1. [Home](https://www.g2.com/) 2. ... 3. [Incident Response Software](https://www.g2.com/categories/incident-response) 4. [TheHive Discussions](https://www.g2.com/products/thehive/discuss) [ ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_dd77248d2cf6ead27d4728c028fe692c/thehive.png "Product Avatar Image") ![Reward for good TheHive reviews](https://images.g2crowd.com/uploads/report_medal_translation/image/37399/medal.svg "Reward for good TheHive reviews") ](/products/thehive/reviews) [ TheHive ](/products/thehive/reviews) (18)4.3/5 TheHive is a collaborative security case management platform designed to help SOC, CERT, CSIRT and MSSP teams manage the full incident response lifecycle. It serves as a central hub where security analysts can receive and triage alerts, conduct investigations, coordinate team actions and close incidents—all without switching tools. The platform integrates natively with other security tools, allowing teams to operate within existing workflows rather than replacing them. TheHive supports multi-tenancy, making it suitable for MSSPs and large organizations that manage security operations across multiple clients, business units or environments. Key capabilities include: - 300+ pre-built integrations: Connect TheHive to your SIEM, EDR, threat intelligence platforms, ticketing systems and other tools to embed it into existing infrastructure. - Alert ingestion and triage: Automatically receive, deduplicate and prioritize alerts from connected sources, with full visibility into alert status and assignment across the team. - Case and task management: Organize investigations using cases and tasks with defined ownership to maintain transparency and accountability. - Multi-tenancy and client isolation: Run separate, isolated workspaces for different clients or internal teams from a single deployment, with granular access controls and role-based permissions. - Automation: Trigger automated investigation or response actions, analyst notifications and third-party integrations, reducing manual effort. - Reporting and compliance: Generate incident reports and maintain full audit trails across investigations. Give external stakeholders controlled access to specific case details. TheHive is developed and maintained by StrangeBee and is trusted by 3,500+ security professionals across 50+ countries. Organizations including BMW, Thales, Pipedrive, Garmin and Cisco use TheHive to centralize and speed up incident response actions, enforce consistent processes across distributed teams, scale security operations and reduce alert fatigue. The platform is available as an on-premises deployment or as a cloud-hosted service, with tiered plans designed to match the operational needs of mid-size to large security teams. It supports air-gapped environments and offers deployment flexibility for organizations with strict data residency or compliance requirements. Show More * * * ### 44.0 Nps Score Already have TheHive? ### All TheHive Discussions Search Most CommentedMost HelpfulPinned by G2Newest All DiscussionsDiscussions with CommentsPinned by G2Discussions without Comments FilterFilter Filter byExpand/Collapse Sort by Most Commented Most Helpful Pinned by G2 Newest Filter by All Discussions Discussions with Comments Pinned by G2 Discussions without Comments ![Pinned by G2 as a common question](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Pinned by G2 as a common question") G2 Pinned by G2 as a common question • almost 3 years ago More Options - [ # What is TheHive used for? ](/discussions/what-is-thehive-used-for) What is TheHive used for? [ Incident Response Software ](https://www.g2.com/tags/incident-response-software) * * * \<0\>0\>Upvotes * * * 1 Comment [![linkedin](/assets/social-logos/linkedin-afe65e46604a5bd5105ab9c856116204040b6b3f2b2d42562fc8071ca0c48ca0.svg "linkedin")](https://www.linkedin.com/shareArticle?mini=true&summary=Ask+TheHive+questions+and+get+answers+from+expert+users+in+our+TheHive+Discussions+section.&title=TheHive+Discussions+%7C+G2&url=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fthehive%2Fdiscuss) [![twitter](/assets/social-logos/twitter-61aaec80434c71387b8f7326e480592eae71c0a65afd051d66fce9b75a9bf417.svg "twitter")](https://twitter.com/intent/tweet?text=TheHive+Discussions+%7C+G2&url=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fthehive%2Fdiscuss&via=G2dotcom) [![facebook](/assets/social-logos/facebook-350d0b410d6b10debcf893050e803a8633d53561aa42807b087b8daf9be3668f.svg "facebook")](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fthehive%2Fdiscuss) [![gmail](/assets/social-logos/gmail-6db42f21e7c254fae201b112bef0dd15d25223a5cbb32691ce80eab43761eadf.svg "gmail")](https://mail.google.com/mail/?view=cm&fs=1&tf=1&to=&su=TheHive+Discussions+%7C+G2&body=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fthehive%2Fdiscuss%0aAsk+TheHive+questions+and+get+answers+from+expert+users+in+our+TheHive+Discussions+section.) [![mail](/assets/social-logos/mail-d55c53b04bf49872e40cd2443b85a99caa23394e6cf154ae32a9d08377c15d86.svg "mail")](mailto:?subject=TheHive+Discussions+%7C+G2&body=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fthehive%2Fdiscuss%0aAsk+TheHive+questions+and+get+answers+from+expert+users+in+our+TheHive+Discussions+section.) ![copy_link](/assets/social-logos/copy_link-05d8dc5dc8576fc78425ad34d07241b060878835e555a30417ff41c18335e575.svg "copy\_link") ## Start a New Software Discussion Have a software question? Get answers from real users and experts [Start A Discussion](/products/thehive/discussions/new) * * * ![Product Avatar Image](https://images.g2crowd.com/uploads/product/hd_favicon/82465bc654f7111c0512b0cf1aa87ae8/thehive.svg "Product Avatar Image") ### Have you used TheHive before? Answer a few questions to help the TheHive community [ Yes ](javascript:void(0))[ Yes ](https://www.g2.com/authorize?form=signup&return_to=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fthehive%2Fdiscuss%3Fsmall_ask%3Dthehive) No ## Top Contributors in TheHive 1 EM Loading... ### [Ekaterina M.](https://www.g2.com/users/5edd8465-7765-4587-8189-054851b10ad9 "Ekaterina M.") 1 pt