--- title: ThreatConnect TI Ops Reviews meta_title: 'ThreatConnect TI Ops Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 14 reviews by the users' company size, role or industry to find out how ThreatConnect TI Ops works for a business like yours. aggregate_rating: rating_value: 4.6 review_count: 14 scale: '5' date_modified: '2026-07-13' parent_category: name: System Security url: https://www.g2.com/categories/system-security --- # ThreatConnect TI Ops Reviews **Vendor:** ThreatConnect **Category:** [Threat Intelligence Software](https://www.g2.com/categories/threat-intelligence) **Average Rating:** 4.6/5.0 **Total Reviews:** 14 ## About ThreatConnect TI Ops TI Ops is the threat intelligence platform built for operations, not just centralization. It ingests hundreds of internal and external sources, enriches them with AI, and aligns them to your intelligence requirements and MITRE ATT&CK gaps. Analysts can instantly operationalize insights across the SOC, IR, hunt, and vulnerability teams — no swivel-chairing required. When combined with Polarity and Risk Quantifier, TI Ops helps teams act on intelligence faster and focus on the threats that truly matter to the business. ## ThreatConnect TI Ops Pros & Cons **What users like:** - Users appreciate the **flexible, no-code integration capabilities** of ThreatConnect TI Ops, enhancing threat detection and automation. (5 reviews) - Users value the **robust threat detection** capabilities of ThreatConnect TI Ops, enhancing automation and precision in cybersecurity efforts. (5 reviews) - Users value the **ease of use** with ThreatConnect TI Ops, thanks to its no-code Playbook builder and seamless integrations. (4 reviews) - Users value the **flexible automation capabilities** of ThreatConnect TI Ops, enhancing security operations and integrating seamlessly with other tools. (3 reviews) - Users highlight the **implementation ease** of ThreatConnect TI Ops, making it user-friendly and efficient for daily activities. (3 reviews) - Integrations (3 reviews) - Users appreciate the **robust cybersecurity capabilities** of ThreatConnect, enabling effective threat detection and response. (2 reviews) - Easy Integrations (2 reviews) - Integration Capabilities (2 reviews) - Network Security (2 reviews) **What users dislike:** - Users find the **UX lacking** , noting a need for a more seamless investigation flow and improved UI. (2 reviews) - Users find that **additional licensing costs** for some features can be a barrier for smaller organizations. (1 reviews) - Users face **API limitations** that hinder their ability to effectively integrate ThreatConnect TI Ops with other tools. (1 reviews) - Users find the **difficult learning curve** of ThreatConnect TI Ops challenging initially, despite helpful training resources available. (1 reviews) - Users find the **difficult setup** of ThreatConnect TI Ops challenging initially, despite the helpful resources provided. (1 reviews) - Expensive (1 reviews) - Users often experience **integration issues** with TQL and API calls, impacting their overall efficiency with ThreatConnect TI Ops. (1 reviews) - Licensing Issues (1 reviews) - Users report **navigation issues** with ThreatConnect TI Ops, finding the platform occasionally challenging to use. (1 reviews) - Users find the **navigation challenging** , resulting in a less seamless experience on the ThreatConnect platform. (1 reviews) ## ThreatConnect TI Ops Reviews ### 1. The TIP is nice, the SOAR has become indispensable **Rating:** 4.5/5.0 stars **Reviewed by:** Eric B. | Security Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** June 09, 2025 **What do you like best about ThreatConnect TI Ops?** We use the TIP data to compare logs in our SIEM to hunt for threats and enrich other threats that we may come across. More significantly in the last bunch of years, they added SOAR capabilities that are improving. We use the SOAR to automate many of the first steps that our SOC would otherwise need to do manually. It has also allowed for fewer panes of glass or the SOC to look at things through. If there isn't already an app for integration with another vendor, the HTTP client has proven to be very flexible for creating those integrations with another product's API. **What do you dislike about ThreatConnect TI Ops?** The UI could use improvements. There are some, such as the ability to work on a number of indicators showing up in an event from the one screen, that I've been asking for for years and still isn't there. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** The SOAR capabilities have taken over a lot of first level response work. In some cases between the SIEM and the SOAR processes were just completely handled between the two with just a report available to anyone in operations. ### 2. A powerful and fully customizable Threat Intelligence Platform **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Enterprise (> 1000 emp.) **Reviewed Date:** June 03, 2025 **What do you like best about ThreatConnect TI Ops?** ThreatConnect TIP has an extensive Playbook & Custom APP capabilities. As they have an HTTP Client engine, you can integrate it with literally any system that supports RESTful APIs or TAXII servers (which is pretty much supported by all big solutions or security technologies). This means that you can, without any help, build your own playbook to integrate with any system within the organization. This allows for an incredible level of automation and customization for your specific use cases and needs. **What do you dislike about ThreatConnect TI Ops?** At the initial stages of using the Platform, we struggled a little as creating efficient playbooks and apps is not an easy task. However, the ThreatConnect CSE has done an incredible job getting us accustomed to the platform. We also get a training bundle and access to ThreatConnect Learning platform with no added cost. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** ThreatConnect helps aggregates intelligence feeds and data from hundreds of sources into just one place. This provides ease of usability and allows for greater extent of workflow automation. ### 3. One size fits all solution. **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** August 01, 2025 **What do you like best about ThreatConnect TI Ops?** TC promotes cross-collaboration like any other TI solution due to the sheer amount of people involved in enriching and reporting indicators of compromise and the absolute vast amount of OSINT we get from it. This allows for accurate and efficient decision making when mitigation and prevention are priority. **What do you dislike about ThreatConnect TI Ops?** The UX could use some polishing to make the flow of invesitgation more seamless. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** In a sea of readily available information, TC delivers more concise, ready-for-deployment OSINT. ### 4. Powerful Threat Intelligence Platform with Excellent Automation and Customization **Rating:** 4.0/5.0 stars **Reviewed by:** Justin A. | Principal Consultant, Small-Business (50 or fewer emp.) **Reviewed Date:** August 04, 2025 **What do you like best about ThreatConnect TI Ops?** The no-code, drag-and-drop Playbook builder is excellent. We've automated things like enrichment (VirusTotal, DomainTools), sandbox submissions, and even screenshot capture of suspicious URLs. It's flexible and integrates well with other tools. **What do you dislike about ThreatConnect TI Ops?** Some Marketplace apps and features can require additional licensing, which may be a blocker for smaller orgs. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** In one of the consulting project, we evalaute it by automatically enriching and organizing data from different sources. We have also built custom automations (using their Playbooks) to handle tasks like checking indicators, gathering screenshots, and even alerting without manual work ### 5. I love using Threat Connect its really easy to handle **Rating:** 4.5/5.0 stars **Reviewed by:** Aditya D. | Senior SOC Analyst, Enterprise (> 1000 emp.) **Reviewed Date:** June 16, 2025 **What do you like best about ThreatConnect TI Ops?** Our one of the client uses Threat connect for threat intellicence to block and protect the user playbooks is the best part. **What do you dislike about ThreatConnect TI Ops?** I dont like some cabability while writing the TQL and API calling with other tools **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** It is helping to protecting milions of customer to get phished. ### 6. Best experience I had with Threat connect Threat Intelligence Ops platform **Rating:** 5.0/5.0 stars **Reviewed by:** Sagar G. | Threat Hunter, Enterprise (> 1000 emp.) **Reviewed Date:** March 03, 2025 **What do you like best about ThreatConnect TI Ops?** What I like the most about Threat Intelligence Ops platform that they provided different dashboards which help to prioritize threat so we can take best action. I used Ops platform frequently for day to day activity as a threat hunter must be work on recent threats and malwares, the platform are very easy to use and user friendly, implementation was easy, I have not done but got positive feedback from peers. I can connect with threat connect team to get help on particular issue I am facing with portal and team helps me with my issues. **What do you dislike about ThreatConnect TI Ops?** There are no thing to dislike about Ops platform. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** So I had some issue with Ops platform related to dashboard but it got resolve now dont want any changes to done from team. ### 7. ThreatConnect | Threat Intelligence Ops Platform and Aggregator **Rating:** 5.0/5.0 stars **Reviewed by:** Shubham K. | Threat Hunting and Incident Response, Enterprise (> 1000 emp.) **Reviewed Date:** January 23, 2025 **What do you like best about ThreatConnect TI Ops?** Easy Integration with multiple cyber security detection tools for early detection of threat using high fedelity threat intelligence. seemless aggregation of IOCs from multiple sources and identification of high fedelity threat intelligence and threat actors most likely trageting perticular industry or platfomrs. Feature helping in profiling threat actors. **What do you dislike about ThreatConnect TI Ops?** Nothing as of now i remember perticualerly which i dislike. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** Aggregation of Threat intellegence from various sources. Integration with cyber security detection tools to ensure early detections based on high fedelity threat intelligence. ### 8. All in one TIP solution **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Marketing and Advertising | Enterprise (> 1000 emp.) **Reviewed Date:** January 22, 2025 **What do you like best about ThreatConnect TI Ops?** The platform is beyond expectations, has a lot of inbuilt integrations, Threat feeds corelations, ease of implementation and provide a wonderful solution to respond to cyber threats. **What do you dislike about ThreatConnect TI Ops?** Few minor bugs and sometimes the platform is a little hard to navigate **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** Live threat intelligence about the trending Indicators and live feeds from more than 90+ sources, automations, playbook creations, Dashboards and insights about our threat landscape. ### 9. I try to use it in my dev environment **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Education Management | Mid-Market (51-1000 emp.) **Reviewed Date:** March 06, 2025 **What do you like best about ThreatConnect TI Ops?** Measure and demonstrate the value and impact of our program. **What do you dislike about ThreatConnect TI Ops?** I am still learning about this product as a user. So far I find it very easy to use. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** I need ThreadConnect Threat Intelligence Ops Platform to help me quantify my cyber risks. ### 10. Effective Cyber security platform **Rating:** 4.0/5.0 stars **Reviewed by:** Vijay Kumar T. | Deputy Manager, Information Technology and Services, Enterprise (> 1000 emp.) **Reviewed Date:** January 02, 2024 **What do you like best about ThreatConnect TI Ops?** good interface, provides much details in a user friendly language, easier to review the threat and take action **What do you dislike about ThreatConnect TI Ops?** nothing much, just I feel that the reporting feature can be better **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** It gives a central platform to review the threats, understand the vectors and eventually making the enviroment secure. ### 11. Unique Statistical and Authentication Package offering the easiest features. **Rating:** 4.5/5.0 stars **Reviewed by:** Grace m. | Database Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** June 18, 2021 **What do you like best about ThreatConnect TI Ops?** Easy for any company to effectively prioritize potential high-risk issues, as well as easy on records maintenance, and ThreatConnect allows the user on easy threat detection via actionable analysis. Tracking functionality is good, and its dashboard allows simple assessment of risk and easy operation reporting effectively. **What do you dislike about ThreatConnect TI Ops?** Nothing important that came across during the TreatConnect implementation and even learning much about the tools. **Recommendations to others considering ThreatConnect TI Ops:** Risk management system which also offers many possibilities for easy detection of high-risk threat and record-keeping platform. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** Easy tracking various things. Risk and threat identifying. Easy access management. ### 12. Investigate, validate, respond and solve any kind of threat with threat connect. **Rating:** 5.0/5.0 stars **Reviewed by:** Salome W. | IT Specialist, Information Technology and Services, Mid-Market (51-1000 emp.) **Reviewed Date:** August 08, 2019 **What do you like best about ThreatConnect TI Ops?** This software combines orchestration, automation and response to increase proactive and efficiency. It automate workflow with defensive to provide intelligence. **What do you dislike about ThreatConnect TI Ops?** No dislike so far that we can confirm about this software it work with our organization well. **Recommendations to others considering ThreatConnect TI Ops:** We have for more than two years used this software and it has provided us with excellent work and in return we highly recommend it to others as well. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** This software provide and export threats report as PDF, it decrease false positive freeing up space for true alerts. ### 13. Validate and solve threats with threat Connect. **Rating:** 4.5/5.0 stars **Reviewed by:** Eunice M. | IT Manager, Information Technology and Services, Mid-Market (51-1000 emp.) **Reviewed Date:** August 09, 2019 **What do you like best about ThreatConnect TI Ops?** It helps automate enrichment for more effective prevention and quicker detection. It also provides organizations with information related to newest forms of cyber threats and malware. **What do you dislike about ThreatConnect TI Ops?** There is no shortcomings so far with this software because it is effective and recommendable to other organizations. **Recommendations to others considering ThreatConnect TI Ops:** It is an excellent software therefore I would recommend Threat connect to other organizations to strengthen their security control systems. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** It provides a center for security operations for detecting and responding hence enhances team work. ### 14. A good software to stop the bugs. **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Transportation/Trucking/Railroad | Small-Business (50 or fewer emp.) **Reviewed Date:** December 21, 2018 **What do you like best about ThreatConnect TI Ops?** ThreatConnect boasts it can stop any threat by joining your in house virus software with a collaboration of threat data drom others, and it does just that. Its nice to see a software that protects your sensitive files without having to pull an arm and a leg to geT it done. **What do you dislike about ThreatConnect TI Ops?** The cost seems a little hjgh depending on what you need, and it takes a bit to set up and tweak it to do exactly what you need it to do. Other than that not much bad I can say about it. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** For the short period of time my business used the software, threatconnect did what it said it would do. And we were able to create what it calls a playbook to classify threats discovered by us to upload, which was nice. ## ThreatConnect TI Ops Discussions - [How do you use Threatconnect?](https://www.g2.com/discussions/threatconnect-how-do-you-use-threatconnect) - [How do you use Threatconnect?](https://www.g2.com/discussions/how-do-you-use-threatconnect) - [What does ThreatConnect do?](https://www.g2.com/discussions/what-does-threatconnect-do) - [What are threat capabilities?](https://www.g2.com/discussions/what-are-threat-capabilities) - [What is ThreatConnect used for?](https://www.g2.com/discussions/what-is-threatconnect-used-for) - [View ThreatConnect TI Ops pricing details and edition comparison](https://www.g2.com/products/threatconnect-ti-ops/reviews?section=pricing&secure%5Bexpires_at%5D=2026-07-15+10%3A32%3A00+-0500&secure%5Bsession_id%5D=c7bbdefb-62ac-46b2-abf8-0b64a3163d13&secure%5Btoken%5D=09a1b4ae33624bea215339db37969318b35a131ac8be0305877b21960ea5ba11&format=llm_user) ## ThreatConnect TI Ops Features **Risk Analysis** - Risk Scoring - Reporting - Risk-Prioritization **Orchestration** - Asset Management - Security Workflow Automation - Deployment - Sandboxing **Response** - Resolution Automation - System Isolation - Threat Intelligence - Incident Investigation **Vulnerability Assesment** - Vulnerability Scanning - Vulnerability Intelligence - Contextual Data - Dashboards **Information** - Proactive Alerts - Malware Detection - Intelligence Reports **Records** - Incident Logs - Incident Reports **Automation** - Automated Remediation - Workflow Automation - Security Testing - Test Automation **Personalization** - Endpoint Intelligence - Security Validation - Dynamic/Code Analysis **Management** - Incident Alerts - Incident Case Management - Workflow Management **Generative AI** - Generate Attack Scenarios - Generate Threat Detection Rules - Generate Threat Summaries **Agentic AI - Threat Intelligence** - Autonomous Task Execution - Multi-step Planning - Proactive Assistance - Decision Making ## Top ThreatConnect TI Ops Alternatives - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - 4.6/5.0 (417 reviews) - [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews) - 4.3/5.0 (391 reviews) - [Tines](https://www.g2.com/products/tines/reviews) - 4.7/5.0 (396 reviews)