Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

EclecticIQ Platform review

#7 of 32 in Threat Intelligence Platforms

A broad CTI workspace combining collection, analysis, investigations, reporting, and automation.

8.6/10Editor score
EclecticIQ Platform8.6 Visit EclecticIQ

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

EclecticIQ Platform, currently presented as Intelligence Center, is a threat intelligence platform for CTI analysts, SOC analysts, cybersecurity leaders, governments, enterprises, and MSSPs. It centralizes intelligence from feeds, uploads, and integrations, then normalizes it with STIX 2.1 and EIQ-JSON. The platform also supports indicator enrichment, search, graph analysis, MITRE ATT&CK visualization, dashboards, watchlists, reporting, collaborative workspaces, case-oriented investigations, alert triage, threat hunting, vulnerability prioritization, and REST API access. Its scope makes it a fit for teams that need more than a feed repository or indicator lookup tool.

The platform's strongest area is workflow depth. Analysts can move from collection and automated deduplication to contextual enrichment, discovery rules, alerts, graph analysis, and reporting in one environment. Rich-text threat reports, tasks, notes, and collaborative workspaces support investigation and dissemination work, while exports in STIX, HTML, CSV, and other formats help move intelligence into other processes. AI-assisted search and analysis adds another analysis option. Integrations include Microsoft Sentinel, Splunk, MISP, Palo Alto Networks, VirusTotal, Recorded Future, Shodan, and other named sources and security tools, supporting a broad ecosystem fit.

Deployment and commercial structure are important considerations. The platform is available through web, API, and self-hosted options, with a hybrid deployment category. Foundation is described as a single cloud deployment, while Enterprise supports cloud, on-premises, or air-gapped deployment. Published plan pricing is contact sales rather than a listed amount, so buyers should expect a sales-led evaluation. EclecticIQ Platform suits organizations that need collection, normalization, enrichment, investigations, reporting, automation, and dissemination together. Teams seeking a narrowly focused intelligence utility or transparent plan pricing may prefer a simpler alternative.

EclecticIQ Platform pros and cons

  • Where it wins
    • Normalizes intelligence with STIX 2.1 and EIQ-JSON
    • Combines graph analysis, ATT&CK visualization, and investigations
    • Offers REST API access, exports, and numerous integrations
  • Where it doesn't
    • Pricing requires contact with sales
    • The broad feature set may exceed narrow CTI needs
    • Deployment choices vary between Foundation and Enterprise

EclecticIQ Platform fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update