Ranking September 2026
Threat Intelligence Ranking

The RankmyAI Threat Intelligence Ranking presents the top 25 AI tools from our Overall ranking focusing on threat intelligence.

 

Threat intelligence tools help security operations teams, analysts, and executive decision-makers collect, analyze, and act on cyber threat information. They aggregate internal and external data into actionable insights for continuous monitoring, rapid detection, and incident response. They also provide context on emerging threats, attacker behavior, and operational risk for strategic and compliance decisions.

Teams use these tools to enrich monitoring and prioritize incident response. When choosing a threat intelligence platform, compare source coverage, analysis depth, operational fit, and reporting. Buyers may also consider cyber threat intelligence services, digital risk protection, and osint tools. If you compare best osint tools or seek the best open source intelligence websites for the current war, check how each fits your monitoring and response needs. The best osnit dashboard should add insights to security operations.

Top 25 out of
60
1
Dataminr
Dataminr is an AI platform that delivers real-time event, threat, and risk intelligence by analyzing over 1 million public data sources. It provides early warnings for corporate security, cyber defense, public sector, and news, enabling faster, informed decisions.
unknown
United States
Threat Intelligence Management and Sharing
2
Recorded Future
Recorded Future is an AI-powered threat intelligence platform that helps enterprises and governments detect risks, correlate cyber signals, and stop threats before they occur through automated, machine-speed security operations and prioritized intelligence.
paid
United States
3
IronNet Cybersecurity
IronNet delivers collective cyber defense through network detection and response, behavioral analytics, and threat intelligence feeds that help enterprises detect attacks earlier, reduce response time, and strengthen SOC operations across critical industries.
+1
paid
United States
Network Threat Detection
4
XTM Platform
Filigran provides open-source cybersecurity software for threat intelligence management, adversarial exposure validation, and cyber risk management. Its XTM suite also includes OpenCTI for organizing and operationalizing cyber threat intelligence and OpenAEV for running attack simulations and crisis exercises.
N/A
freemium
France
5
CloudSEK
CloudSEK integrates cyber intelligence, monitoring, and supply chain insights to enhance digital risk management for enterprises. Its platform supports integrations with SOAR for automated threat resolution.
-2
unknown
Singapore
External Threat & Digital Risk Monitoring
6
Anomali
Anomali is an intelligence-native cybersecurity platform that unifies security telemetry, threat intelligence, and agentic AI to help SOC teams detect, investigate, and respond to threats faster. It offers a unified security data lake, threat intelligence, and automated, AI-guided workflows for modern security operations.
-1
paid
United States
Threat Intelligence Management and Sharing
7
CybelAngel
CybelAngel offers an External Attack Surface Management platform designed to secure digital activities against cyber threats through automated monitoring, rapid threat detection, and low false positives.
-1
unknown
France
External Threat & Digital Risk Monitoring
8
Flashpoint
Flashpoint is an AI-enhanced threat intelligence platform that helps enterprises and government teams detect cyber, fraud, vulnerability, and physical security threats using primary-source data, analyst expertise, and API-driven integrations for faster investigation and response.
-1
paid
United States
9
Cyble
Cyble is an intelligence-driven, AI-native cybersecurity platform offering agentic AI for real-time threat hunting, correlation, and autonomous response. Its suite includes Cyble Vision, Blaze AI, Titan endpoint security, Strato cloud security, Hawk for investigations, TIP for threat intel, and Odin internet scanning. It helps organizations predict attacks, monitor dark web risks, manage vulnerabilities, and orchestrate incident response.
unknown
United States
10
Vmray
VMRay provides an automated malware and phishing analysis platform using sandbox technology to detect and investigate targeted and evasive threats. It also offers a threat intelligence feed that delivers behavior-derived indicators in STIX 2.1 and TAXII 2.1 formats.
N/A
freemium
Germany
11
Sekoia.io
Sekoia.io is an AI-guided SOC platform that unifies SIEM, XDR, SOAR, and threat intelligence to help security teams detect, investigate, and respond to threats faster across hybrid environments through automation, continuous monitoring, and broad integrations.
-3
paid
France
SIEM and Security Log Analytics
12
Bfore.AI
PreCrime leverages predictive security algorithms to identify and block cyber threats before they impact business operations. The platform integrates with existing EDR solutions to enhance threat detection and prevention, ensuring robust protection against online fraud and attacks.
-1
paid
United States
13
CleanINTERNET
Centripetal leverages intelligence-powered cybersecurity to integrate threat intelligence in real-time, providing proactive defense against known vulnerabilities and locations, safeguarding educational institutions and major health networks globally.
-1
unknown
United States
14
Fivecast
Fivecast is an AI-powered OSINT platform that helps security and intelligence teams collect, analyze, and act on online data across the surface, deep, and dark web to detect threats, fraud, and hidden risks faster.
-4
paid
Australia
Open-Source Intelligence Investigation
15
Mallory
Mallory provides an AI-native threat and exposure management platform that correlates threat intelligence from thousands of sources against internal and external attack surfaces. It also offers an Intelligence Graph linking threat actors, campaigns, vulnerabilities, products, and observables, along with agent-driven CVE triage, exposure investigation, and integrations with security tools.
N/A
freemium
United States
16
HNTR
ZeroFox provides an external cybersecurity platform that identifies, validates, and disrupts threats outside the corporate perimeter across surface, deep, and dark web, social media, and marketplaces. It also offers cyber threat intelligence, brand and domain protection, executive protection, attack surface intelligence, and physical security intelligence.
N/A
paid
United States
17
Skopenow
Skopenow is an OSINT platform that unifies entity research, link analysis, and real-time situational awareness to help organizations detect fraud, assess threats, and conduct due diligence. It aggregates public records, media, and other open data, then uses AI models to surface relevant signals and visualize connections between entities, enabling faster investigations and informed decisions.
unknown
United States
Open-Source Intelligence Investigation
18
Axur
Axur is an AI-driven external cybersecurity platform that combines CTI, brand protection, automated takedowns, EASM, and deep/dark web monitoring. It uses LLMs to enrich signals, prioritize risks, and deliver actionable alerts, integrating with security stacks via APIs and supporting MSP/MSSP partnerships.
-5
unknown
United States
19
Osavul
Osavul provides AI-powered risk intelligence for hybrid threats, detecting hostile activity across digital and physical environments including sabotage, espionage, cyber and influence operations. It also offers real-time alerting, AI risk modeling, and mitigation support by analyzing diverse data types across multiple countries.
N/A
unknown
Luxembourg
Open-Source Intelligence Investigation
20
Golden Owl
Golden Owl is an AI-powered business intelligence platform offering real-time insights and strategic intelligence for risk management and growth.
-5
paid
Spain
Open-Source Intelligence Investigation
21
EclecticIQ
EclecticIQ delivers an AI-embedded threat intelligence platform that helps security teams prioritize relevant threats, reduce analyst fatigue, and accelerate incident response with contextual insights, search, and unified threat data management.
-7
paid
Netherlands
Threat Intelligence Management and Sharing
22
Strider
Strider provides a strategic intelligence platform that transforms global open-source data into intelligence on state-sponsored threats. It offers people screening, third-party organization assessment, open source software risk detection, and threat intelligence feeds for SIEM and DLP systems, using agentic AI to surface nation-state risks.
N/A
unknown
United States
23
Constella Intelligence
Constella Intelligence provides AI-driven identity risk and threat intelligence solutions, leveraging the world's largest breach data lake to protect against identity theft and fraud.
-5
unknown
United States
Dark Web Exposure Monitoring
24
ThreatBook
ThreatBook provides threat intelligence and agentic security products, including threat intelligence, network detection and response, secure DNS, digital risk protection, and AI agent security. It also tracks 200+ APT groups with firsthand Asia Pacific threat data and coordinates specialist AI agents across 150+ integrated tools for alert triage and response.
N/A
unknown
Singapore
25
SecAI
Investigator offers AI-driven insights for analyzing IPs and domains, providing threat verdicts, web insights, and comprehensive threat labels.
-5
unknown
Singapore
Contact us for tailored rankings and in-depth research

Common use cases & Sub-categories

Some of the common use cases of the tools in the RankmyAI Threat Intelligence Ranking are enriching a security operations center with continuous monitoring and rapid detection, supporting executive risk decisions and compliance with cyber threat context, feeding incident response with prioritized threat intelligence, and informing proactive defense measures from predictive threat indicators.

Within the RankmyAI Threat Intelligence Ranking, RankmyAI has defined four sub-categories. The most common are Open-Source Intelligence Investigation, Threat Intelligence Management and Sharing, and Dark Web Exposure Monitoring.

Open-Source Intelligence Investigation covers collecting and analyzing public data to investigate threats, threat actors, entities and external risk, while Threat Intelligence Management and Sharing platforms aggregate, normalize, correlate, enrich and share intelligence across tools and partners. Dark Web Exposure Monitoring watches darknet forums, marketplaces and breach dumps for leaked credentials and stolen data, and Third-Party and Supply Chain Risk assesses cyber threats from vendors, suppliers and software dependencies.


Frequently asked questions

This page ranks leading threat intelligence tools for enterprise security. When comparing, look at how they collect internal and external data, analyze it into actionable insights, and support monitoring, detection, incident response, strategic decisions, and compliance.

Open source intelligence can be one external source of cyber threat information. In a conflict, security teams may use it to add context on emerging threats and attacker behavior, but it should feed analysis and response rather than stand alone.

This page ranks leading threat intelligence options. A dashboard should help you collect and analyze threat data, then support monitoring, detection, incident response, and strategic decisions. Compare how each fits your security operations and compliance needs.

No. This category focuses on threat intelligence that aggregates and analyzes cyber threat information. It does not cover threat detection systems without intelligence feeds, incident response and security orchestration automation, vulnerability management, attack surface management, or penetration testing and red teaming services.

Disclaimer

The RankmyAI Threat Intelligence Ranking is derived from our Overall ranking, which measures the popularity of AI tools based on three key metrics: website traffic, reviews, and investments. The Overall ranking is calculated as the weighted average of the individual rankings for each of these metrics (for more details, see our Methodology page).

Not all AI tools in this ranking are exclusively focused on threat intelligence, as AI tools and companies often provide multiple services beyond this specific application. This ranking does not assess or indicate the quality, effectiveness, or reliability of the listed AI tools. It is solely based on popularity metrics and should not be interpreted as an endorsement or evaluation of their performance.

You are free to use and distribute our ranking, provided that RankmyAI is properly cited as the source (see our Copyright page).

Social Media

© 2026 RankmyAI is licensed under CC BY 4.0
and is part of:

logo HvA

Get free insights in your inbox: