Key takeaways
- Top pick: ANY.RUN, best for: SOC teams. Offers global threat intelligence derived from investigations by thousands of companies.
- Also near the top: DomainTools, best for: SOC teams; and ReversingLabs, best for: Security operations teams.
- How it was ranked: 10 software tools compared, each scored on fit to the list (40%), evidence on the site (20%), published detail (20%) and buying signals (20%). Each verdict is below.
Best threat intelligence platforms: Top 10 Ranked. ANY.RUN ranks first, with a Lister Score of 100.0.
ANY.RUN leads this ranking for SOC teams and analysts, and enables rapid threat analysis in under two minutes through interactive virtual machines.
DomainTools offers visibility into over ninety-seven percent of the Internet.
ReversingLabs processes high volume file traffic at the speed of business.
Best Threat Intelligence Platforms in 2026, compared| RANK | ENTRY | BEST FOR | SCORE |
|---|
| 1 |  ANY.RUNOffers global threat intelligence derived from investigations by thousands of companies | SOC teams | 100.0 |
|---|
|
| 2 |  DomainToolsIntegrates with AI systems via its MCP Server for LLM connectivity | SOC teams | 94.0 |
|---|
|
| 3 |  ReversingLabsUtilises the world's largest threat repository for intelligence | Security operations teams | 94.0 |
|---|
|
| 4 |  CywareAutomatically ingests, deduplicates, and enriches threat data from multiple sources | enterprise SOCs and threat intelligence teams | 90.0 |
|---|
|
| 5 |  FlashpointThe AI tool integrates directly into AI-native workflows via the MCP standard | Security operations teams | 90.0 |
|---|
|
| 6 |  CloudSEKDiscovers and secures exposed AI infrastructure across the internet | Cybersecurity teams | 88.0 |
|---|
|
| 7 |  CTM360Provides a turn-key solution with no installation required | IT security and risk management teams | 88.0 |
|---|
|
| 8 |  Constella IntelligenceDelivers verified identity pedigree to reduce false positives | security operations centers | 86.0 |
|---|
|
| 9 |  PulsediveEnables on-demand passive or active scans on various indicators | Security operations teams | 86.0 |
|---|
|
| 10 |  BrandefenseUses AI to handle enrichment, prioritisation, and takedowns autonomously | CISOs and SOC analysts | 84.0 |
|---|
|
|
Not on this ranking?Tell us about your company and we will reply by email.
How to choose
Start from what you need it for. Where each entry fits best:
Each entry's Lister Score on this ranking weighs fit to the list (40%), evidence on the site (20%), published detail (20%) and buying signals (20%).
Each entry's full verdict is below.
The ranking, in detail
01
Identify cyber threats early to act fast
ANY.RUN is an interactive online malware sandbox that empowers SOC performance. It provides threat intelligence solutions to identify cyber threats early.
PROS- The product analyzes threats in less than two minutes for quicker alert resolution.
- The product allows users to interact with malware in real-time virtual machines.
- Best for
- SOC teams
- Where it falls short
- The free plan limits interactive analysis to a sixty-second timeout.
- Pick something else if
- you need extended interactive analysis time without paying.
100.0
02
See what others miss and stop what others cannot.
DomainTools maps the Internet to provide comprehensive DNS-focused threat intelligence data. It enables organisations to detect, analyse, and mitigate malicious domains before they cause damage.
PROS- The product offers visibility into over ninety-seven percent of the Internet.
- DomainTools integrates with AI systems via its MCP Server for LLM connectivity.
- Best for
- SOC teams
- Where it falls short
- It focuses on DNS data, which may not suit teams needing broader threat intelligence beyond domain resolution.
- Pick something else if
- you need broad threat intelligence beyond DNS.
94.0
03
Trust nothing. Verify everything.
ReversingLabs provides software supply chain security and malware analysis solutions. It leverages AI-driven binary analysis to identify malicious components within software.
PROS- ReversingLabs identifies active threats and secrets using a large threat repository.
- The product offers authoritative intelligence data from over 422 billion samples.
- Best for
- Security operations teams
94.0
04
AI-powered threat intelligence platform
Cyware is an AI-powered threat intelligence platform that operationalises cyber defence through agentic automation. It unifies ingestion, enrichment, and actioning of intelligence within a single ecosystem.
PROS- The product accelerates analysis and prioritization with tailored security copilots.
- The product operationalizes intelligence through automated actioning across hundreds of tools.
- Best for
- enterprise SOCs and threat intelligence teams
90.0
05
Reduce risk with decisive cyber threat intelligence
Flashpoint delivers industry-leading threat data and intelligence. It combines human-powered collection with technology to protect assets.
PROS- The product accesses over 3.6 petabytes of primary source intelligence.
- Flashpoint uncovers vulnerabilities faster than the NVD.
- Best for
- Security operations teams
90.0
06
Predictive attack graph platform for the AI era
CloudSEK is a predictive attack graph platform for the AI era. It uses graph-based intelligence to disrupt autonomous attacks before they occur.
PROS- The product connects scattered signals into an attack graph to validate paths that matter.
- CloudSEK integrates its IAV intelligence via APIs across more than 50 applications.
- Best for
- Cybersecurity teams
88.0
07
Preemptive security for external cyber risks and threats
CTM360 offers a turn-key solution requiring no installations or configuration.
PROS- The product offers curated and fully managed services to simplify operations.
- CTM360 provides noise-free threat intelligence specifically tailored to your assets.
- Best for
- IT security and risk management teams
- Where it falls short
- It is a fully managed service, which may not suit teams wanting to handle operations themselves.
- Pick something else if
- you prefer self-managed solutions.
88.0
08
Defend your digital perimeter with identity threat intelligence
Constella Intelligence provides identity risk intelligence powered by verified breach data. It offers curated datasets for investigative tools and enterprise protection.
PROS- The product delivers verified identity pedigree to reduce false positives.
- The product provides real-time velocity through high-speed API delivery.
- Best for
- security operations centers
86.0
09
Frictionless threat intelligence for growing teams
Pulsedive provides essential and timely threat intelligence that drives proactive abuse monitoring. The platform offers comprehensive enrichment and ease of integration for users.
PROS- The product enables on-demand passive or active scans on various indicators.
- The product integrates with SOAR and exports data to SIEM solutions.
- Best for
- Security operations teams
86.0
10
See beyond the dark horizon of cyber threats
Brandefense is a unified threat intelligence platform combining AI-driven analytics with digital risk protection. It transforms fragmented data into contextual insights to help security teams predict threats and prioritise risk.
PROS- The product uses AI-correlated intelligence to filter noise before analysts see it.
- The product detects early threat indicators before the exploitation window opens.
- Best for
- CISOs and SOC analysts
- Pick something else if
- you need internal threat monitoring.
84.0
Put your company on this ranking
Contact us about one, two or three years. Nothing recurring.
Positions #4 to #10 are available on request. Contact us.
Not on this ranking?Tell us about your company and we will reply by email.
Frequently asked questions
What are the best threat intelligence platforms?
ANY.RUN ranks first on Lister. ANY.RUN is an interactive online malware sandbox that empowers SOC performance. It provides threat intelligence solutions to identify cyber threats early.
What are the top 10 threat intelligence platforms?
1. ANY.RUN; 2. DomainTools; 3. ReversingLabs; 4. Cyware; 5. Flashpoint; 6. CloudSEK; 7. CTM360; 8. Constella Intelligence; 9. Pulsedive; 10. Brandefense.
Are there free options for threat intelligence platforms?
No free option is confirmed in the recorded pricing for this ranking. Check each provider's pricing page for current plans and trials.
Who are these threat intelligence platforms built for?
ANY.RUN says it is built for SOC teams and analysts, and DomainTools for SOC teams. Cyware says it is built for enterprise SOCs and threat intelligence teams.
What should a buyer check before signing up?
ANY.RUN states that the free community plan restricts users to a short sixty-second virtual machine timeout. Those are the limits each product publishes itself, not a full account of any plan.
Sources
Where we checked each company's facts, and when.
Sources for 5 more companies
Some links on Lister are affiliate links. Rankings are not affected.
Related rankings
The same in AI: Best AI threat intelligence platforms, AI threat intelligence platforms for financial services
