Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Open Threat Exchange

Free#18 of 32 in Threat Intelligence Platforms

Open Threat Exchange: A free community for sharing Pulses and researching indicators of compromise. Ranked #18 of 32 in Threat Intelligence Platforms by our editors (7.8/10); pricing: Free plan; best for free community indicator sharing.

7.8/10Editor score
Open Threat Exchange7.8 Visit OTX

At a glance

  • Editor score
    7.8 / 10
  • Pricing
    Free plan
  • Best for
    Free community indicator sharing
  • Free plan
    Yes
  • Paid from
    Free
  • Indicator enrichment
    Yes
  • Facts checked
    24 Sep 2026
Open Threat Exchange screenshot
  • Where it wins

    • Free access to community-shared threat intelligence
    • Pulses organize and distribute shared threat intelligence
    • Web and API access support indicator research
  • Where it doesn't

    • Focused on indicator sharing rather than end-to-end case workflows
    • Narrower integration scope than full threat intelligence platforms
    • Cloud deployment may not fit teams needing other models

Our verdict on Open Threat Exchange

Open Threat Exchange (OTX) is a free threat intelligence sharing community associated with LevelBlue. It is designed for security teams and researchers that want to share threat intelligence through Pulses and access shared information about indicators of compromise. The service is available through web and API interfaces, with cloud deployment. Shared intelligence can inform threat monitoring and investigations without requiring a commercial plan.

Its central strength is the community exchange model. Users can publish threat intelligence in Pulses and consult information associated with indicators of compromise, giving teams a common place to distribute and review indicator context. The listed category capabilities include indicator enrichment and report management, while API access provides a programmatic entry point alongside the web experience. OTX fits organizations that value shared indicator information and a free service over a broader operations suite.

The product has a deliberately narrower scope than full threat intelligence platforms. Its focus is on Pulses and indicator information, rather than case management, workflow orchestration, or broad integrations. Teams that need those operational layers should choose a more comprehensive platform, while teams primarily seeking community indicator sharing can use OTX as a focused resource. The free pricing model also makes it suitable where budget limits rule out paid tiers, provided the team's requirements remain centered on shared intelligence and indicator analysis.

Your product? Our editors can test Open Threat Exchange in depth and publish a review, labelled as paid · from $149/mo →

Open Threat Exchange pricing

Plans Free planFree Free to use — no paid tier required for the core job.
See plans on levelblue.com

Open Threat Exchange fact sheet

Free planYes
Paid fromFree
Indicator enrichmentYes
STIX/TAXII supportNot verified
Report managementYes
Workflow automationNot verified
Case managementNot verified
DeploymentCloud
DeploymentCloud
PlatformsWeb
PricingFree plan
Websitelevelblue.com
Facts checked24 Sep 2026

Alternatives to Open Threat Exchange

See all Open Threat Exchange alternatives →

Used Open Threat Exchange? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Open Threat Exchange for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — Open Threat Exchange 7.8/10

Open Threat Exchange is listed in our Threat Intelligence Platforms directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/open-threat-exchange/"><img src="https://www.itechguides.com/best/badge/open-threat-exchange.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update