Threat intelligence platforms help organisations collect, organise, enrich, analyse, and share information about cyber threats. Rather than leaving indicators and reports scattered across different feeds and tools, they provide a central place to build context around malicious domains, IP addresses, files, vulnerabilities, threat actors, campaigns, and other security data.
They are aimed mainly at security operations centres, incident response teams, threat hunters, malware analysts, researchers, and organisations that need to understand emerging threats and investigate suspicious activity. They can also help teams collaborate by linking related information and maintaining a structured record of previous investigations.
The free and open source platforms covered here approach the problem from different angles. Some concentrate on sharing and correlating threat intelligence between organisations, while others build rich knowledge graphs that connect indicators, actors, campaigns, and techniques. There are also platforms focused on investigation and enrichment, automatically querying multiple external sources to add useful context to indicators. Others provide a simpler way to monitor intelligence feeds and identify changes that may warrant closer attention.
Together, they cover much of the threat intelligence workflow, from collecting raw information through enrichment and correlation to investigation, sharing, and ongoing monitoring.
Here’s our verdict captured in a legendary LinuxLinks-style ratings chart. Only free and open source software is eligible for inclusion.
Click the liks below to learn more about each platform.
| Threat Intelligence Platforms | |
|---|---|
| IntelOwl | Automates enrichment and analysis across a broad range of threat sources |
| OpenCTI | Connects threat data in a searchable intelligence graph |
| MISP | Share and correlate actionable threat intelligence |
| Yeti | Builds richer investigations from indicators, entities and context |
| ThreatDeck | Tracks threat intelligence feeds and surfaces meaningful changes quickly |
 Explore our comprehensive directory of recommended free and open source software. Our carefully curated collection spans every major software category.This directory is part of our ongoing series of informative articles for Linux enthusiasts. It features hundreds of detailed reviews, along with open source alternatives to proprietary solutions from major corporations such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. You’ll also find interesting projects to try, hardware coverage, free programming books and tutorials, and much more. Know a useful open source Linux program that we haven’t covered yet? Let us know by completing this form. |
Please read our Comment Policy before commenting.