Try our new research platform with insights from 80,000+ expert users

ThreatConnect Threat Intelligence Platform (TIP) vs VirusTotal comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 11, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ThreatConnect Threat Intell...
Ranking in Threat Intelligence Platforms (TIP)
6th
Average Rating
8.2
Reviews Sentiment
6.5
Number of Reviews
7
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (15th)
VirusTotal
Ranking in Threat Intelligence Platforms (TIP)
3rd
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
11
Ranking in other categories
Anti-Malware Tools (4th)
 

Mindshare comparison

As of January 2026, in the Threat Intelligence Platforms (TIP) category, the mindshare of ThreatConnect Threat Intelligence Platform (TIP) is 3.9%, down from 5.9% compared to the previous year. The mindshare of VirusTotal is 3.9%, down from 5.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Threat Intelligence Platforms (TIP) Market Share Distribution
ProductMarket Share (%)
VirusTotal3.9%
ThreatConnect Threat Intelligence Platform (TIP)3.9%
Other92.2%
Threat Intelligence Platforms (TIP)
 

Featured Reviews

WM
Program associate at IMAGINE HER
Effective threat management boosts data protection and enhances customer trust
We use ThreatConnect for our platform in the database to address the issues of threat attacks within the organization. It helps us look at solutions that can protect our data from being attacked.  Additionally, it provides an alert mechanism to warn clients in case of internet attacks, focusing on…
Chinmay Banerjee - PeerSpot reviewer
Advisor Adtech/Martech/API product/project Engineering at a financial services firm with 10,001+ employees
Helps businesses collect threat data while keeping privacy in mind and apable of detecting, blocking, and removing viruses and malware
There are two gray areas I still need to explore. I have worked with VirusTotal because it easily integrates with over seventy antivirus scanners and blacklisting services. In addition to those there is much scope to improve and add other services or integrations. The areas for improvement are that VirusTotal is not using much AI or generative AI models, while other competitors are starting to build them. For example, VirusTotal's work is based on the setup done by their engineers. If you want to do scanning or protection activities for a specific site, app, or device, that is the area VirusTotal is currently focused on. But other competitors are building AI models that can do things like left-side scanning and provide auto-generated reports. VirusTotal has predefined reports, but there is a lot of manual effort involved. Secondly, the API is very limited if I want to integrate VirusTotal with other applications. They need to build more connectors and provide support for Webhook connectors for the API. If you can't build your own connector, it's always good to have provisions for Webhook setup connectors across platforms. Thirdly, Kaspersky, a competitor of VirusTotal, is using a methodology called "gatekeeper." A gatekeeper is a security system that protects the inside of a building from outside threats. This is the model Kaspersky is currently using. You have your website set up, but the entire army of VirusTotal or Kaspersky is standing guard, protecting you from the first gate itself. Right now, VirusTotal detects threats from your domain, but it is always better to verify inside the domain and protect it from the first level when people or malware are entering. This first level of protection is lacking in VirusTotal right now. The security bridge and protection gate are missing.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The tool's installation, integration, and playbooks are very straightforward."
"ThreatConnect has a highly user-friendly interface."
"ThreatConnect Threat Intelligence Platform (TIP) has positively impacted our organization by significantly reducing response times and improving detection accuracy by ensuring only high-confidence, context-rich indicators are pushed to security controls."
"We have been able to see a return on investment as our clients believe in us more."
"I like their customer support."
"The most valuable features are ease of use and the ability to customize it."
"The product automatically generated a threat score based on the maliciousness of an IP."
"It's a solid platform and is stable enough. It is not complicated and is easy to use."
"The most valuable feature is the worldwide malware information database."
"It allows us to see if there have been previous reports on certain indicators of compromise, providing insights from other security professionals."
"It is quite simple for anyone if they just want to check some suspicious URLs."
"With VirusTotal, I can check for any hash, malware, file, domain, IP URL, or malicious URL, and Kaspersky stays clean."
"The product is easy to use with coding, such as Python or Java, via its API."
"It provides detailed insights into possible malicious behavior, dropped files, and TCP connections."
"It gives detailed information about suspicious IPs, which is one of its most valuable features."
"I have never had any problems with stability or bugs while using VirusTotal."
 

Cons

"They should make it a little bit easier to generate events and share them with the community"
"Sometimes, when using the solution, it slows down, affecting our ability to mitigate threats."
"ThreatConnect Threat Intelligence Platform (TIP) could be improved by simplifying the user interface to better fit day-to-day analyst workflow and reducing the complexity of configuring playbook and score logic."
"Support is an area with which nobody is ever fully satisfied, so it can be improved."
"It would be good to have more feeds and more integrated sources for enrichment."
"Integration is an area that could use some improvement."
"I couldn’t get any training videos online when I was working with the tool."
"I would like to see improvements in the time zone support of their customer service, considering users are from different time zones."
"VirusTotal has different versions, and sometimes the parameters of the API are not very clear."
"I would like to see improvements in the score consistency and accuracy."
"I would like to see improvements in the score consistency and accuracy."
"They can improve the telemetry. Whenever we handle a sample, they cannot provide any information about a victim."
"I would like to see an improved user interface and some automation."
"They can improve the telemetry. Whenever we handle a sample, they cannot provide any information about a victim."
"There is room for improvement, particularly in making some of the most useful features more accessible in the non-paid version."
"I would like to see improved correlation with other threat intelligence sources, not just reliant on its own database, to enhance the database of threat intelligence that VirusTotal offers."
 

Pricing and Cost Advice

"The price could be better."
"I rate the product price as six on a scale of one to ten, where one is extremely expensive, and ten means it is cheap."
"The price of this product is in the mid-range, not too expensive, nor inexpensive."
"The tool is expensive."
"We are using VirusTotal with free licenses, managing the license limits across three or four accounts, thus incurring no costs."
"The pricing is reasonable."
"The pricing is very economical."
"VirusTotal is an expensive solution."
report
Use our free recommendation engine to learn which Threat Intelligence Platforms (TIP) solutions are best for your needs.
881,114 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
17%
Computer Software Company
7%
Comms Service Provider
7%
Retailer
6%
Computer Software Company
14%
Financial Services Firm
10%
Comms Service Provider
8%
University
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise23
Large Enterprise4
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise2
Large Enterprise5
 

Questions from the Community

What needs improvement with ThreatConnect Threat Intelligence Platform (TIP)?
ThreatConnect Threat Intelligence Platform (TIP) could be improved by simplifying the user interface to better fit day-to-day analyst workflow and reducing the complexity of configuring playbook an...
What is your primary use case for ThreatConnect Threat Intelligence Platform (TIP)?
ThreatConnect Threat Intelligence Platform (TIP) serves as the primary platform in our organization for IOC aggregation, normalization, and distribution to downstream security controls like SIEM, E...
What is your experience regarding pricing and costs for VirusTotal?
I do not know about the pricing or licensing as our organization services VirusTotal for our clients.
What needs improvement with VirusTotal?
I would like to see improvements in the score consistency and accuracy. VirusTotal should add more details like those from competitors such as URL Void or Symantec URL Checker, which show the categ...
What is your primary use case for VirusTotal?
As I work in an incident response role, my daily task is to mitigate the security alert and perform the analysis part. When any alerts come, I check the IPs from where they originate and the locati...
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Customer Case Studies & Use Cases
Information Not Available
Find out what your peers are saying about ThreatConnect Threat Intelligence Platform (TIP) vs. VirusTotal and other solutions. Updated: December 2025.
881,114 professionals have used our research since 2012.