

Find out in this report how the two Threat Intelligence Platforms (TIP) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
Having both cloud and on-premise solutions enables effective file sanitization and vulnerability detection while preventing attacks that save costs and protect reputation.
MetaDefender has positively impacted my organization by reducing the risk of file-based attacks, which has significantly improved our overall defense against phishing and malware delivery techniques.
I believe it is worth the money, as it brings time-saving, cost-saving, and efficiency improvements, especially in large environments.
I can speak for fewer employees needed because we used to require many analysts to deal with all the alerts that we were generating, but now we have about 90 to 95% of the alerts already automated through Tines, which requires tremendous time saved and a ton of reduction in the number of analysts required.
In some domains, we were in a position to actually let go of people, meaning at least two people have been reduced from one team, which saves a lot of cost for the organization.
We did not see proper value in it, whereas other platforms would have given much higher value for us.
This can save time because many vendors, when they check something and ask for logs, need those logs from the beginning.
When it comes to my communication with agents, I find they are responsive and professional.
Their customer service team, distribution team, and regional sales managers provide excellent aftercare and set us up for upselling across the entire MetaDefender portfolio.
Whenever we hit roadblocks or issues with the platform or story, even if it was our mistake, the people from the most senior engineering team of Tines immediately were willing to get on call with us.
I would rate the customer support a ten on a scale of one to ten.
The support and engineering team is quick to resolve bugs and respond promptly.
You need to do some sizing before installation and understand exactly what you are seeking from the solution and how it fits your organization.
When you use one database for all instances, you can deploy ten different servers or ten different instances with a separate database for each one.
We handle vast amounts of traffic from banking, defense, and critical national infrastructure.
It is built for growing teams and has more complex automation capacity.
Whenever this became insufficient, we could easily reach out to the Tines team where they immediately gave us a remedy or fixed the issue.
From the workloads we have, it can scale for different workflows and add more workflows.
The stability of the system is very high.
MetaDefender is 100% stable, making it one of the best cybersecurity solutions we offer.
I find it stable as it maintains good external stability with good availability and no major issues.
The tool is stable up to ninety-nine point nine percent.
Tines is very stable.
I want to see enhancements allowing for automatic ticket creation using APIs to streamline the workflow and assign tickets to respective teams.
MetaDefender should have a wizard or general policies that can be used for 80 percent of customers.
Pricing is an important aspect in catering to customer budgets and is a must-have consideration for organizations.
Reporting and dashboards could be more advanced for deeper analysis.
The issue with the Implode action is that once we get a certain number of events into the Implode action, we lose context of all the events except the last one that came in, so it is a bit difficult to send data back once it goes through the Implode action.
I think they need to add more intelligence to the workflow layer because, depending upon what they have right now, it could be possible for Claude or Copilot or ChatGPT to have that feature quickly.
When someone attempted to buy from us one instance of OPSWAT, it was about nine thousand dollars for multi-scanning with eight engines and also the CDR module.
The price varies based on deployment types; we only used it for file transfer and cloud integration rather than email, which kept it within our budget.
Regarding pricing, setup cost, and licensing, I find the pricing for kiosks, cloud, deep CDR, and adaptive sandbox appropriate.
Tines required no setup cost since we just used their cloud tier and built everything with internal engineering resources.
My experience with pricing, setup cost, and licensing is very good.
I did not handle the purchasing side, so I did not actually know the exact pricing or the licensing details.
I believe this is very effective and is the most effective engine of OPSWAT because customers ask for OPSWAT for two main reasons: the CDR capabilities and the multi-scanning engines.
MetaDefender's core philosophy of trusting no file means it scans files, rebuilds them, and verifies their reputation, ensuring they contain no malicious content.
The integration of multi-scanning and Content Disarm and Reconstruction is truly helpful because we can utilize it in other products such as email integration with ICAP capability, and we are also using it in web scanning.
It helps in streamlining our security operations effectively and efficiently without requiring coding knowledge.
What stands out mostly about Tines's features is the integrations. It connects easily with tools such as Slack, emails, and spreadsheets, and it makes data moves automatically without much work.
Tines caught the failure and queued them automatically. We did not lose a single student log.
| Product | Mindshare (%) |
|---|---|
| MetaDefender | 2.0% |
| Tines | 1.1% |
| Other | 96.9% |

| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 2 |
| Large Enterprise | 11 |
| Company Size | Count |
|---|---|
| Small Business | 2 |
| Midsize Enterprise | 2 |
| Large Enterprise | 5 |
MetaDefender provides advanced multiscanning capabilities using 30+ anti-malware engines, ensuring high detection efficacy and robust prevention mechanisms.
MetaDefender's approach combines multiple security technologies like Metascan, Deep CDR, and adaptive sandboxing. These integrated solutions offer comprehensive protection against malware and vulnerabilities, catering to cloud, on-prem, and hybrid environments with enhanced performance and automation.
What are the key features of MetaDefender?
What benefits and ROI can MetaDefender offer?
MetaDefender is trusted in industries such as financial services, healthcare, manufacturing, and government, where rigorous policy control and auditability are vital. Its diverse deployment options allow for consistent security across datacenters, OT networks, and secure facilities, meeting stringent compliance needs.
Tines offers no-code and low-code automation for users to automate tasks without coding expertise, integrating seamlessly with APIs to enhance incident management and security operations.
Known for a vendor-neutral approach, Tines provides detailed documentation and live chat support, allowing for effective integration with other tools, scheduling capabilities, and streamlined processes that save time and effort. Users find it intuitive for efficient task handling, making manual intervention unnecessary. Challenges include the need for more comprehensive documentation and instructional videos, as well as improvements in AI integration and reporting aesthetics. Pricing is also noted as higher compared to alternatives.
What are the most important features of Tines?Tines primarily serves organizations in the security sector, automating security operations such as alert detection and managed detection and response. It's utilized extensively in security operation centers for tasks like phishing email processing, ticket creation, IOC investigations, and ticket assignments within enterprise security frameworks, with multiple teams delivering Tines services to enhance task handling efficiency.
We monitor all Threat Intelligence Platforms (TIP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.