This is a new Leadership Compass topic for us. If you would like to learn more about this subject, we invite you to read the Leadership Brief on Cyber Threat Intelligence, written by our analyst Jonathan Care.
This Leadership Compass analyzes solutions and services that collect, process, analyze, and deliver threat intelligence, and that help organizations put it to use. Solutions in this market address the full intelligence lifecycle, from planning and collection through processing, analysis, dissemination, and feedback.
Inclusion Criteria
This Leadership Compass includes solutions that provide cyber threat intelligence as a commercially available product, platform, or subscription service. This includes threat intelligence providers that produce their own intelligence, including those that also provide a platform to manage it, security vendors that offer their threat research output as a separately licensable intelligence offering, and managed CTI services based on the provider’s own intelligence. Solutions must deliver intelligence in both human-readable and machine-readable form and support integration with third-party security tools.
Exclusion Criteria
Vendors that only consume threat intelligence within their own products, without offering it as a standalone intelligence product or service, are excluded. This applies, for example, to SIEM, XDR, EDR, and email security products that use threat intelligence internally for detection. Also excluded are Threat Intelligence Platforms (TIPs), including open-source platforms such as MISP and OpenCTI, that aggregate and manage third-party intelligence without producing their own, providers of raw indicator feeds without analysis or context, open frameworks and knowledge bases such as MITRE ATT&CK, attack surface management solutions without a threat intelligence component, and consulting services that do not include a recurring intelligence offering.
There are no further exclusion criteria such as revenue or number of customers. We cover vendors from all regions, from start-ups to large companies.
Please read the Market definition see the expected main capabilities and the rating percentages.
