Anomali Platform
Anomali Platform: A broad enterprise TIP combining intelligence operations, telemetry, cases, automation, and AI. Ranked #1 of 32 in Threat Intelligence Platforms by our editors (9.3/10); pricing: Pricing on request; best for enterprise teams needing a complete TIP.
At a glance
- Editor score9.3 / 10
- PricingPricing on request
- Best forEnterprise teams needing a complete TIP
- Indicator enrichmentYes
- Founded2013 · Redwood City, California, United States
- Facts checked20 Sep 2026
Where it wins
- Covers collection, normalization, enrichment, correlation, sharing, cases, and PIRs
- Supports hybrid deployment across web, API, and self-hosted environments
- Connects with SIEM, SOAR, endpoint, firewall, Jira, Slack, and STIX/TAXII tools
Where it doesn't
- Pricing is sales-led and requires contact with Anomali
- Its broad feature set may exceed the needs of focused TIP teams
- It is proprietary rather than open source
Our verdict on Anomali Platform
Anomali Platform is a threat intelligence platform for enterprise, public-sector, and security service-provider environments. It brings together threat intelligence collection, normalization, deduplication, scoring, enrichment, correlation, sharing, case management, workflow automation, and security telemetry querying. Teams can use it to add context to indicators and alerts, connect threat actors with campaigns and TTPs, manage intelligence-driven investigations, and monitor recurring intelligence needs through Priority Intelligence Requirements. The platform is available through web, API, and self-hosted deployments, with hybrid deployment included in its category specification.
Its broadest strength is coverage across the intelligence and security operations workflow. The platform supports STIX/TAXII sharing, threat-graph correlation, automated enrichment, AI-generated case summaries, recommended next steps, and real-time telemetry querying. Integrations span SIEM, SOAR, firewalls and network security, endpoint security, risk and vulnerability management, Jira, and Slack. APIs and SDKs extend its fit with existing security systems, while ThreatStream Next-Gen adds curated intelligence, operational enrichment, intelligence sharing, API access, and integrations with security tools. This makes Anomali Platform a strong fit for teams that need intelligence to move from collection into investigation and response.
Pricing is contact-sales rather than self-serve, and the published buying path centers on requesting a demo or speaking with sales. That approach suits organizations evaluating a complete TIP across multiple security functions, deployment models, and integrations. Teams seeking a narrow indicator-enrichment tool, transparent self-serve purchasing, or an open-source option should look elsewhere. Enterprise buyers that value extensive workflow coverage, AI-assisted case work, telemetry access, and hybrid deployment should consider Anomali Platform, particularly when a broader security operations platform is more appropriate than a standalone intelligence repository.
Your product? Our editors can test Anomali Platform in depth and publish a review, labelled as paid · from $149/mo →
Anomali Platform pricing
Anomali Platform fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Not verified |
| Indicator enrichment | Yes |
| STIX/TAXII support | Yes |
| Report management | Yes |
| Workflow automation | Yes |
| Case management | Yes |
| Deployment | Hybrid |
| Deployment | Cloud, Self-hosted |
| Platforms | Web |
| Support | Phone, Docs |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 100+ integrations: SIEM, SOAR, firewalls and network security, endpoint security, risk and vulnerability management, STIX/TAXII … See all → |
| Pricing | Pricing on request |
| Website | anomali.com |
| Facts checked | 20 Sep 2026 |
Anomali Platform integrations
Anomali Platform lists 100+ integrations on its own site — the 8 named here are the ones its pages call out.
- SIEM
- SOAR
- firewalls and network security
- endpoint security
- risk and vulnerability management
- STIX/TAXII
- Jira
- Slack
See all Anomali Platform integrations →
Alternatives to Anomali Platform
- Recorded Future Intelligence CloudA broad intelligence platform for teams that need risk context across security workflows.9.2
- Group-IB Threat Intelligence PlatformA broad cloud platform for actor research, dark-web monitoring, leaks, and intelligence operations.9.0
- MISPA capable free TIP for teams prepared to operate and extend their own platform.8.8
See all Anomali Platform alternatives →
Anomali Platform vs the competition
- Anomali Platform vs Recorded Future Intelligence Cloud
- Anomali Platform vs Group-IB Threat Intelligence Platform
- Anomali Platform vs MISP
- Anomali Platform vs ThreatQ
- Anomali Platform vs Cyware Intelligence Exchange
- Anomali Platform vs EclecticIQ Platform
Compare Anomali Platform with any tool side by side →
Also Ranked In
Anomali Platform is ranked in 4 of our directories.
Used Anomali Platform? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Anomali Platform for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Anomali Platform is listed in our Threat Intelligence Platforms directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/anomali-platform/"><img src="https://www.itechguides.com/best/badge/anomali-platform.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update