Based on my experience, ThreatConnect Threat Intelligence Platform (TIP) is already doing a great job in the market by decreasing threats from external sources. A few improvements I would suggest include integration enhancements, as users report that some integrations could be tighter or easier to configure. Additionally, plug and play connectors for popular security tools and threat feeds could streamline operations. There could also be easier event generation and sharing, as some reviewers mentioned that generating and sharing events or intelligence with internal teams or external partners is not as smooth as it could be. Improved pricing or tiered options could make it more accessible, especially for smaller organizations that do not require all enterprise features. Some users find the interface complex, particularly for everyday tasks such as filtering, tagging, or navigating playbooks. A more intuitive UI that aligns with typical analyst workflows would reduce the learning curve and boost productivity. To improve my rating closer to ten, the user interface can be simplified, as it is complex. Enhancing user experience and providing richer enrichment sources would further increase its value. Addressing these areas would make the platform more intuitive, comprehensive, and easier to adopt across all teams.
ThreatConnect Threat Intelligence Platform (TIP) could be improved by simplifying the user interface to better fit day-to-day analyst workflow and reducing the complexity of configuring playbook and score logic.
Growth and Product Manager at a computer software company with 11-50 employees
Real User
Top 5
Nov 21, 2025
ThreatConnect Threat Intelligence Platform (TIP) could be better in terms of cost, as the basic needs of the software are emphasized. It provides good solutions, but if similar offerings were available at a better cost, that would be something to consider. The AI integrations could be smoother since AI is increasingly prevalent; this is an area that could definitely be improved.
The platform needs improvement in its customization of the tagging mechanism. Some filtering options are not available based on individual tags, and we cannot export more types of data. The initial setup was complex due to lacking interactivity. Additionally, the role-based access control and training for analysts could be improved, as we cannot currently provide role-based access and training to our analysts.
Manager, Product & Channel Development at Spire Solutions
Real User
Top 20
Jun 7, 2024
ThreatConnect Threat Intelligence Platform (TIP) needs to develop its SOAR platform because it currently doesn't position or connect itself as a SOAR tool, even though it has at least 60 percent of the features of a SOAR-based solution. If the product can offer a SOAR-based tool, it would be a good addition, in my opinion. Support is an area with which nobody is ever fully satisfied, so it can be improved.
Information Technology Security Specialist at LTIMindtree
Real User
Nov 27, 2023
The building of playbooks could be more refined. The training is not openly available. I couldn’t get any training videos online when I was working with the tool. With other tools, I could easily get the troubleshooting videos. However, with this product, it was a hurdle. We had to contact the vendor every time. The vendor was not from our time zone, so we had to wait for a response. There was a delay most of the time.
Find out what your peers are saying about ThreatConnect, Anomali, ThreatQuotient and others in Threat Intelligence Platforms (TIP). Updated: July 2026.
Administrator at a university with 1,001-5,000 employees
Real User
Jan 30, 2021
They should make it a little bit easier to generate events and share them with the community. Right now, it's a little complex to share with them or to download your events in a report. The price could also be better.
Threat Intelligence Platforms improve an organization's cybersecurity by collecting and analyzing threat data. They offer insights into potential cyber threats, enabling proactive security measures to protect networks.These platforms help organizations manage and analyze threat data from different sources, providing a comprehensive view of potential threats. By integrating seamlessly with existing security systems, TIPs enhance the decision-making process for security teams, enabling them to...
Based on my experience, ThreatConnect Threat Intelligence Platform (TIP) is already doing a great job in the market by decreasing threats from external sources. A few improvements I would suggest include integration enhancements, as users report that some integrations could be tighter or easier to configure. Additionally, plug and play connectors for popular security tools and threat feeds could streamline operations. There could also be easier event generation and sharing, as some reviewers mentioned that generating and sharing events or intelligence with internal teams or external partners is not as smooth as it could be. Improved pricing or tiered options could make it more accessible, especially for smaller organizations that do not require all enterprise features. Some users find the interface complex, particularly for everyday tasks such as filtering, tagging, or navigating playbooks. A more intuitive UI that aligns with typical analyst workflows would reduce the learning curve and boost productivity. To improve my rating closer to ten, the user interface can be simplified, as it is complex. Enhancing user experience and providing richer enrichment sources would further increase its value. Addressing these areas would make the platform more intuitive, comprehensive, and easier to adopt across all teams.
ThreatConnect Threat Intelligence Platform (TIP) could be improved by simplifying the user interface to better fit day-to-day analyst workflow and reducing the complexity of configuring playbook and score logic.
ThreatConnect Threat Intelligence Platform (TIP) could be better in terms of cost, as the basic needs of the software are emphasized. It provides good solutions, but if similar offerings were available at a better cost, that would be something to consider. The AI integrations could be smoother since AI is increasingly prevalent; this is an area that could definitely be improved.
The platform needs improvement in its customization of the tagging mechanism. Some filtering options are not available based on individual tags, and we cannot export more types of data. The initial setup was complex due to lacking interactivity. Additionally, the role-based access control and training for analysts could be improved, as we cannot currently provide role-based access and training to our analysts.
ThreatConnect Threat Intelligence Platform (TIP) needs to develop its SOAR platform because it currently doesn't position or connect itself as a SOAR tool, even though it has at least 60 percent of the features of a SOAR-based solution. If the product can offer a SOAR-based tool, it would be a good addition, in my opinion. Support is an area with which nobody is ever fully satisfied, so it can be improved.
The building of playbooks could be more refined. The training is not openly available. I couldn’t get any training videos online when I was working with the tool. With other tools, I could easily get the troubleshooting videos. However, with this product, it was a hurdle. We had to contact the vendor every time. The vendor was not from our time zone, so we had to wait for a response. There was a delay most of the time.
It would be good to have more feeds and more integrated sources for enrichment.
They should make it a little bit easier to generate events and share them with the community. Right now, it's a little complex to share with them or to download your events in a report. The price could also be better.
Integration is an area that could use some improvement.