State of Play: Threat Intelligence Platforms

An annual review of the Threat Intelligence Platforms market, with answers from the vendors in it.

November 9, 2026

State of Play 2026: Threat Intelligence Platforms

Mastercard owns Recorded Future, Dataminr owns ThreatConnect, and Microsoft now includes its threat intelligence with Defender XDR and Sentinel. Where the market stands in 2026, what the product types are, and what the published prices show.

For your consideration

Job 04

Control technology spend

AI is billed per use, so its cost grows with adoption while the rest of the budget is under review.

Open it

More State of Play

Buyer Guide

Threat Intelligence Platforms (TIP)

Compare Recorded Future, Google Threat Intelligence, CrowdStrike, Anomali, ThreatConnect, Cyware, Flashpoint, and Intel 471 — framing an aggregation-and-operationalization TIP against a premium finished-intelligence provider, with whether the intel actually changes what your SOC does as the deciding criterion.

Read the guide

The Throughline

One decision facing technology leaders, monthly. No sponsorships. Unsubscribe anytime.

Keep reading

Buyer Guide

Threat Intelligence Platforms (TIP)

Job 01

Decide where AI goes in the business

The board wants an AI plan, and every function wants to go first.

Executive Forum

Publish under your own byline

Senior technology leaders write for CIOPages in the Executive Forum.

State of Play 2026: Identity and Access Management