The platform needs improvement in its customization of the tagging mechanism. Some filtering options are not available based on individual tags, and we cannot export more types of data. The initial setup was complex due to lacking interactivity. Additionally, the role-based access control and training for analysts could be improved, as we cannot currently provide role-based access and training to our analysts.
I would like to see improvements in the time zone support of their customer service, considering users are from different time zones. Additionally, the pricing is high for smaller organizations, so it would be beneficial to have tiered pricing. An audio tutorial feature would also be helpful.
Manager, Product & Channel Development at Spire Solutions
Real User
Top 10
2024-06-07T07:20:45Z
Jun 7, 2024
ThreatConnect Threat Intelligence Platform (TIP) needs to develop its SOAR platform because it currently doesn't position or connect itself as a SOAR tool, even though it has at least 60 percent of the features of a SOAR-based solution. If the product can offer a SOAR-based tool, it would be a good addition, in my opinion. Support is an area with which nobody is ever fully satisfied, so it can be improved.
Information Technology Security Specialist at LTIMindtree
Real User
Top 10
2023-11-27T09:21:01Z
Nov 27, 2023
The building of playbooks could be more refined. The training is not openly available. I couldn’t get any training videos online when I was working with the tool. With other tools, I could easily get the troubleshooting videos. However, with this product, it was a hurdle. We had to contact the vendor every time. The vendor was not from our time zone, so we had to wait for a response. There was a delay most of the time.
Administrator at a university with 1,001-5,000 employees
Real User
2021-01-30T23:01:00Z
Jan 30, 2021
They should make it a little bit easier to generate events and share them with the community. Right now, it's a little complex to share with them or to download your events in a report. The price could also be better.
Find out what your peers are saying about ThreatConnect, Anomali, ThreatQuotient and others in Threat Intelligence Platforms (TIP). Updated: August 2025.
Threat Intelligence Platforms provide comprehensive solutions for collecting, analyzing, and managing threat data. They enhance security teams' understanding and response capabilities, ensuring proactive defense against emerging threats.These platforms aggregate vast amounts of threat data from multiple sources, offering a centralized interface for organizations to manage and analyze security threats efficiently. By automating threat data collection and enhancing threat analysis, they enable...
The platform needs improvement in its customization of the tagging mechanism. Some filtering options are not available based on individual tags, and we cannot export more types of data. The initial setup was complex due to lacking interactivity. Additionally, the role-based access control and training for analysts could be improved, as we cannot currently provide role-based access and training to our analysts.
I would like to see improvements in the time zone support of their customer service, considering users are from different time zones. Additionally, the pricing is high for smaller organizations, so it would be beneficial to have tiered pricing. An audio tutorial feature would also be helpful.
ThreatConnect Threat Intelligence Platform (TIP) needs to develop its SOAR platform because it currently doesn't position or connect itself as a SOAR tool, even though it has at least 60 percent of the features of a SOAR-based solution. If the product can offer a SOAR-based tool, it would be a good addition, in my opinion. Support is an area with which nobody is ever fully satisfied, so it can be improved.
The building of playbooks could be more refined. The training is not openly available. I couldn’t get any training videos online when I was working with the tool. With other tools, I could easily get the troubleshooting videos. However, with this product, it was a hurdle. We had to contact the vendor every time. The vendor was not from our time zone, so we had to wait for a response. There was a delay most of the time.
It would be good to have more feeds and more integrated sources for enrichment.
They should make it a little bit easier to generate events and share them with the community. Right now, it's a little complex to share with them or to download your events in a report. The price could also be better.
Integration is an area that could use some improvement.