Best Threat Intelligence Software - Page 4

How Many Threat Intelligence Software Products Does G2 Track?

Total Products under this Category: 229

Category Stats (Oct 2026)

  • Average Rating: 4.59/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Darktrace / EMAIL (+0.63%) - Among all products in this category, Darktrace / EMAIL recorded the largest rating increase compared to last month

Last updated: October 26, 2026

How Does G2 Rank Threat Intelligence Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 5,900+ Authentic Reviews
  • 229+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Threat Intelligence Software

G2 Grid® for Threat Intelligence Software plotting products by satisfaction and market presence

Highlighted products: CrowdStrike Falcon Endpoint Protection Platform, Recorded Future, Ivanti Autonomous Endpoint Management, Cyble, ZeroFox, CloudSEK, SOCRadar Extended Threat Intelligence, and CTM360.

Underlying data: [Grid® JSON](https://www.g2.com/categories/threat-intelligence/grids.json?focus%5B%5D=crowdstrike-falcon-endpoint-protection-platform&focus%5B%5D=recorded-future&focus%5B%5D=ivanti-autonomous-endpoint-management&focus%5B%5D=cyble&focus%5B%5D=zerofox&focus%5B%5D=cloudsek&focus%5B%5D=socradar-extended-threat-intelligence&focus%5B%5D=ctm360-ctm360)

SpyCloud

SpyCloud protects businesses from identity-based cyberattacks. We proactively alert security teams when their users' data has been compromised by a malware infection or third-party breach, and automate the remediation of exposed users and applications to stop targeted attacks including ransomware, account takeover, and online fraud. The world's most innovative businesses and consumer brands trust SpyCloud to prevent attacks, safeguard 4+ billion employee and consumer accounts, and streamline cybercrime investigations.

Average Rating: 4.7/5.0

Total Reviews: 14

How Do G2 Users Rate SpyCloud?

  • Security Validation: 7.5/10 (Category avg: 9.1/10)
  • Intelligence Reports: 8.3/10 (Category avg: 9.1/10)
  • Ease of Use: 9.3/10 (Category avg: 9.1/10)

Who Is the Company Behind SpyCloud?

  • Seller: SpyCloud
  • Year Founded: 2016
  • HQ Location: Austin, Texas
  • LinkedIn® Page: www.linkedin.com
    288 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 43% Large, 43% Medium

What Do G2 Reviewers Say About SpyCloud?

AI-generated summary from verified user reviews

Pros
  • Users value the alert notifications from SpyCloud for their effectiveness in monitoring compromised credentials promptly.
  • Users value the centralized management of SpyCloud, noting its seamless integration and user-friendly daily operations.
  • Users appreciate the comprehensive features of SpyCloud, facilitating seamless integration and user identity monitoring.
  • Users praise the excellent customer support from SpyCloud, enhancing their overall experience and satisfaction.
  • Users find SpyCloud's deployment ease impressive, with seamless integration and excellent support enhancing their experience.

What Are Recent G2 Reviews of SpyCloud?

What Are G2 Users Discussing About SpyCloud?

Check Point SandBlast Advanced Network Threat Prevention

Check Point SandBlast Advanced Network Threat Prevention is a comprehensive security solution designed to protect organizations from sophisticated cyber threats, including zero-day attacks and advanced malware. By integrating real-time threat intelligence with advanced AI technologies, SandBlast delivers proactive defense mechanisms that prevent unknown cyber threats while maintaining seamless business operations. Key Features and Functionality: - Zero-Day Threat Prevention: Utilizes powerful threat intelligence and AI-based engines to detect and block previously unknown cyber threats before they can infiltrate the network. - Threat Emulation and Extraction: Employs CPU-level inspection and threat emulation to analyze suspicious files in a virtualized environment, identifying and mitigating potential threats without impacting network performance. - Streamlined Security Management: Offers single-click setup with out-of-the-box security policy profiles optimized for various business needs, reducing administrative overhead and ensuring up-to-date protection. - Seamless Productivity: Delivers a prevention-first strategy that does not compromise user experience, allowing uninterrupted business operations even when dealing with suspicious files. Primary Value and User Solutions: SandBlast Advanced Network Threat Prevention addresses the critical need for organizations to defend against evolving cyber threats without disrupting daily operations. By providing real-time threat intelligence, automated response mechanisms, and seamless integration with existing network infrastructure, SandBlast enhances security posture, minimizes security incidents, and ensures robust defense against malware, ransomware, and advanced persistent threats. Its intuitive management and comprehensive threat protection enable security teams to maintain high levels of protection with reduced complexity and administrative effort.

Average Rating: 4.4/5.0

Total Reviews: 17

How Do G2 Users Rate Check Point SandBlast Advanced Network Threat Prevention?

  • Security Validation: 9.0/10 (Category avg: 9.1/10)
  • Intelligence Reports: 9.3/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 9.0/10 (Category avg: 8.7/10)
  • Ease of Use: 7.8/10 (Category avg: 9.1/10)

Who Is the Company Behind Check Point SandBlast Advanced Network Threat Prevention?

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 67% Medium, 28% Large

What Do G2 Reviewers Say About Check Point SandBlast Advanced Network Threat Prevention?

AI-generated summary from verified user reviews

Pros
  • Users find Check Point SandBlast to be easy to use and integrate, enhancing their overall experience with its simplicity.
  • Users value the easy integrations with Check Point SandBlast, enhancing functionality and overall user experience.
  • Users value the ease of use and unique detection features of Check Point SandBlast for seamless integration.
  • Users appreciate the installation ease of Check Point SandBlast, noting its simplicity and fast integration with other tools.
  • Users value the seamless integrations within the Check Point ecosystem, enhancing efficiency and decision-making speed.
Cons
  • Users find the cost intimidating, and it may also lead to CPU stress during operation.
  • Users find the high cost of Check Point SandBlast Advanced Network Threat Prevention to be quite intimidating.
  • Users find the high resource usage of Check Point SandBlast can strain their CPU and increase costs.
  • Users face incomplete information due to limitations in static analytics on MacOs and file size restrictions.
  • Users face limited features in Check Point SandBlast, particularly with static analytics and file size restrictions.

What Are Recent G2 Reviews of Check Point SandBlast Advanced Network Threat Prevention?

What Are G2 Users Discussing About Check Point SandBlast Advanced Network Threat Prevention?

Maltego

Maltego is the world’s most widely used cyber investigation platform, offering an all-in-one solution for both quick OSINT investigations and complex link analysis of large datasets with seamless data integration in one analytical environment. It enables real-time social media monitoring and deep network analysis to uncover hidden patterns and connections. Maltego is trusted for threat intelligence, situational awareness, law enforcement investigations, and trust & safety applications.

Average Rating: 4.5/5.0

Total Reviews: 22

How Do G2 Users Rate Maltego?

  • Security Validation: 9.3/10 (Category avg: 9.1/10)
  • Intelligence Reports: 9.5/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 8.9/10 (Category avg: 8.7/10)
  • Ease of Use: 7.9/10 (Category avg: 9.1/10)

Who Is the Company Behind Maltego?

  • Seller: Maltego
  • Year Founded: 2017
  • HQ Location: Munich, DE
  • Twitter: @MaltegoHQ
    14,464 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    179 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 59% Small, 27% Medium

What Are Recent G2 Reviews of Maltego?

What Are G2 Users Discussing About Maltego?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

Pure Signal Command

Scout Ultimate is a web-based threat intelligence tool for security analysts of all experience levels. With a simple GUI, graphical displays, tagged results, and easy to use searches, it helps quickly determine if suspicious IPs are malicious or compromised. It is the place to start investigations for single IPs, domains, or entire CIDR ranges related to malicious activity.

Average Rating: 4.6/5.0

Total Reviews: 14

How Do G2 Users Rate Pure Signal Command?

  • Security Validation: 8.7/10 (Category avg: 9.1/10)
  • Intelligence Reports: 9.1/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 7.8/10 (Category avg: 8.7/10)
  • Ease of Use: 8.8/10 (Category avg: 9.1/10)

Who Is the Company Behind Pure Signal Command?

  • Seller: Team Cymru
  • Company Website:
  • Year Founded: 1998
  • HQ Location: Lake Mary, FL
  • Twitter: @teamcymru
    41,148 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    132 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 55% Medium, 36% Small

What Do G2 Reviewers Say About Pure Signal Command?

AI-generated summary from verified user reviews

Pros
  • Users value the automation of trade setups with Pure Signal™ Scout, enhancing focus and efficiency in trading decisions.
  • Users value the ease of use of Pure Signal™ Scout, streamlining trade setups and enhancing focus on quality trades.
  • Users value the scanning efficiency of Pure Signal™ Scout, enabling real-time, precise trade setups without extensive chart analysis.
  • Users appreciate the speed in identifying trade setups of Pure Signal™ Scout, enhancing focus on quality trades efficiently.

What Are Recent G2 Reviews of Pure Signal Command?

SIRP

SIRP is an AI-native Autonomous SOC platform designed to evolve traditional Security Orchestration, Automation, and Response (SOAR) into governed, decision-driven security operations. Unlike legacy SOAR tools that rely on static playbooks and workflow automation, SIRP enables intelligent AI agents to analyze alerts, compute risk, execute response actions, and continuously learn from outcomes within defined policy boundaries. The platform combines contextual reasoning, real-time intelligence, and adaptive learning to reduce manual triage, minimize alert fatigue, and accelerate incident response while maintaining governance, auditability, and control. SIRP supports enterprise SOC teams and MSSPs seeking to operate at machine speed without sacrificing human oversight for high-impact decisions.

Average Rating: 4.7/5.0

Total Reviews: 22

How Do G2 Users Rate SIRP?

  • Security Validation: 9.8/10 (Category avg: 9.1/10)
  • Intelligence Reports: 10.0/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 9.8/10 (Category avg: 8.7/10)
  • Ease of Use: 9.5/10 (Category avg: 9.1/10)

Who Is the Company Behind SIRP?

  • Seller: SIRP
  • Year Founded: 2017
  • HQ Location: Bethesda, Maryland
  • Twitter: @sirp_io
    74 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    55 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 41% Small, 37% Medium

What Do G2 Reviewers Say About SIRP?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the comprehensive automation features of SIRP, enhancing their security orchestration and incident management efficiency.
  • Users value the excellent customer support from SIRP, enhancing their overall experience with the product.
  • Users praise SIRP for its ease of use, making security automation and incident management seamless and efficient.
  • Users value the easy integrations offered by SIRP, enhancing their security automation and orchestration experience.
  • Users praise SIRP for its ease of use and excellent support, along with comprehensive security features and integrations.

What Are Recent G2 Reviews of SIRP?

Zignal Labs

Zignal's real-time intelligence technology helps the world's largest organizations protect their people, places, and position.

Average Rating: 4.0/5.0

Total Reviews: 40

How Do G2 Users Rate Zignal Labs?

  • Ease of Use: 7.2/10 (Category avg: 9.1/10)

Who Is the Company Behind Zignal Labs?

  • Seller: Zignal Labs
  • Year Founded: 2011
  • HQ Location: San Francisco, California
  • Twitter: @ZignalLabs
    3,330 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    65 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Public Relations and Communications
  • Company Size: 40% Large, 30% Small

What Are Recent G2 Reviews of Zignal Labs?

What Are G2 Users Discussing About Zignal Labs?

OnSecurity

OnSecurity is the CREST-accredited AI-augmented penetration testing platform that unifies expert-led manual testing, continuous vulnerability management, and remediation tracking in one connected programme. Built by penetration testers for security and engineering teams, OnSecurity's Platform moves organisations beyond one-off, point-in-time pentests to an always-on offensive security programme. The platform gives teams live visibility into findings as they're discovered, free retesting and remediation workflows, and a single source of truth for vulnerability status across the business, cutting manual admin and reporting effort by 30-50% and saving security teams significant time on every test cycle. OnSecurity helps secure over 500 organisations including Gousto, Lidl, Yonder, Retail in Motion, Incident.io, L&G Group and many more...

Average Rating: 4.9/5.0

Total Reviews: 36

How Do G2 Users Rate OnSecurity?

  • Ease of Use: 9.6/10 (Category avg: 9.1/10)

Who Is the Company Behind OnSecurity?

  • Seller: On Security
  • Year Founded: 2018
  • HQ Location: Bristol, GB
  • Twitter: @weareonsecurity
    1,338 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    62 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 65% Small, 30% Medium

What Are Recent G2 Reviews of OnSecurity?

What Are G2 Users Discussing About OnSecurity?

Darktrace / EMAIL

Darktrace / EMAIL secures email and collaboration by training exclusively on each organization’s own communication patterns, not shared threat intelligence. It builds a Unique Behavioral Profile for every user – spanning email, identity, DLP, and human risk – to catch novel phishing, business email compromise, and account takeover that signature-based tools miss by design. It’s recognized as a Leader in Gartner’s Magic Quadrant and in the 2025 Voice of the Customer for Email Security Platforms. Traditional secure email gateways and native protections rely on known threat intelligence, so they need a first victim before they can catch a new attack – and generative AI has only widened that gap. Darktrace / EMAIL takes a different approach: it uses Adaptive AI to build a Unique Behavioral Profile for every user, then detects deviations across inbound, outbound, and lateral mail and responds with precise, autonomous action. Key capabilities include: - Adaptive Email Security: Builds a Unique Behavioral Profile for every user across the full mail flow – inbound, outbound, and lateral protection, DMARC management, account takeover detection, data loss detection, and AI attack/GenAI visibility. Darktrace catches on average 17% of threats that leading SEGs miss on arrival. - Identity Detect & Respond: Adds autonomous response to account takeover – session termination and forced re-authentication – plus recovery and audit across email, SaaS, and cloud. - Email DLP & Collaboration Security: Suspicious emails are automatically quarantined, links are rewritten, and attachments are removed, extending detection with hold, redirect, and strip-sensitive-content response actions plus dedicated behavioral coverage across Microsoft Teams, Zoom, and Slack, all without interrupting legitimate business communication. - Adaptive Security Awareness Training: Personalizes training, phishing simulations, and just-in-time coaching to each employee’s actual behavior, with outcomes feeding back into the detection model to close the loop. For security teams, Darktrace / EMAIL reduces operational overhead by automating triage and response. Its Cyber AI Analyst provides contextual insights, while end-users benefit from clear, in-app narratives that explain why a message is suspicious – helping to reduce false phishing reports and improve awareness. Benefits for organizations include: - Coverage across email, collaboration, and SaaS platforms in one behavioral model. - Up to 90% less time spent triaging alerts, so security teams spend more time on higher-value work. - Native integration with Microsoft 365, Exchange, and Google Workspace that doesn’t disrupt mail flow. Darktrace / EMAIL is a Gartner Leader in both the Magic Quadrant and the 2025 Voice of the Customer for Email Security Platforms – recognition that tracks with what it actually catches: threats built for a specific business, not just known attack patterns.

Average Rating: 4.2/5.0

Total Reviews: 42

How Do G2 Users Rate Darktrace / EMAIL?

  • Ease of Use: 8.2/10 (Category avg: 9.1/10)

Who Is the Company Behind Darktrace / EMAIL?

  • Seller: Darktrace
  • Year Founded: 2013
  • HQ Location: Cambridgeshire, England
  • Twitter: @Darktrace
    18,177 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    2,597 employees on LinkedIn®
  • Ownership: LON: DARK

Who Uses This Product?

  • Top Industries: Computer Software
  • Company Size: 60% Medium, 31% Large

What Do G2 Reviewers Say About Darktrace / EMAIL?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the adaptive AI technology of Darktrace, simplifying administration and enhancing security awareness.
  • Users commend the excellent customer support from Darktrace, noting their responsiveness and helpfulness during implementation.
  • Users value the high detection efficiency of Darktrace / EMAIL, ensuring minimal malicious emails slip through.
  • Users appreciate the high product quality of Darktrace / EMAIL, benefiting from its reliability and AI capabilities.
  • Users value the reliability of Darktrace, noting effective email protection and quality reporting features.
Cons
  • Users find Darktrace / EMAIL to be expensive, though they acknowledge its value and effectiveness compared to other options.
  • Users face poor integration challenges, particularly with Outlook on Windows and Mac, affecting overall usability.
  • Users find the complexity of wording and descriptions challenging, requiring specialized knowledge for effective use.
  • Users experience false positives that may block desired emails, though releasing them is straightforward with Antigena Email.
  • Users find frequent software updates to be boring and tedious, impacting their overall experience with Darktrace / EMAIL.

What Are Recent G2 Reviews of Darktrace / EMAIL?

Fastly's Web Application and API Security

Fastly’s AppSec solutions empower teams to mitigate threats and control bots while helping the business move faster, confidently. Protect Your Apps and APIs While Accelerating Growth with Fastly’s Next-Gen WAF, DDoS Protection, Bot Management, API Security, and more. Our solutions are designed to help you stop cyber threats from derailing your biggest moments, accelerate innovation while minimizing new risk, and govern bots without increasing user friction.

Average Rating: 4.2/5.0

Total Reviews: 29

How Do G2 Users Rate Fastly's Web Application and API Security?

  • Ease of Use: 9.1/10 (Category avg: 9.1/10)

Who Is the Company Behind Fastly's Web Application and API Security?

  • Seller: Fastly
  • Year Founded: 2011
  • HQ Location: San Francisco, California, United States
  • Twitter: @Fastly
    29,199 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    1,456 employees on LinkedIn®
  • Ownership: NYSE: FSLY

Who Uses This Product?

  • Top Industries: Computer Software
  • Company Size: 50% Medium, 37% Large

What Do G2 Reviewers Say About Fastly's Web Application and API Security?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of setup with Fastly's Web Application and API Security, enjoying excellent support and a user-friendly interface.
  • Users praise Fastly's Web Application and API Security for its robust protection against all types of attacks.
  • Users commend the excellent customer support provided by Fastly, enhancing their experience and implementation process.
  • Users value the effective DDoS protection of Fastly, ensuring robust security against various web application threats.
  • Users appreciate the excellent security protection Fastly's solution offers against a wide range of application attacks.
Cons
  • Users note that the pricing can be a barrier for smaller projects, with additional costs for support and multiple hostnames.
  • Users report poor customer support, highlighting issues with responsiveness and difficulty in obtaining assistance for configurations.
  • Users find the complex configuration of Fastly's WAF overwhelming and time-consuming, especially for rule management.
  • Users find the complex setup of Fastly's WAF cumbersome, making rule management and configurations time-consuming.
  • Users find the management complex, as the cumbersome interface and poor support hinder effective rule setup.

What Are Recent G2 Reviews of Fastly's Web Application and API Security?

SL Professional

Social Links is a global OSINT (Open Source Intelligence) vendor that empowers investigators and security professionals with ground-breaking AI-powered products. We assemble massive volumes of data from open sources — including social media, messengers, blockchains, and the Dark Web — to analyze and visualize a holistic picture for streamlining data-driven investigations. SL Professional is a Maltego add-on for conducting in-depth investigations across social media, messengers, blockchains, and the Dark Web. It enables real-time data collection, visualization, and analysis from hundreds of sources.

Average Rating: 4.7/5.0

Total Reviews: 11

How Do G2 Users Rate SL Professional?

  • Security Validation: 10.0/10 (Category avg: 9.1/10)
  • Intelligence Reports: 10.0/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 10.0/10 (Category avg: 8.7/10)
  • Ease of Use: 9.7/10 (Category avg: 9.1/10)

Who Is the Company Behind SL Professional?

  • Seller: Social Links
  • Year Founded: 2015
  • HQ Location: New York, US
  • Twitter: @_SocialLinks_
    13,857 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    90 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 73% Small, 18% Medium

What Are Recent G2 Reviews of SL Professional?

U.S.T.A.

PRODAFT, which stands for "PROactive Defense Against Future Threats", is a Swiss cyber threat intelligence company focusing on preventing breaches before they happen. We provide actionable insights right from the source by monitoring darkweb/deepweb channels and cybercriminals' environments. Since 2012, we have been pioneering one of the first cyberthreat intelligence platforms ever developed. Our CTI platform U.S.T.A. (Unified Security Threat Alliance) entails a unique synergy of five main modules: Deep Sight, Brand Protection, Fraud Intelligence, Security Intelligence, and Attack Surface Management.

Average Rating: 4.9/5.0

Total Reviews: 9

How Do G2 Users Rate U.S.T.A.?

  • Intelligence Reports: 10.0/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 10.0/10 (Category avg: 8.7/10)
  • Ease of Use: 9.5/10 (Category avg: 9.1/10)

Who Is the Company Behind U.S.T.A.?

  • Seller: PRODAFT
  • Year Founded: 2012
  • HQ Location: Yverdon-les-Bains, CH
  • LinkedIn® Page: www.linkedin.com
    57 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 44% Large, 33% Medium

What Do G2 Reviewers Say About U.S.T.A.?

AI-generated summary from verified user reviews

Pros
  • Users value the accuracy of information provided by U.S.T.A., which enhances their security team's efficiency and response.
  • U.S.T.A. delivers timely alerts on adversary activity, ensuring proactive responses and preventing escalations into attacks.
  • Users value U.S.T.A. for its preventive cybersecurity features that enhance operational security and threat response.
  • Users find U.S.T.A. to be highly user-friendly, with a clean interface and simple navigation for efficient monitoring.
  • Users value the preventive cybersecurity capabilities of U.S.T.A., appreciating its timely threat notifications and comprehensive support.
Cons
  • Users find the incomplete information on attack surface management less helpful compared to other modules.
  • Users experience information overload due to the need for better filtering and clearer data presentation in U.S.T.A.
  • Users find the limited features of U.S.T.A. restrict functionality, hoping for better filtering and data presentation options.

What Are Recent G2 Reviews of U.S.T.A.?

Cortex XSOAR

Palo Alto Networks' Cortex XSOAR is a comprehensive Security Orchestration, Automation, and Response (SOAR) platform designed to streamline and enhance security operations. By integrating automation, case management, real-time collaboration, and threat intelligence management, Cortex XSOAR empowers security teams to respond to incidents more efficiently and effectively. Key Features and Functionality: - Process Standardization and Automation: Cortex XSOAR offers over 270 out-of-the-box playbooks, enabling the automation of numerous security use cases. These playbooks orchestrate response actions across more than 350 third-party products, facilitating seamless integration and operational consistency. - Security-Focused Case Management: The platform unifies alerts, incidents, and indicators from various sources into a single case management framework. This consolidation accelerates incident response by providing a comprehensive view of security events. - Real-Time Collaboration: Cortex XSOAR includes a Virtual War Room equipped with built-in ChatOps and a command-line interface. This feature allows security teams to collaborate in real time, execute commands across the entire product stack, and manage incidents more effectively. - Threat Intelligence Management: The platform aggregates disparate threat intelligence sources, customizes and scores feeds, and matches indicators against the organization's specific environment. This capability enables security teams to take informed actions swiftly. Primary Value and Problem Solving: Cortex XSOAR addresses the challenges faced by security teams, such as the overwhelming volume of alerts and the need for rapid incident response. By automating repetitive tasks and standardizing processes, the platform reduces the time spent on incidents by up to 90%, allowing analysts to focus on critical threats. The integration of threat intelligence management with SOAR capabilities ensures that organizations can operationalize threat feeds effectively, enhancing their overall security posture. Additionally, the platform's extensive integration ecosystem, with over 360 third-party integrations, enables organizations to orchestrate complex workflows across their existing security infrastructure without extensive custom development.

Average Rating: 4.6/5.0

Total Reviews: 29

How Do G2 Users Rate Cortex XSOAR?

  • Security Validation: 9.2/10 (Category avg: 9.1/10)
  • Intelligence Reports: 9.2/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 8.3/10 (Category avg: 8.7/10)
  • Ease of Use: 8.7/10 (Category avg: 9.1/10)

Who Is the Company Behind Cortex XSOAR?

  • Seller: Palo Alto Networks
  • Year Founded: 2005
  • HQ Location: Santa Clara, CA
  • Twitter: @PaloAltoNtwks
    128,951 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    23,492 employees on LinkedIn®
  • Ownership: NYSE: PANW

Who Uses This Product?

  • Top Industries: Computer & Network Security
  • Company Size: 52% Large, 31% Medium

What Do G2 Reviewers Say About Cortex XSOAR?

AI-generated summary from verified user reviews

Pros
  • Users value the powerful automation capabilities of Cortex XSOAR for enhancing incident response and threat detection.
  • Users appreciate the great UI of Palo Alto Networks Cortex XSOAR, enhancing data clarity and integration efficiency.
  • Users appreciate the clean and accurate data provided by Palo Alto Networks Cortex XSOAR, enhancing efficiency and safety.
  • Users value the powerful automation capabilities for incident response in Palo Alto Networks Cortex XSOAR.
  • Users appreciate the direct customer support from Palo Alto Networks Cortex XSOAR, enhancing their incident response experience.
Cons
  • Users find the learning curve steep, requiring significant time to become proficient with Cortex XSOAR.
  • Users desire more customization options for reporting, indicating limitations in the current capabilities of Cortex XSOAR.
  • Users find the logging issues in Cortex XSOAR frustrating, as readability is hindered by window size constraints.
  • Users find log management issues frustrating as data logs are hard to read quickly without opening new tabs.
  • Users feel that the reporting features lack customization, leading to a need for improvement in functionality.

What Are Recent G2 Reviews of Cortex XSOAR?

What Are G2 Users Discussing About Cortex XSOAR?

Feedly Threat Intelligence

Feedly Threat Intelligence is an AI platform for CTI teams. Track the threats aligned to your intelligence requirements, contextualize what matters, and deliver tailored intel in minutes. CTI analysts can configure Intel Agents to monitor the threat actors, malware families, vulnerabilities, industries, and geographies tied to to their intelligence requirements. These Agents collect continuously from open sources, vendor and government advisories, and dark web forums, then extract IoCs, TTPs, CVEs, and victim data into a Threat Graph. Every AI-generated finding links back to its source, so analysts can verify before they report. From there, analysts can curate, enrich, and distribute intelligence as custom reports and Slack or Teams notifications to SOC, IR, vulnerability management, and executive stakeholders. The same intelligence feeds the security stack via native integrations and a STIX 2.1 API into TIPs, SIEMs, and SOARs, and powers SOC agents, Threat hunting agents, and other agentic tooling through Feedly's MCP Server. Used by CTI teams at enterprises, MSSPs, ISACs, and financial institutions.

Average Rating: 4.8/5.0

Total Reviews: 8

How Do G2 Users Rate Feedly Threat Intelligence?

  • Intelligence Reports: 10.0/10 (Category avg: 9.1/10)
  • Ease of Use: 9.4/10 (Category avg: 9.1/10)

Who Is the Company Behind Feedly Threat Intelligence?

  • Seller: Feedly
  • Company Website:
  • HQ Location: Redwood City
  • Twitter: @feedly
    103,683 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    69 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Large

What Are Recent G2 Reviews of Feedly Threat Intelligence?

IDARK360

IDARK360 is an advanced platform offering 360-degree protection against modern cyber risks, focusing on four key areas: Dark Web Discovery and Monitoring: Accurate identification of your stolen data trading (credentials, IP, customer data) for early threat neutralization. Brand Identity Protection: Immediate monitoring for impersonation and phishing, with rapid removal of fraudulent content to safeguard your reputation. Security Controls Governance: Continuous and precise assessment of compliance with global controls (NIST, NCA) and gap management via a unified dashboard. Cyber Awareness and Culture Building: Employee Training: Providing simulated and realistic training programs to enhance employee vigilance. Phishing Simulation: Periodically testing the effectiveness of the human defence layer and identifying individual and collective weaknesses. Transforming Employees into a Defence Line: Reducing human errors that cause a significant percentage of breaches.

Average Rating: 5.0/5.0

Total Reviews: 10

How Do G2 Users Rate IDARK360?

  • Security Validation: 10.0/10 (Category avg: 9.1/10)
  • Intelligence Reports: 10.0/10 (Category avg: 9.1/10)
  • Endpoint Intelligence: 10.0/10 (Category avg: 8.7/10)
  • Ease of Use: 9.7/10 (Category avg: 9.1/10)

Who Is the Company Behind IDARK360?

  • Seller: IDARK360
  • Year Founded: 2025
  • HQ Location: Riyadh , SA
  • LinkedIn® Page: www.linkedin.com
    4 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 91% Small, 9% Medium

What Are Recent G2 Reviews of IDARK360?

Liferaft

Liferaft is designed to assist protective and security intelligence teams in transforming open-source signals into credible, actionable intelligence. This innovative platform enables users to navigate through overwhelming amounts of data and alerts, facilitating informed decision-making in a fraction of the time traditionally required. With Liferaft, teams can shift from merely processing noise to making confident decisions in minutes, which is crucial in high-stakes environments where every second counts. Liferaft is for security professionals, intelligence analysts, and protective intelligence teams who operate in fast-paced settings. These users often face the challenge of sifting through vast volumes of information from various sources, including surface, deep, dark, and fringe web signals. Liferaft addresses this need by offering a comprehensive intelligence solution that surfaces credible threats while effectively filtering out irrelevant noise. This capability allows teams to detect and triage potential risks before they escalate, ensuring that they focus on what truly matters. One of Liferaft's standout features is its identity resolution capability, which enables users to quickly determine if a threat actor is a known repeat offender within just 15 minutes. By linking online personas to real-world individuals, Liferaft empowers teams to make informed decisions about whether to escalate a threat, stand down, or brief leadership with evidence-backed insights. This feature significantly enhances the decision-making process, allowing for defensible actions based on reliable data rather than guesswork. Additionally, Liferaft employs advanced artificial intelligence to reduce noise and streamline the analysis process. By transforming large volumes of signals into prioritized, decision-ready intelligence in real-time, the platform alleviates the workload of analysts during active threat assessments. This support is designed to enhance human decision-making under pressure, ensuring that teams can act swiftly and effectively when it matters most. Liferaft is built with the understanding of real-world workflows and the complexities involved in protective intelligence operations. Developed by professionals with firsthand experience in the field, the platform delivers faster clarity and defensible decisions. This makes Liferaft not just a tool, but a trusted partner for teams navigating the challenges of high-stakes security environments, ultimately helping them transition from awareness to confident, actionable responses.

Average Rating: 4.8/5.0

Total Reviews: 9

How Do G2 Users Rate Liferaft?

  • Security Validation: 10.0/10 (Category avg: 9.1/10)
  • Ease of Use: 8.5/10 (Category avg: 9.1/10)

Who Is the Company Behind Liferaft?

  • Seller: Liferaft
  • Company Website:
  • Year Founded: 2014
  • HQ Location: Halifax, CA
  • LinkedIn® Page: www.linkedin.com
    110 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 44% Small, 33% Large

What Are Recent G2 Reviews of Liferaft?

Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller
Updated October 22, 2025