Product Analyst at a computer software company with 11-50 employees
Real User
Top 5
Jan 12, 2026
Based on my experience, ThreatConnect Threat Intelligence Platform (TIP) is already doing a great job in the market by decreasing threats from external sources. A few improvements I would suggest include integration enhancements, as users report that some integrations could be tighter or easier to configure. Additionally, plug and play connectors for popular security tools and threat feeds could streamline operations. There could also be easier event generation and sharing, as some reviewers mentioned that generating and sharing events or intelligence with internal teams or external partners is not as smooth as it could be. Improved pricing or tiered options could make it more accessible, especially for smaller organizations that do not require all enterprise features. Some users find the interface complex, particularly for everyday tasks such as filtering, tagging, or navigating playbooks. A more intuitive UI that aligns with typical analyst workflows would reduce the learning curve and boost productivity. To improve my rating closer to ten, the user interface can be simplified, as it is complex. Enhancing user experience and providing richer enrichment sources would further increase its value. Addressing these areas would make the platform more intuitive, comprehensive, and easier to adopt across all teams.
ThreatConnect Threat Intelligence Platform (TIP) could be improved by simplifying the user interface to better fit day-to-day analyst workflow and reducing the complexity of configuring playbook and score logic.
ThreatConnect Threat Intelligence Platform (TIP) could be better in terms of cost, as the basic needs of the software are emphasized. It provides good solutions, but if similar offerings were available at a better cost, that would be something to consider. The AI integrations could be smoother since AI is increasingly prevalent; this is an area that could definitely be improved.
The platform needs improvement in its customization of the tagging mechanism. Some filtering options are not available based on individual tags, and we cannot export more types of data. The initial setup was complex due to lacking interactivity. Additionally, the role-based access control and training for analysts could be improved, as we cannot currently provide role-based access and training to our analysts.
I would like to see improvements in the time zone support of their customer service, considering users are from different time zones. Additionally, the pricing is high for smaller organizations, so it would be beneficial to have tiered pricing. An audio tutorial feature would also be helpful.
Manager, Product & Channel Development at Spire Solutions
Real User
Top 5
Jun 7, 2024
ThreatConnect Threat Intelligence Platform (TIP) needs to develop its SOAR platform because it currently doesn't position or connect itself as a SOAR tool, even though it has at least 60 percent of the features of a SOAR-based solution. If the product can offer a SOAR-based tool, it would be a good addition, in my opinion. Support is an area with which nobody is ever fully satisfied, so it can be improved.
Learn what your peers think about ThreatConnect Threat Intelligence Platform (TIP). Get advice and tips from experienced pros sharing their opinions. Updated: February 2026.
Information Technology Security Specialist at LTIMindtree
Real User
Nov 27, 2023
The building of playbooks could be more refined. The training is not openly available. I couldn’t get any training videos online when I was working with the tool. With other tools, I could easily get the troubleshooting videos. However, with this product, it was a hurdle. We had to contact the vendor every time. The vendor was not from our time zone, so we had to wait for a response. There was a delay most of the time.
Administrator at a university with 1,001-5,000 employees
Real User
Jan 30, 2021
They should make it a little bit easier to generate events and share them with the community. Right now, it's a little complex to share with them or to download your events in a report. The price could also be better.
ThreatConnect Threat Intelligence Platform provides a comprehensive solution for operational threat intelligence. It effectively ingests and enriches data, aligning with intelligence requirements for seamless application across security operations.
ThreatConnect TIP stands out by integrating threat intelligence with orchestration for streamlined threat management. It simplifies the user experience with a customizable interface assisting security teams in operationalizing insights across...
Based on my experience, ThreatConnect Threat Intelligence Platform (TIP) is already doing a great job in the market by decreasing threats from external sources. A few improvements I would suggest include integration enhancements, as users report that some integrations could be tighter or easier to configure. Additionally, plug and play connectors for popular security tools and threat feeds could streamline operations. There could also be easier event generation and sharing, as some reviewers mentioned that generating and sharing events or intelligence with internal teams or external partners is not as smooth as it could be. Improved pricing or tiered options could make it more accessible, especially for smaller organizations that do not require all enterprise features. Some users find the interface complex, particularly for everyday tasks such as filtering, tagging, or navigating playbooks. A more intuitive UI that aligns with typical analyst workflows would reduce the learning curve and boost productivity. To improve my rating closer to ten, the user interface can be simplified, as it is complex. Enhancing user experience and providing richer enrichment sources would further increase its value. Addressing these areas would make the platform more intuitive, comprehensive, and easier to adopt across all teams.
ThreatConnect Threat Intelligence Platform (TIP) could be improved by simplifying the user interface to better fit day-to-day analyst workflow and reducing the complexity of configuring playbook and score logic.
ThreatConnect Threat Intelligence Platform (TIP) could be better in terms of cost, as the basic needs of the software are emphasized. It provides good solutions, but if similar offerings were available at a better cost, that would be something to consider. The AI integrations could be smoother since AI is increasingly prevalent; this is an area that could definitely be improved.
The platform needs improvement in its customization of the tagging mechanism. Some filtering options are not available based on individual tags, and we cannot export more types of data. The initial setup was complex due to lacking interactivity. Additionally, the role-based access control and training for analysts could be improved, as we cannot currently provide role-based access and training to our analysts.
I would like to see improvements in the time zone support of their customer service, considering users are from different time zones. Additionally, the pricing is high for smaller organizations, so it would be beneficial to have tiered pricing. An audio tutorial feature would also be helpful.
ThreatConnect Threat Intelligence Platform (TIP) needs to develop its SOAR platform because it currently doesn't position or connect itself as a SOAR tool, even though it has at least 60 percent of the features of a SOAR-based solution. If the product can offer a SOAR-based tool, it would be a good addition, in my opinion. Support is an area with which nobody is ever fully satisfied, so it can be improved.
The building of playbooks could be more refined. The training is not openly available. I couldn’t get any training videos online when I was working with the tool. With other tools, I could easily get the troubleshooting videos. However, with this product, it was a hurdle. We had to contact the vendor every time. The vendor was not from our time zone, so we had to wait for a response. There was a delay most of the time.
It would be good to have more feeds and more integrated sources for enrichment.
They should make it a little bit easier to generate events and share them with the community. Right now, it's a little complex to share with them or to download your events in a report. The price could also be better.
Integration is an area that could use some improvement.