--- title: ThreatConnect TI Ops Reviews meta_title: 'ThreatConnect TI Ops Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 14 reviews by the users' company size, role or industry to find out how ThreatConnect TI Ops works for a business like yours. aggregate_rating: rating_value: 4.6 review_count: 14 scale: '5' date_modified: '2026-09-02' parent_category: name: System Security url: https://www.g2.com/categories/system-security --- # ThreatConnect TI Ops Reviews **Vendor:** ThreatConnect **Category:** [Threat Intelligence Software](https://www.g2.com/categories/threat-intelligence) **Average Rating:** 4.6/5.0 **Total Reviews:** 14 **AI Enabled:** This product embeds AI to enhance or extend its core functionality. ## About ThreatConnect TI Ops TI Ops is the threat intelligence platform built for operations, not just centralization. It ingests hundreds of internal and external sources, enriches them with AI, and aligns them to your intelligence requirements and MITRE ATT&CK gaps. Analysts can instantly operationalize insights across the SOC, IR, hunt, and vulnerability teams — no swivel-chairing required. When combined with Polarity and Risk Quantifier, TI Ops helps teams act on intelligence faster and focus on the threats that truly matter to the business. ## ThreatConnect TI Ops Pros & Cons Pros and Cons are compiled from review feedback and grouped into themes to provide an easy-to-understand summary of user reviews. **What users like:** - Users praise the **flexible no-code Playbook builder** , enhancing automation and integration for improved threat detection and response. (5 reviews) - Users value the **effective threat detection** capabilities of ThreatConnect TI Ops, enhancing security through collaborative intelligence. (5 reviews) - Users value the **ease of use** of ThreatConnect TI Ops, benefiting from its intuitive interfaces and seamless integrations. (4 reviews) - Users praise the **automation capabilities** of ThreatConnect TI Ops, enhancing efficiency and flexibility in security operations. (3 reviews) - Users appreciate the **ease of implementation** of ThreatConnect TI Ops, making it user-friendly for effective threat management. (3 reviews) - Integrations (3 reviews) - Users appreciate the **robust cybersecurity capabilities** of ThreatConnect, enabling effective threat detection and response. (2 reviews) - Easy Integrations (2 reviews) - Integration Capabilities (2 reviews) - Network Security (2 reviews) **What users dislike:** - Users feel the **UX needs improvement** for a smoother investigation flow and enhanced overall interface usability. (2 reviews) - Users note that **additional licensing costs** for some features can hinder accessibility for smaller organizations. (1 reviews) - Users dislike the **API limitations** that hinder seamless integration with other tools and affect TQL writing. (1 reviews) - Users find the **difficult learning curve** of ThreatConnect TI Ops challenging at first, but training reduces frustration. (1 reviews) - Users find the **difficult setup** challenging initially, but appreciate the available training resources to ease the process. (1 reviews) - Expensive (1 reviews) - Users often experience **integration issues** with TQL and API calls, impacting their overall efficiency with ThreatConnect TI Ops. (1 reviews) - Licensing Issues (1 reviews) - Users report **navigation issues** with ThreatConnect TI Ops, finding the platform occasionally challenging to use. (1 reviews) - Users find the **navigation challenging** , resulting in a less seamless experience on the ThreatConnect platform. (1 reviews) ## ThreatConnect TI Ops Reviews ### 1. The TIP is nice, the SOAR has become indispensable **Rating:** 4.5/5.0 stars **Reviewed by:** Eric B. | Security Engineer, Enterprise (> 1000 emp.) **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through a business email account **Source: Organic:** Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate. **Reviewed Date:** June 09, 2025 **What do you like best about ThreatConnect TI Ops?** We use the TIP data to compare logs in our SIEM to hunt for threats and enrich other threats that we may come across. More significantly in the last bunch of years, they added SOAR capabilities that are improving. We use the SOAR to automate many of the first steps that our SOC would otherwise need to do manually. It has also allowed for fewer panes of glass or the SOC to look at things through. If there isn't already an app for integration with another vendor, the HTTP client has proven to be very flexible for creating those integrations with another product's API. **What do you dislike about ThreatConnect TI Ops?** The UI could use improvements. There are some, such as the ability to work on a number of indicators showing up in an event from the one screen, that I've been asking for for years and still isn't there. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** The SOAR capabilities have taken over a lot of first level response work. In some cases between the SIEM and the SOAR processes were just completely handled between the two with just a report available to anyone in operations. ### 2. A powerful and fully customizable Threat Intelligence Platform **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through Google One Tap using a business email account **Source: Organic:** Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate. **Reviewed Date:** June 03, 2025 **What do you like best about ThreatConnect TI Ops?** ThreatConnect TIP has an extensive Playbook & Custom APP capabilities. As they have an HTTP Client engine, you can integrate it with literally any system that supports RESTful APIs or TAXII servers (which is pretty much supported by all big solutions or security technologies). This means that you can, without any help, build your own playbook to integrate with any system within the organization. This allows for an incredible level of automation and customization for your specific use cases and needs. **What do you dislike about ThreatConnect TI Ops?** At the initial stages of using the Platform, we struggled a little as creating efficient playbooks and apps is not an easy task. However, the ThreatConnect CSE has done an incredible job getting us accustomed to the platform. We also get a training bundle and access to ThreatConnect Learning platform with no added cost. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** ThreatConnect helps aggregates intelligence feeds and data from hundreds of sources into just one place. This provides ease of usability and allows for greater extent of workflow automation. ### 3. One size fits all solution. **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through a business email account **Source: Organic:** Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate. **Reviewed Date:** August 01, 2025 **What do you like best about ThreatConnect TI Ops?** TC promotes cross-collaboration like any other TI solution due to the sheer amount of people involved in enriching and reporting indicators of compromise and the absolute vast amount of OSINT we get from it. This allows for accurate and efficient decision making when mitigation and prevention are priority. **What do you dislike about ThreatConnect TI Ops?** The UX could use some polishing to make the flow of investigation more seamless. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** In a sea of readily available information, TC delivers more concise, ready-for-deployment OSINT. ### 4. Powerful Threat Intelligence Platform with Excellent Automation and Customization **Rating:** 4.0/5.0 stars **Reviewed by:** Justin A. | Principal Consultant, Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through a business email account added to their profile **Source: Organic:** Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate. **Reviewed Date:** August 04, 2025 **What do you like best about ThreatConnect TI Ops?** The no-code, drag-and-drop Playbook builder is excellent. We've automated things like enrichment (VirusTotal, DomainTools), sandbox submissions, and even screenshot capture of suspicious URLs. It's flexible and integrates well with other tools. **What do you dislike about ThreatConnect TI Ops?** Some Marketplace apps and features can require additional licensing, which may be a blocker for smaller orgs. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** In one of the consulting projects, we evaluated it by automatically enriching and organizing data from different sources. We have also built custom automations (using their Playbooks) to handle tasks like checking indicators, gathering screenshots, and even alerting without manual work. ### 5. I love using Threat Connect its really easy to handle **Rating:** 4.5/5.0 stars **Reviewed by:** Aditya D. | Senior SOC Analyst, Enterprise (> 1000 emp.) **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** This review contains authentic analysis and has been reviewed by our team **Source: Organic:** Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate. **Reviewed Date:** June 16, 2025 **What do you like best about ThreatConnect TI Ops?** Our one of the client uses Threat connect for threat intellicence to block and protect the user playbooks is the best part. **What do you dislike about ThreatConnect TI Ops?** I dont like some cabability while writing the TQL and API calling with other tools **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** It is helping to protecting milions of customer to get phished. ### 6. Best experience I had with Threat connect Threat Intelligence Ops platform **Rating:** 5.0/5.0 stars **Reviewed by:** Sagar G. | Threat Hunter, Enterprise (> 1000 emp.) **Validated Reviewer:** Validated through a business email account **Source: Organic:** Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate. **Reviewed Date:** March 03, 2025 **What do you like best about ThreatConnect TI Ops?** What I like the most about Threat Intelligence Ops platform that they provided different dashboards which help to prioritize threat so we can take best action. I used Ops platform frequently for day to day activity as a threat hunter must be work on recent threats and malwares, the platform are very easy to use and user friendly, implementation was easy, I have not done but got positive feedback from peers. I can connect with threat connect team to get help on particular issue I am facing with portal and team helps me with my issues. **What do you dislike about ThreatConnect TI Ops?** There are no thing to dislike about Ops platform. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** So I had some issue with Ops platform related to dashboard but it got resolve now dont want any changes to done from team. ### 7. ThreatConnect | Threat Intelligence Ops Platform and Aggregator **Rating:** 5.0/5.0 stars **Reviewed by:** Shubham K. | Threat Hunting and Incident Response, Enterprise (> 1000 emp.) **Validated Reviewer:** Validated through a business email account **Source: Organic:** Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate. **Reviewed Date:** January 23, 2025 **What do you like best about ThreatConnect TI Ops?** Easy Integration with multiple cyber security detection tools for early detection of threat using high fidelity threat intelligence. Seamless aggregation of IOCs from multiple sources and identification of high fidelity threat intelligence and threat actors most likely targeting particular industries or platforms. Feature helping in profiling threat actors. **What do you dislike about ThreatConnect TI Ops?** Nothing as of now I remember particularly which I dislike. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** Aggregation of Threat intelligence from various sources. Integration with cyber security detection tools to ensure early detections based on high fidelity threat intelligence. ### 8. All in one TIP solution **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Marketing and Advertising | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through a business email account **Source: Organic:** Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate. **Reviewed Date:** January 22, 2025 **What do you like best about ThreatConnect TI Ops?** The platform is beyond expectations, has a lot of inbuilt integrations, Threat feeds corelations, ease of implementation and provide a wonderful solution to respond to cyber threats. **What do you dislike about ThreatConnect TI Ops?** Few minor bugs and sometimes the platform is a little hard to navigate **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** Live threat intelligence about the trending Indicators and live feeds from more than 90+ sources, automations, playbook creations, Dashboards and insights about our threat landscape. ### 9. I try to use it in my dev environment **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Education Management | Mid-Market (51-1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through a business email account **Source: Organic:** Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate. **Reviewed Date:** March 06, 2025 **What do you like best about ThreatConnect TI Ops?** Measure and demonstrate the value and impact of our program. **What do you dislike about ThreatConnect TI Ops?** I am still learning about this product as a user. So far I find it very easy to use. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** I need ThreadConnect Threat Intelligence Ops Platform to help me quantify my cyber risks. ### 10. Effective Cyber security platform **Rating:** 4.0/5.0 stars **Reviewed by:** Vijay Kumar T. | Deputy Manager, Information Technology and Services, Enterprise (> 1000 emp.) **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through a business email account **Source: Organic:** Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate. **Reviewed Date:** January 02, 2024 **What do you like best about ThreatConnect TI Ops?** good interface, provides much details in a user friendly language, easier to review the threat and take action **What do you dislike about ThreatConnect TI Ops?** nothing much, just I feel that the reporting feature can be better **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** It gives a central platform to review the threats, understand the vectors and eventually making the environment secure. ### 11. Unique Statistical and Authentication Package offering the easiest features. **Rating:** 4.5/5.0 stars **Reviewed by:** Grace m. | Database Analyst, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal incentive as thanks for completing this review. **Source: G2 invite on behalf of seller:** Invitation from G2 on behalf of a seller or affiliate. This reviewer was offered a nominal incentive as thanks for completing this review. **Reviewed Date:** June 18, 2021 **What do you like best about ThreatConnect TI Ops?** Easy for any company to effectively prioritize potential high-risk issues, as well as easy on records maintenance, and ThreatConnect allows the user on easy threat detection via actionable analysis. Tracking functionality is good, and its dashboard allows simple assessment of risk and easy operation reporting effectively. **What do you dislike about ThreatConnect TI Ops?** Nothing important that came across during the TreatConnect implementation and even learning much about the tools. **Recommendations to others considering ThreatConnect TI Ops:** Risk management system which also offers many possibilities for easy detection of high-risk threat and record-keeping platform. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** Easy tracking various things. Risk and threat identifying. Easy access management. ### 12. Investigate, validate, respond and solve any kind of threat with threat connect. **Rating:** 5.0/5.0 stars **Reviewed by:** Salome W. | IT Specialist, Information Technology and Services, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** August 08, 2019 **What do you like best about ThreatConnect TI Ops?** This software combines orchestration, automation and response to increase proactive and efficiency. It automate workflow with defensive to provide intelligence. **What do you dislike about ThreatConnect TI Ops?** No dislike so far that we can confirm about this software it work with our organization well. **Recommendations to others considering ThreatConnect TI Ops:** We have for more than two years used this software and it has provided us with excellent work and in return we highly recommend it to others as well. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** This software provide and export threats report as PDF, it decrease false positive freeing up space for true alerts. ### 13. Validate and solve threats with threat Connect. **Rating:** 4.5/5.0 stars **Reviewed by:** Eunice M. | IT Manager, Information Technology and Services, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Source: Organic:** Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate. **Reviewed Date:** August 09, 2019 **What do you like best about ThreatConnect TI Ops?** It helps automate enrichment for more effective prevention and quicker detection. It also provides organizations with information related to newest forms of cyber threats and malware. **What do you dislike about ThreatConnect TI Ops?** There is no shortcomings so far with this software because it is effective and recommendable to other organizations. **Recommendations to others considering ThreatConnect TI Ops:** It is an excellent software therefore I would recommend Threat connect to other organizations to strengthen their security control systems. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** It provides a center for security operations for detecting and responding hence enhances team work. ### 14. A good software to stop the bugs. **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Transportation/Trucking/Railroad | Small-Business (50 or fewer emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** December 21, 2018 **What do you like best about ThreatConnect TI Ops?** ThreatConnect boasts it can stop any threat by joining your in house virus software with a collaboration of threat data drom others, and it does just that. Its nice to see a software that protects your sensitive files without having to pull an arm and a leg to geT it done. **What do you dislike about ThreatConnect TI Ops?** The cost seems a little hjgh depending on what you need, and it takes a bit to set up and tweak it to do exactly what you need it to do. Other than that not much bad I can say about it. **What problems is ThreatConnect TI Ops solving and how is that benefiting you?** For the short period of time my business used the software, threatconnect did what it said it would do. And we were able to create what it calls a playbook to classify threats discovered by us to upload, which was nice. ## ThreatConnect TI Ops Discussions - [How do you use Threatconnect?](https://www.g2.com/discussions/threatconnect-how-do-you-use-threatconnect) - [How do you use Threatconnect?](https://www.g2.com/discussions/how-do-you-use-threatconnect) - [What does ThreatConnect do?](https://www.g2.com/discussions/what-does-threatconnect-do) - [What are threat capabilities?](https://www.g2.com/discussions/what-are-threat-capabilities) - [What is ThreatConnect used for?](https://www.g2.com/discussions/what-is-threatconnect-used-for) - [View ThreatConnect TI Ops pricing details and edition comparison](https://www.g2.com/products/threatconnect-ti-ops/reviews?section=pricing&secure%5Bexpires_at%5D=2026-09-08+18%3A10%3A34+-0500&secure%5Bsession_id%5D=df85a73e-f667-4cfe-9dc9-81618de8ede3&secure%5Btoken%5D=58b2b49015f13b3fcc76e98db529714412949a3157fafc58c6d317dae72d9f73&format=llm_user) ## ThreatConnect TI Ops Features **Additional Functionality** - Search/Filter - Risk Management - Generative AI - Alerts/Notifications - Compliance Management - Third-Party Integrations - Certificate Assessment - API - Incident Management - Automated Containment - Real-Time Data - Vulnerability Scanning - Monitoring - Policy Management - Asset Discovery - Penetration Testing - Runtime Container Security - Activity Dashboard - Security Auditing - Issue Tracking - Threat Intelligence - Patch Management - Endpoint Management - Collaboration Tools - Vulnerability Management - Goal Setting/Tracking - Vulnerability Assessment - Asset Tagging - Assessment Management - Access Controls/Permissions - AI Copilot - Vulnerability/Threat Prioritization - Vulnerability Protection - Risk Assessment - Reporting/Analytics - SQL Injections **Risk Analysis** - Risk Scoring - Reporting - Risk-Prioritization **Orchestration** - Asset Management - Security Workflow Automation - Deployment - Sandboxing - Remediation Management **Response** - Resolution Automation - System Isolation - Threat Intelligence - Incident Investigation **Vulnerability Assesment** - Vulnerability Scanning - Vulnerability Intelligence - Contextual Data - Dashboards **Information** - Proactive Alerts - Malware Detection - Intelligence Reports - Threat Intelligence - Real-time Alerts **Records** - Incident Logs - Incident Reports **Automation** - Automated Remediation - Workflow Automation - Security Testing - Test Automation **Personalization** - Endpoint Intelligence - Security Validation - Dynamic/Code Analysis - Event Analysis - Web-Application Security - Application Security **Management** - Incident Alerts - Incident Case Management - Workflow Management **Generative AI** - Generate Attack Scenarios - Generate Threat Detection Rules - Generate Threat Summaries - Generative AI **Generative AI** - Generative AI **Additional Functionality** - SSL Security - HIPAA Compliant - API - Threat Response - Endpoint Protection - Maintenance Scheduling - Third-Party Integrations - Security Auditing - Application Security - Encryption - Network Security - Real-Time Reporting - AI Copilot - Reporting/Analytics - Authentication - Financial Data Protection - Anti Virus - Secure Data Storage - Virus Definition Update - Activity Dashboard - VPN - Audit Trail - Anti Spam - Access Controls/Permissions - Data Visualization - Alerts/Escalation - Data Security **Agentic AI - Threat Intelligence** - Autonomous Task Execution - Multi-step Planning - Proactive Assistance - Decision Making **Additional Functionality** - Real-Time Reporting - Real-Time Analytics - Network Monitoring - API - Reporting/Analytics - Alerts/Notifications - Behavior Analytics - AI Copilot - Activity Dashboard - Profiling - Cloud Backup - Data Visualization - Activity Monitoring - Network Scanning - Event Logs - Monitoring - Server Monitoring - Vulnerability Scanning - Incident Reporting - Activity Tracking - Reporting & Statistics - Network Provisioning - Prioritization - Threat Response - Real-Time Data - IT Reporting ## Top ThreatConnect TI Ops Alternatives - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - 4.7/5.0 (542 reviews) - [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews) - 4.3/5.0 (396 reviews) - [Tines Stories](https://www.g2.com/products/tines-stories/reviews) - 4.7/5.0 (424 reviews)