ThreatConnect Threat Intelligence Platform (TIP) could be improved by simplifying the user interface to better fit day-to-day analyst workflow and reducing the complexity of configuring playbook and score logic.
ThreatConnect Threat Intelligence Platform (TIP) could be better in terms of cost, as the basic needs of the software are emphasized. It provides good solutions, but if similar offerings were available at a better cost, that would be something to consider. The AI integrations could be smoother since AI is increasingly prevalent; this is an area that could definitely be improved.
The platform needs improvement in its customization of the tagging mechanism. Some filtering options are not available based on individual tags, and we cannot export more types of data. The initial setup was complex due to lacking interactivity. Additionally, the role-based access control and training for analysts could be improved, as we cannot currently provide role-based access and training to our analysts.
I would like to see improvements in the time zone support of their customer service, considering users are from different time zones. Additionally, the pricing is high for smaller organizations, so it would be beneficial to have tiered pricing. An audio tutorial feature would also be helpful.
Manager, Product & Channel Development at Spire Solutions
Real User
Top 10
Jun 7, 2024
ThreatConnect Threat Intelligence Platform (TIP) needs to develop its SOAR platform because it currently doesn't position or connect itself as a SOAR tool, even though it has at least 60 percent of the features of a SOAR-based solution. If the product can offer a SOAR-based tool, it would be a good addition, in my opinion. Support is an area with which nobody is ever fully satisfied, so it can be improved.
Information Technology Security Specialist at LTIMindtree
Real User
Nov 27, 2023
The building of playbooks could be more refined. The training is not openly available. I couldn’t get any training videos online when I was working with the tool. With other tools, I could easily get the troubleshooting videos. However, with this product, it was a hurdle. We had to contact the vendor every time. The vendor was not from our time zone, so we had to wait for a response. There was a delay most of the time.
Learn what your peers think about ThreatConnect Threat Intelligence Platform (TIP). Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.
Administrator at a university with 1,001-5,000 employees
Real User
Jan 30, 2021
They should make it a little bit easier to generate events and share them with the community. Right now, it's a little complex to share with them or to download your events in a report. The price could also be better.
ThreatConnect Threat Intelligence Platform provides a comprehensive solution for operational threat intelligence. It effectively ingests and enriches data, aligning with intelligence requirements for seamless application across security operations.
ThreatConnect TIP stands out by integrating threat intelligence with orchestration for streamlined threat management. It simplifies the user experience with a customizable interface assisting security teams in operationalizing insights across...
ThreatConnect Threat Intelligence Platform (TIP) could be improved by simplifying the user interface to better fit day-to-day analyst workflow and reducing the complexity of configuring playbook and score logic.
ThreatConnect Threat Intelligence Platform (TIP) could be better in terms of cost, as the basic needs of the software are emphasized. It provides good solutions, but if similar offerings were available at a better cost, that would be something to consider. The AI integrations could be smoother since AI is increasingly prevalent; this is an area that could definitely be improved.
The platform needs improvement in its customization of the tagging mechanism. Some filtering options are not available based on individual tags, and we cannot export more types of data. The initial setup was complex due to lacking interactivity. Additionally, the role-based access control and training for analysts could be improved, as we cannot currently provide role-based access and training to our analysts.
I would like to see improvements in the time zone support of their customer service, considering users are from different time zones. Additionally, the pricing is high for smaller organizations, so it would be beneficial to have tiered pricing. An audio tutorial feature would also be helpful.
ThreatConnect Threat Intelligence Platform (TIP) needs to develop its SOAR platform because it currently doesn't position or connect itself as a SOAR tool, even though it has at least 60 percent of the features of a SOAR-based solution. If the product can offer a SOAR-based tool, it would be a good addition, in my opinion. Support is an area with which nobody is ever fully satisfied, so it can be improved.
The building of playbooks could be more refined. The training is not openly available. I couldn’t get any training videos online when I was working with the tool. With other tools, I could easily get the troubleshooting videos. However, with this product, it was a hurdle. We had to contact the vendor every time. The vendor was not from our time zone, so we had to wait for a response. There was a delay most of the time.
It would be good to have more feeds and more integrated sources for enrichment.
They should make it a little bit easier to generate events and share them with the community. Right now, it's a little complex to share with them or to download your events in a report. The price could also be better.
Integration is an area that could use some improvement.