Say About Bitdefender Advanced Threat Intelligence? *AI-generated summary from verified user reviews* **Pros:** - Users value the **real-time alerts and insights** provided by Bitdefender, enhancing threat detection and response efficiency. - Users appreciate the **automation for threat detection and remediation** in Bitdefender, enhancing efficiency and response times. - Users are impressed by the **global sensor network** of Bitdefender Advanced Threat Intelligence, enhancing their threat detection capabilities. - Users commend the **global sensor network** of Bitdefender, enhancing threat detection and providing valuable insights. - Users value the **scanning efficiency** of Bitdefender, benefiting from quick detection and detailed threat insights. **Cons:** - Users find the **complex implementation** process challenging, especially for organizations lacking dedicated security teams. - Users find the **data output overwhelming** for organizations without a dedicated SOC, complicating threat management. #### What Are Recent G2 Reviews of Bitdefender Advanced Threat Intelligence? **"[Accurate and Responsive](https://www.g2.com/survey_responses/bitdefender-advanced-threat-intelligence-review-9948018)"** **Rating:** 5.0/5.0 stars *— Linda R.* [Read full review](https://www.g2.com/survey_responses/bitdefender-advanced-threat-intelligence-review-9948018) --- **"[Manage cyber threats - Prevention and detection](https://www.g2.com/survey_responses/bitdefender-advanced-threat-intelligence-review-10026063)"** **Rating:** 4.0/5.0 stars *— Kamakshi S.* [Read full review](https://www.g2.com/survey_responses/bitdefender-advanced-threat-intelligence-review-10026063) --- #### What Are G2 Users Discussing About Bitdefender Advanced Threat Intelligence? - [What does a threat intelligence platform do?](https://www.g2.com/discussions/what-does-a-threat-intelligence-platform-do) - [What are the 3 types of threat intelligence data?](https://www.g2.com/discussions/bitdefender-advanced-threat-intelligence-what-are-the-3-types-of-threat-intelligence-data) - [What is advanced threat intelligence?](https://www.g2.com/discussions/what-is-advanced-threat-intelligence) ### 11. [MetaDefender](https://www.g2.com/products/metadefender/reviews) **Average Rating:** 4.4/5.0 **Total Reviews:** 15 **Product Description:** MetaDefender Platform is an advanced threat prevention solution that lets organizations embed multi-layer file security into existing applications and security architectures, especially to protect common attack vectors like malicious file uploads, untrusted file transfers, and file-based supply chain risk. It’s designed for environments that need stronger protection against highly evasive malware, zero-day attacks, and APTs, including IT and OT/critical infrastructure use cases. MetaDefender easily integrates into your existing IT solutions and can be deployed on-premises (including air-gapped), in cloud/IaaS, or as SaaS. We offer flexible implementation options for ICAP enabled devices, containerized applications, AWS, Azure, NAS/Storage workflows and Rest API. Overview: Multi-engine malware scanning: Quickly scan files with 30+ antivirus engines and detect over 99% of known malware. Deep CDR (Content Disarm & Reconstruction): Recursively sanitize and rebuild 200+ file types to neutralize embedded threats while maintaining file usability, with extensive reconstruction and file conversion options. Proactive DLP: Remove, redact, or watermark sensitive data in files before content enters or leaves the organization; also supports AI-powered document classification. File-based Vulnerability Assessment: Identify vulnerabilities in installers, binaries, and applications before they are installed/executed and reduce exposure to known software flaws. Threat intelligence-driven detection: Identify malicious domains and IPs embedded in documents and support near real-time blocking using curated threat intelligence. Adaptive threat analysis (sandboxing): Detonate and analyze suspicious files in a controlled environment and improve zero-day detection. SBOM & software supply chain visibility: Generate SBOMs and identify vulnerabilities in source code and containers. Reputation Engine: Use file hash reputation (known good/known bad/unknown) and advanced analysis to remediate false positives faster. Visibility, reporting, and policy control: Gain operational visibility, use automated reports for remediation, and configure workflow/analysis rules based on user, business priority, file source, and file type. Free Training - OPSWAT Academy: https://www.opswat.com/academy ### What Do G2 Reviewers Say About MetaDefender? *AI-generated summary from verified user reviews* **Pros:** - Users value the **ease of use** of MetaDefender, as it operates smoothly and integrates effortlessly with their systems. - Users value the **robust security** of MetaDefender, ensuring reliable protection against threats without disrupting workflows. - Users appreciate the **robust protection** of MetaDefender, ensuring security without disrupting existing workflows or architectures. - Users enjoy the **scanning efficiency** of MetaDefender, benefiting from quick, independent file scans without queues. - Users value the **fast scanning process** of MetaDefender, avoiding delays from shared queues and enjoying scanner flexibility. **Cons:** - Users find the **complex configuration** requirements challenging, necessitating significant upfront planning and policy tuning effort. - Users experience a **difficult setup** process during rollout due to extensive policy tuning and adjustment needs. - Users experience **excessive blocking** issues during initial policy tuning, leading to unnecessary restrictions on business files. - Users find that **overblocking** can be an issue, requiring careful policy adjustments to ensure safe files aren't hindered. - Users find that **policy tuning requires significant effort** initially, particularly with archives and mixed file types. #### What Are Recent G2 Reviews of MetaDefender? **"[The Inclusive and Intelligent Protection Tool](https://www.g2.com/survey_responses/metadefender-review-9693603)"** **Rating:** 4.5/5.0 stars *— Damjan J.* [Read full review](https://www.g2.com/survey_responses/metadefender-review-9693603) --- **"[Seamless software for file security and protection against malware and data breaches](https://www.g2.com/survey_responses/metadefender-review-9484693)"** **Rating:** 4.5/5.0 stars *— Adam S.* [Read full review](https://www.g2.com/survey_responses/metadefender-review-9484693) --- #### What Are G2 Users Discussing About MetaDefender? - [What is Metadefender used for?](https://www.g2.com/discussions/what-is-metadefender-used-for) - 1 comment ### 12. [TechOwl Shield](https://www.g2.com/products/techowl-shield/reviews) **Average Rating:** 4.7/5.0 **Total Reviews:** 6 **Product Description:** TechOwl's Attack Surface Dashboard epitomizes the sophistication of our SaaS solution, providing a comprehensive view of your digital threat landscape. This state-of-the-art dashboard offers an interactive heatmap of active alerts, enabling you to effortlessly discern the severity and age of potential threats. ### What Do G2 Reviewers Say About TechOwl Shield? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **strong threat detection capabilities** of TechOwl Shield, ensuring effective protection against cyber threats. - Users value the **real-time alerting system** of TechOwl Shield, ensuring timely updates on potential threats effortlessly. - Users love the **ease of use** of TechOwl Shield, providing seamless protection without constant monitoring required. - Users praise TechOwl Shield for its **top-notch monitoring** features, particularly the effective Darkweb Monitoring capabilities. - Users appreciate the **comprehensive reporting features** of TechOwl Shield, enhancing their security management effectively. **Cons:** - Users find the **false positive alerts** from TechOwl Shield can be overly sensitive and occasionally misleading. - Users find the **lack of customization** in TechOwl Shield limits notification and report options, affecting user experience. - Users find the **intimidating UIX** of TechOwl Shield challenging, particularly for newcomers trying to adapt. #### What Are Recent G2 Reviews of TechOwl Shield? **"[Powerful Cybersecurity Tool- Techowl Shield](https://www.g2.com/survey_responses/techowl-shield-review-11329257)"** **Rating:** 4.0/5.0 stars *— Rakesh G.* [Read full review](https://www.g2.com/survey_responses/techowl-shield-review-11329257) --- **"[I have been using TechOwl Shield since last 2 years](https://www.g2.com/survey_responses/techowl-shield-review-11041371)"** **Rating:** 5.0/5.0 stars *— Ravi R.* [Read full review](https://www.g2.com/survey_responses/techowl-shield-review-11041371) --- ### 13. [BLINDSPOT](https://www.g2.com/products/prodaft-blindspot/reviews) **Average Rating:** 5.0/5.0 **Total Reviews:** 5 **Product Description:** With BLINDSPOT, keep your supply chain safe by exposing hidden risks and predicting future threats. Our risk intelligence platform keeps watch on your organization's digital footprint to quickly identify and manage weak links on your supply chain before they have a chance to harm your business. ### What Do G2 Reviewers Say About BLINDSPOT? *AI-generated summary from verified user reviews* **Pros:** - Users value the **high accuracy of information** in Blindspot, enabling informed decisions in supply chain management. - Users appreciate the **prompt and helpful customer support** provided by BLINDSPOT, enhancing their experience with the platform. - Users value the **ease of use** of Blindspot, appreciating its intuitive interface and helpful setup support. - Users value the **easy setup** process of BLINDSPOT, enhanced by helpful support for integrating suppliers onto the platform. - Users value **real-time visibility and high-quality intelligence** from Blindspot, enhancing security in supply chain management. **Cons:** - Users find the **initial complexity** of BLINDSPOT challenging, but meaningful presentation aids understanding over time. - Users find the **difficult learning curve** of BLINDSPOT challenging, impacting their initial experience with the product. #### What Are Recent G2 Reviews of BLINDSPOT? **"[Early warning system for supply chain risks](https://www.g2.com/survey_responses/blindspot-review-12334059)"** **Rating:** 5.0/5.0 stars *— Petro L.* [Read full review](https://www.g2.com/survey_responses/blindspot-review-12334059) --- **"[A Proactive Asset for Supply Chain Security](https://www.g2.com/survey_responses/blindspot-review-12273353)"** **Rating:** 5.0/5.0 stars *— Onur Y.* [Read full review](https://www.g2.com/survey_responses/blindspot-review-12273353) --- ### 14. [Domain and IP Intelligence Feeds](https://www.g2.com/products/domain-and-ip-intelligence-feeds/reviews) **Average Rating:** 4.7/5.0 **Total Reviews:** 6 **Product Description:** Domain and IP Threat Intelligence feeds enable cybersecurity vendors and security operations to make their products and teams faster and more secure. By utilizing machine learning to assess the risk and determine content classifications of hosts, alphaMountain provides real-time threat verdicts for any domain or IP address on the internet. alphaMountain's approach to domain risk is based on three key differentiators: Freshness - real-time domain and IP threat assessments based on first-party algorithms; Fidelity - granularity and context that enable better security outcomes; Factors - contributing rationale that drive all investigations to quick, confident conclusions; By integrating alphaMountain's data into their products, cybersecurity vendors improve the accuracy and performance of their solutions. Security operations teams speed up their investigations through alphaMountain's integrations with leading intelligence platforms including Splunk, SecureX, Maltego, VirusTotal, and more. ### What Do G2 Reviewers Say About Domain and IP Intelligence Feeds? *AI-generated summary from verified user reviews* **Pros:** - Users value the **accuracy of information** provided, citing reliable and high-quality threat intelligence updates. - Users value the **quick and reliable alerts** provided by Domain and IP Intelligence Feeds, enhancing threat detection capabilities. - Users value the **consistent customer support** for Domain and IP Intelligence Feeds, enhancing their overall experience and integration. - Users appreciate the **ease of use** of Domain and IP Intelligence Feeds, facilitating integration and quick response to threats. - Users commend the **high-fidelity automation** of Domain and IP Intelligence Feeds for effective phishing and threat management. **Cons:** - Users experience **false positives** in Domain and IP Intelligence Feeds, leading to mis-categorizations and occasional misses in detections. - Users find the product **reasonably expensive** , but many believe the quality justifies the higher price. - Users report **poor detection performance** with missed malicious webpages and overly generic categorizations impacting effectiveness. #### What Are Recent G2 Reviews of Domain and IP Intelligence Feeds? **"[Hourly Updated Threat Intel Enables Clear, Real-Time and Offline Risk Analysis](https://www.g2.com/survey_responses/domain-and-ip-intelligence-feeds-review-12233397)"** **Rating:** 5.0/5.0 stars *— Vinay P.* [Read full review](https://www.g2.com/survey_responses/domain-and-ip-intelligence-feeds-review-12233397) --- **"[High Accuracy, Reliable Support, Needs Better Categorization](https://www.g2.com/survey_responses/domain-and-ip-intelligence-feeds-review-12230086)"** **Rating:** 4.0/5.0 stars *— Alon L.* [Read full review](https://www.g2.com/survey_responses/domain-and-ip-intelligence-feeds-review-12230086) --- ### 15. [DomainTools](https://www.g2.com/products/domaintools/reviews) **Average Rating:** 3.8/5.0 **Total Reviews:** 13 **Product Description:** DomainTools is the global leader for internet intelligence and the first place security practitioners go when they need to know. The world's most advanced security teams use our solutions to identify external risks, investigate threats, and proactively protect their organizations in a constantly evolving threat landscape. DomainTools constantly monitors the Internet and brings together the most comprehensive and trusted domain, website and DNS data to provide immediate context and machine-learning driven risk analytics delivered in near real-time. Visit domaintools.com to experience firsthand why DomainTools is the first stop for advanced security teams when they need to know. #### What Are Recent G2 Reviews of DomainTools? **"[Great tools for all your domain security needs.](https://www.g2.com/survey_responses/domaintools-review-9132625)"** **Rating:** 5.0/5.0 stars *— Navoneel J.* [Read full review](https://www.g2.com/survey_responses/domaintools-review-9132625) --- **"[Best tool for the online world to be safer](https://www.g2.com/survey_responses/domaintools-review-8859243)"** **Rating:** 5.0/5.0 stars *— Prashanth A.* [Read full review](https://www.g2.com/survey_responses/domaintools-review-8859243) --- #### What Are G2 Users Discussing About DomainTools? - [What is DomainTools used for?](https://www.g2.com/discussions/what-is-domaintools-used-for) ### 16. [Pure Signal™ Recon](https://www.g2.com/products/pure-signal-recon/reviews) **Average Rating:** 4.5/5.0 **Total Reviews:** 5 **Product Description:** Pure Signal™Recon is a web based Threat Intelligence query platform. It allows Security Analysts access to Team Cymru’s proprietary data called Pure Signal™, enabling them to create searches and filters to discover insights from over 40 datasets. These datasets include NetFlow, PDNS and x509 Certificates among others. Pure Signal™ Recon is designed for highly advanced users, and mostly used for the purpose of Cyber Reconnaissance, Cyber Threat Hunting, Cyber Incident Response, Victimology and Third Party Digital Risks. Pure Signal™ Recon is licensed per user as an annual subscription, with a range of options to suit the budget and requirements of customer needs. ### What Do G2 Reviewers Say About Pure Signal™ Recon? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **real-time monitoring** feature of Pure Signal™ Recon, enhancing communication analysis and situational awareness. - Users find the **real-time monitoring of wireless signals** extremely helpful for capturing and analyzing communications promptly. - Users value the **real-time monitoring** of wireless signals, enhancing situational awareness and communication analysis. **Cons:** - Users express concerns over **inadequate security** , risking sensitive data exposure and potential legal issues with Pure Signal™ Recon. - Users find **information overload** from Pure Signal™ Recon challenging, complicating the process of identifying essential data. #### What Are Recent G2 Reviews of Pure Signal™ Recon? **"[A new revolution for cyber intelligence](https://www.g2.com/survey_responses/pure-signal-recon-review-10364321)"** **Rating:** 4.5/5.0 stars *— Bennet A.* [Read full review](https://www.g2.com/survey_responses/pure-signal-recon-review-10364321) --- **"[Marketing software efficiency](https://www.g2.com/survey_responses/pure-signal-recon-review-10408541)"** **Rating:** 4.0/5.0 stars *— Anas U.* [Read full review](https://www.g2.com/survey_responses/pure-signal-recon-review-10408541) --- ### 17. [ThreatBolt](https://www.g2.com/products/threatbolt/reviews) **Average Rating:** 4.6/5.0 **Total Reviews:** 5 **Product Description:** ThreatBolt is the only Intelligence-sharing platform thoughtfully designed to meet SOC/MSSP needs. It utilizes AI/ML Powered engine for threat analysis and classification, delivering high-fidelity threat intelligence feeds in real-time with precise scores and industry’s best enrichment. ### What Do G2 Reviewers Say About ThreatBolt? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **responsive and knowledgeable customer support** of ThreatBolt, ensuring quick resolutions and assistance. - Users appreciate the **rapid deployment** of ThreatBolt, enabling seamless integration into their existing security operations. - Users value the **ease of use** of ThreatBolt, benefiting from its intuitive interface and seamless threat management. - Users value the **seamless integration capabilities** of ThreatBolt, enhancing management efficiency within existing security systems. - Users appreciate the **effective threat detection capabilities** of ThreatBolt, simplifying threat management with an integrated platform. **Cons:** - Users feel the **lack of customization** in ThreatBolt's reporting dashboard limits its adaptability to diverse organizational requirements. #### What Are Recent G2 Reviews of ThreatBolt? **"[Detailed contextualized threat Intelligence](https://www.g2.com/survey_responses/threatbolt-review-9879605)"** **Rating:** 5.0/5.0 stars *— kumara D.* [Read full review](https://www.g2.com/survey_responses/threatbolt-review-9879605) --- **"[Reliable and easy to use threat protection platform](https://www.g2.com/survey_responses/threatbolt-review-11530620)"** **Rating:** 4.5/5.0 stars *— Zahid M.* [Read full review](https://www.g2.com/survey_responses/threatbolt-review-11530620) --- ### 18. [ThreatCloud AI](https://www.g2.com/products/threatcloud-ai/reviews) **Average Rating:** 4.7/5.0 **Total Reviews:** 5 **Product Description:** Check Point offers comprehensive intelligence to proactively stop threats, manage security services to monitor networks and incident response to quickly respond to and resolve attacks. ### What Do G2 Reviewers Say About ThreatCloud AI? *AI-generated summary from verified user reviews* **Pros:** - Users find **deployment ease** with ThreatCloud AI, appreciating its simplicity and time-saving benefits for enhanced security. - Users appreciate the **ease of use** of ThreatCloud AI, simplifying deployment and enhancing overall security effortlessly. - Users appreciate the **enhanced security** provided by ThreatCloud AI, which streamlines threat management and protection efforts. - Users value the **enhanced security protection** from ThreatCloud AI, ensuring readiness against evolving threats effortlessly. #### What Are Recent G2 Reviews of ThreatCloud AI? **"[Easy to Use and Strong Threat Data in One Place](https://www.g2.com/survey_responses/threatcloud-ai-review-11630344)"** **Rating:** 4.5/5.0 stars *— naresh U.* [Read full review](https://www.g2.com/survey_responses/threatcloud-ai-review-11630344) --- **"[The Cyber Intelligence Marketplace !!!](https://www.g2.com/survey_responses/threatcloud-ai-review-10234255)"** **Rating:** 5.0/5.0 stars *— Ankit A.* [Read full review](https://www.g2.com/survey_responses/threatcloud-ai-review-10234255) --- #### What Are G2 Users Discussing About ThreatCloud AI? - [What is ThreatCloud IntelliStore used for?](https://www.g2.com/discussions/what-is-threatcloud-intellistore-used-for) ### 19. [Cisco Secure Malware Analytics (Threat Grid)](https://www.g2.com/products/cisco-secure-malware-analytics-threat-grid/reviews) **Average Rating:** 4.9/5.0 **Total Reviews:** 4 **Product Description:** Threat Grid combines advanced sandboxing with threat intelligence into one unified solution to protect organizations from malware. With a robust, context-rich malware knowledge base, you will understand what malware is doing, or attempting to do, how large a threat it poses, and how to defend against it. #### What Are Recent G2 Reviews of Cisco Secure Malware Analytics (Threat Grid)? **"[Satisfactory Experience](https://www.g2.com/survey_responses/cisco-secure-malware-analytics-threat-grid-review-5265684)"** **Rating:** 5.0/5.0 stars *— dnyaneshwar g.* [Read full review](https://www.g2.com/survey_responses/cisco-secure-malware-analytics-threat-grid-review-5265684) --- **"[Threat Grid AMP](https://www.g2.com/survey_responses/cisco-secure-malware-analytics-threat-grid-review-8017937)"** **Rating:** 5.0/5.0 stars *— Ashutosh J.* [Read full review](https://www.g2.com/survey_responses/cisco-secure-malware-analytics-threat-grid-review-8017937) --- ### 20. [CybelAngel](https://www.g2.com/products/cybelangel/reviews) **Average Rating:** 4.6/5.0 **Total Reviews:** 5 **Product Description:** CybelAngel protects its customers with External Attack Surface Management (EASM) solutions that are powered by the most comprehensive external asset discovery and threat detection technologies available. Built upon close to a decade of machine learning, our advanced platform scans the entirety of the internet every 24 hours to uncover unknown assets and shadow IT, cloud services, connected devices, fraudulent domains and exposed credentials — the sources attackers use to access confidential data, launch phishing campaigns or initiate destructive ransomware attacks. CybelAngel's combination of machine learning and expert human analysis provides deep visibility into the most critical threats, long before they’re exploited. #### What Are Recent G2 Reviews of CybelAngel? **"[Cybel Angel precise and accurate Intelligence](https://www.g2.com/survey_responses/cybelangel-review-9761999)"** **Rating:** 5.0/5.0 stars *— Kobe S.* [Read full review](https://www.g2.com/survey_responses/cybelangel-review-9761999) --- **"[Excellent Device Detection and Threat Monitoring](https://www.g2.com/survey_responses/cybelangel-review-12464065)"** **Rating:** 5.0/5.0 stars *— Kobe S.* [Read full review](https://www.g2.com/survey_responses/cybelangel-review-12464065) --- ### 21. [PreCrime Intelligence](https://www.g2.com/products/precrime-intelligence/reviews) **Average Rating:** 5.0/5.0 **Total Reviews:** 4 **Product Description:** PreCrime Intelligence is cybersecurity’s fastest, most accurate predictive intelligence solution, using behavioral AI to predict and preempt attacks weeks before they happen. The exponential growth of network infrastructure has created more attack surfaces than ever before. We use continuous threat exposure management (CTEM) to proactively monitor the internet for suspicious behaviors and dangerous domains. We raise the flag on anomalous activities, before they become a security breach. We go beyond reactive blocklists to equip your team with the most extensive dataset of future malicious infrastructure. Our intelligence feed deliver indicators of future attacks instead of reactive alerts and allows you to establish a proactive security posture. The result: Only 3% overlap with traditional TI, or: 97% unique, proactive data. Every 10 minutes, we monitor the entire internet and evaluate infrastructures based on their behavior. Our AI continuously evolves, requiring less human input while sharpening its accuracy in anomaly detection and risk assessment. Deny malicious infrastructure in near real-time before they launch attacks. Features: - 18 days ahead of traditional intelligence feeds (median) - 99.95% accuracy (less than 0.05% false positives) - ~100,000 proactive indicators of future attacks (IoFA) every day - 20+ million suspicious infrastructures continuously monitored - Easy integration into Firewalls, SIEM/SOAR/TIP, XDR/EDR or DNS resolvers ### What Do G2 Reviewers Say About PreCrime Intelligence? *AI-generated summary from verified user reviews* **Pros:** - Users value the **proactive alerts and predictive feed** of PreCrime Intelligence, enhancing investigation capabilities against threats. - Users commend the **proactive threat detection** of PreCrime Intelligence, allowing timely investigation and response to potential threats. - Users appreciate the **proactive alerts** from PreCrime, allowing timely investigations and fortification of at-risk systems. - Users value the **unique predictive feed** of PreCrime Intelligence, enhancing their threat intelligence capabilities significantly. - Users appreciate the **easy integrations** with PreCrime Intelligence, enabling seamless connectivity with other tools for better threat management. **Cons:** - Users experience occasional **lag during high usage times** with PreCrime Intelligence, impacting overall performance. #### What Are Recent G2 Reviews of PreCrime Intelligence? **"[Excellent for Detecting Malicious Domains and Coordinating Takedowns](https://www.g2.com/survey_responses/precrime-intelligence-review-12464003)"** **Rating:** 5.0/5.0 stars *— Kobe S.* [Read full review](https://www.g2.com/survey_responses/precrime-intelligence-review-12464003) --- **"[Great insights ahead of any reduction in our security posture](https://www.g2.com/survey_responses/precrime-intelligence-review-10927721)"** **Rating:** 5.0/5.0 stars *— Verified User in Computer & Network Security* [Read full review](https://www.g2.com/survey_responses/precrime-intelligence-review-10927721) --- ### 22. [RiskIQ](https://www.g2.com/products/riskiq/reviews) **Average Rating:** 4.8/5.0 **Total Reviews:** 4 **Product Description:** RiskIQ is the leader in attack surface management. A subsidiary of Microsoft, we help organizations discover, understand, and mitigate threats and exposures. #### What Are Recent G2 Reviews of RiskIQ? **"[Competent Risk Mitigation And External Threat Management System](https://www.g2.com/survey_responses/riskiq-review-8893529)"** **Rating:** 4.0/5.0 stars *— Darshil P.* [Read full review](https://www.g2.com/survey_responses/riskiq-review-8893529) --- **"[Great product for online security](https://www.g2.com/survey_responses/riskiq-review-8871480)"** **Rating:** 5.0/5.0 stars *— Verified User in Financial Services* [Read full review](https://www.g2.com/survey_responses/riskiq-review-8871480) --- #### What Are G2 Users Discussing About RiskIQ? - [What is RiskIQ used for?](https://www.g2.com/discussions/what-is-riskiq-used-for) ### 23. [RiskProfiler - Cyber Threat Intelligence](https://www.g2.com/products/riskprofiler-cyber-threat-intelligence/reviews) **Average Rating:** 5.0/5.0 **Total Reviews:** 4 **Product Description:** RiskProfiler offers external threat intelligence and risk management services aimed at helping organizations monitor and mitigate various risks, including brand, vendor, and supply chain threats. Their suite of products includes automated tools for external attack surface management, third-party risk management, and real-time monitoring of dark web activities. Serving industries such as automotive, finance, healthcare, and technology, RiskProfiler focuses on enhancing cybersecurity and protecting businesses from digital fraud and impersonation. By leveraging advanced analytics and AI-driven insights, RiskProfiler empowers organizations to proactively defend against potential threats. ### What Do G2 Reviewers Say About RiskProfiler - Cyber Threat Intelligence? *AI-generated summary from verified user reviews* **Pros:** - Users value RiskProfiler for its **predictive insights** , transforming chaotic data into actionable intelligence about future threats. - Users value the **threat detection capabilities** of RiskProfiler, providing timely insights into potential future attacks. - Users value the **accuracy of information** from RiskProfiler, benefiting from updated and relevant threat intel for their industry. - Users value the **automation** in RiskProfiler, providing timely alerts on threat actors and potential risks. - Users appreciate the **visual and intuitive design** of RiskProfiler, making it easy to navigate and use effectively. **Cons:** - Users experience a **slight lag** when processing large dark-web data, affecting speed but appreciating the insights gained. #### What Are Recent G2 Reviews of RiskProfiler - Cyber Threat Intelligence? **"[Real-Time Threat Insights, But Needs a Mobile Dashboard](https://www.g2.com/survey_responses/riskprofiler-cyber-threat-intelligence-review-11882634)"** **Rating:** 5.0/5.0 stars *— Vikas R.* [Read full review](https://www.g2.com/survey_responses/riskprofiler-cyber-threat-intelligence-review-11882634) --- **"[Proactive Threat Intelligence That Stays Ahead of Attackers](https://www.g2.com/survey_responses/riskprofiler-cyber-threat-intelligence-review-11897763)"** **Rating:** 5.0/5.0 stars *— Gajendra S.* [Read full review](https://www.g2.com/survey_responses/riskprofiler-cyber-threat-intelligence-review-11897763) --- ### 24. [StyxView](https://www.g2.com/products/styxview/reviews) **Average Rating:** 4.8/5.0 **Total Reviews:** 6 **Product Description:** Styx Intelligence is a leading global SaaS cybersecurity company offering a unified, AI-driven External Digital & Cyber Risk Protection platform that helps protect your brand, people, and external digital infrastructure from cyber threats. Built on a proprietary framework, Styx helps organizations monitor, detect, prioritize, and act on threats such as brand and executive impersonation, phishing attacks, disinformation campaigns, data leakage, exposed assets, and third-party risk across the open web, social media, news, and the dark web. Styx Intelligence helps organizations gain visibility into threats that exist outside the traditional perimeter and take action before they impact trust, operations, or revenue by: - Discovering exposed assets, brands, domains, executive identities, social media impersonations, leaked credentials, and third-party risks - Monitoring external threats across the open web, social media, news, app stores, forums, and the dark web - Validating and prioritizing the risks that matter most with clear context and business impact - Disrupting threats through automated takedowns and response actions before they cause harm The platform is designed for resource-constrained security teams and brings together brand protection, executive protection, social media and news monitoring, dark web monitoring, third-party risk, threat intelligence, disinformation security, and takedown services in one unified solution for the modern external threat landscape. ### What Do G2 Reviewers Say About StyxView? *AI-generated summary from verified user reviews* **Pros:** - Users value the **proactive and supportive customer support** of StyxView, enhancing their overall experience and satisfaction. - Users value the **intuitive dashboard and actionable insights** of StyxView, enhancing decision-making and efficiency in operations. - Users highlight the **ease of use** of StyxView, with its intuitive dashboard and seamless implementation process. - Users value the **helpful and proactive support** from the StyxView team, enhancing their overall experience with the platform. - Users commend the **efficiency** of StyxView for enhancing decision-making and streamlining operations significantly. **Cons:** - Users notice **software bugs** that affect accuracy, but appreciate the team's quick responsiveness to resolve issues. - Users report **technical issues** causing inaccurate scores and lingering findings, reflecting a need for more robust development. - Users report **bugs and inaccuracies** in StyxView that can affect the reliability of data and findings. - Users report **false positives** causing inaccurate scores, leading to confusion despite rapid fixes from the responsive team. - Users notice that **issues and bugs** in StyxView can lead to inaccurate scores, impacting overall reliability. #### What Are Recent G2 Reviews of StyxView? **"[StyxView 360 Intelligence](https://www.g2.com/survey_responses/styxview-review-11782880)"** **Rating:** 5.0/5.0 stars *— Verified User in Security and Investigations* [Read full review](https://www.g2.com/survey_responses/styxview-review-11782880) --- **"[Small but mighty intel tool](https://www.g2.com/survey_responses/styxview-review-11788530)"** **Rating:** 5.0/5.0 stars *— Verified User in Financial Services* [Read full review](https://www.g2.com/survey_responses/styxview-review-11788530) --- ### 25. [Threat Intelligence API Platform](https://www.g2.com/products/threat-intelligence-api-platform/reviews) **Average Rating:** 5.0/5.0 **Total Reviews:** 4 **Product Description:** We provide threat intelligence APIs with comprehensive information on hosts and the infrastructure behind them. By combining data obtained from various providers, our own exhaustive internal databases, and by analyzing host configuration in real-time, we provide threat intelligence APIs that offer an in-depth perspective on the target host and crucial threat detection for any system. #### What Are Recent G2 Reviews of Threat Intelligence API Platform? **"[Vetting Prospective Clients with Threat Intel Data](https://www.g2.com/survey_responses/threat-intelligence-api-platform-review-3936434)"** **Rating:** 5.0/5.0 stars *— Lohan A.* [Read full review](https://www.g2.com/survey_responses/threat-intelligence-api-platform-review-3936434) --- **"[Improving our geo data with Threat Intelligence APIs](https://www.g2.com/survey_responses/threat-intelligence-api-platform-review-4064761)"** **Rating:** 5.0/5.0 stars *— Anna D.* [Read full review](https://www.g2.com/survey_responses/threat-intelligence-api-platform-review-4064761) --- ## What Is Threat Intelligence Software? [System Security Software](https://www.g2.com/categories/system-security) ## What Software Categories Are Similar to Threat Intelligence Software? - [Dark Web Monitoring Tools](https://www.g2.com/categories/dark-web-monitoring) - [ Attack Surface Management Software](https://www.g2.com/categories/attack-surface-management) - [Digital Risk Protection (DRP) Platforms](https://www.g2.com/categories/digital-risk-protection-drp-platforms) --- ## How Do You Choose the Right Threat Intelligence Software? ### What You Should Know About Threat Intelligence Software ### Threat Intelligence Software FAQs ### What are the best threat intelligence software options for small businesses? Here are some of the best threat intelligence software solutions designed to protect [small businesses](https://www.g2.com/categories/threat-intelligence/small-business): - [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) provides small businesses with real-time threat detection and security recommendations across cloud environments. - [ThreatLocker](https://www.g2.com/products/threatlocker-inc-threatlocker/reviews) delivers application whitelisting and ringfencing controls, helping small teams prevent unauthorized access and malware execution. - [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) combines threat protection with performance optimization, ideal for small businesses running web-based services. - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) offers lightweight, cloud-delivered endpoint protection that detects threats quickly without overloading system resources. - [FortiGate NGFW](https://www.g2.com/products/fortigate-ngfw/reviews) delivers enterprise-grade firewall and threat intelligence capabilities in a scalable package suited for small business networks. ### What are the best-rated threat intelligence apps for IT teams? Here are some of the highest-rated threat intelligence apps tailored for IT teams managing complex environments: - [Recorded Future](https://www.g2.com/products/recorded-future/reviews) delivers real-time threat intelligence with deep web insights, helping IT teams proactively detect and prioritize risks. - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) combines threat detection with automated response tools, enabling IT teams to secure endpoints at scale. - [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) provides integrated threat detection and security posture management across multi-cloud and hybrid environments. - [Cyberint, a Check Point Company](https://www.g2.com/products/cyberint-a-check-point-company/reviews), offers external threat intelligence focused on digital risk protection, empowering IT teams to counter emerging threats beyond the firewall. - [ZeroFox](https://www.g2.com/products/zerofox/reviews) specializes in identifying external threats across social media, domains, and the dark web, equipping IT teams with actionable intelligence. ### What are the best-rated threat intelligence platforms for startups? Here are some of the most reliable threat intelligence platforms well-suited for agile and growing startups: - [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) combines powerful DDoS protection and threat intelligence in a lightweight, cost-effective platform ideal for startups scaling web infrastructure. - [ThreatLocker](https://www.g2.com/products/threatlocker-inc-threatlocker/reviews) offers granular application control and real-time threat blocking, giving startups enterprise-grade security without complexity. - [CrowdStrike Falcon Endpoint Protection Platfor](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) delivers scalable, cloud-native endpoint protection that’s easy for lean startup teams to deploy and manage. - [CloudSEK](https://www.g2.com/products/cloudsek/reviews) provides AI-driven threat detection and digital risk monitoring, helping startups stay ahead of emerging threats across assets and brand mentions. - [Censys Search](https://www.g2.com/products/censys-search/reviews) enables startups to continuously map and monitor their attack surface, offering visibility and threat data without heavy setup.