Threat intelligence platforms help organisations collect, organise, enrich, analyse, and share information about cyber threats. Rather than leaving indicators and reports scattered across different feeds and tools, they provide a central place to build context around malicious domains, IP addresses, files, vulnerabilities, threat actors, campaigns, and other security data.
They are aimed mainly at security operations centres, incident response teams, threat hunters, malware analysts, researchers, and organisations that need to understand emerging threats and investigate suspicious activity. They can also help teams collaborate by linking related information and maintaining a structured record of previous investigations.
The free and open source platforms covered here approach the problem from different angles. Some concentrate on sharing and correlating threat intelligence between organisations, while others build rich knowledge graphs that connect indicators, actors, campaigns, and techniques. There are also platforms focused on investigation and enrichment, automatically querying multiple external sources to add useful context to indicators. Others provide a simpler way to monitor intelligence feeds and identify changes that may warrant closer attention.
Together, they cover much of the threat intelligence workflow, from collecting raw information through enrichment and correlation to investigation, sharing, and ongoing monitoring.
Here’s our verdict captured in a legendary LinuxLinks-style ratings chart. Only free and open source software is eligible for inclusion.
Click the liks below to learn more about each platform.
| Threat Intelligence Platforms | |
|---|---|
| IntelOwl | Automates enrichment and analysis across a broad range of threat sources |
| OpenCTI | Connects threat data in a searchable intelligence graph |
| MISP | Share and correlate actionable threat intelligence |
| Yeti | Builds richer investigations from indicators, entities and context |
| ThreatDeck | Tracks threat intelligence feeds and surfaces meaningful changes quickly |
 LinuxLinks helps you discover the best free and open source software for Linux. Explore our extensive collection of recommended applications, including alternatives to popular proprietary software.We also publish software reviews, Linux tutorials, hardware reviews, free programming books and articles covering the wider open source community. Browse our Linux resources to discover more. Know a useful free and open source Linux application we haven't covered? Suggest a program for inclusion. Has your software been featured on LinuxLinks? Display one of our Featured on LinuxLinks badges on your website or GitHub README. |
Please read our Comment Policy before commenting.