Cyber threat intelligence companies focus on gathering, analyzing, and utilizing information about cyber threats. They aim to help organizations proactively defend themselves against potential attacks. Operating in this space are firms of various sizes, from startups to established players, that provide services such as risk assessment, incident response, and vulnerability management. As the digital landscape continues to evolve, the demand for advanced threat knowledge and protection strategies is on the rise. Companies are expected to enhance their offerings with AI and machine learning capabilities, making threat information not just reliable, but also actionable.

This list features 22 notable cyber threat intelligence firms, highlighting a range of company sizes from small startups to large organizations. Many are based in the United States, with additional firms located in Europe and Asia. Founded between 1999 and 2024, they specialize in various aspects of cybersecurity, including risk mitigation, threat analytics, and incident response. The industry reflects a growing need for robust cyber defenses across sectors, as companies respond to increasingly sophisticated cyber threats that endanger vital assets.

Continue reading to explore the top cyber threat intelligence companies.

Top 22 Cyber Threat Intelligence Companies

1. Mandiant Security Validation

• Website: fireeye.com
• Ownership type: Private Equity
• Headquarters: Mclean, Virginia, United States (USA)
• Latest funding: $1.2B, June 2021
• Founded year: 2014
• Headcount: 51-200
• LinkedIn: secvalidation

Mandiant Security Validation, a subsidiary of FireEye, is a cybersecurity firm based in McLean, Virginia. Founded in 2014, the company specializes in providing a range of security solutions, including threat intelligence, incident response, and managed defense services. Mandiant's expertise is particularly valuable to businesses in sectors such as healthcare and finance, where the stakes for cybersecurity are high. The firm has built a reputation for its thorough approach to threat intelligence, helping organizations understand and mitigate potential risks. In June 2021, Mandiant secured $1.2 billion in funding, underscoring its position in the market and its commitment to enhancing its offerings. The company continues to evolve, adapting to the ever-changing landscape of cyber threats and providing essential services to its clients.

2. ThreatConnect

• Website: threatconnect.com
• Ownership type: Private Equity
• Headquarters: Arlington, Virginia, United States (USA)
• Employee distribution: United States (USA) 55%, Romania 37%, United Kingdom (UK) 6%, Other 2%
• Latest funding: June 2019
• Founded year: 2011
• Headcount: 51-200
• LinkedIn: threatconnect-inc

ThreatConnect, based in Arlington, Virginia, is a cybersecurity firm that specializes in threat intelligence operations and cyber risk quantification. Established in 2011, the company has developed a robust platform that enables organizations to collect, analyze, and operationalize threat intelligence. Their offerings include a threat intelligence platform, Polarity for unified threat intel, and a risk quantifier that helps businesses assess cyber risks in financial terms. This approach allows clients to prioritize their cybersecurity investments effectively. ThreatConnect has garnered attention in the industry, being recognized as a leader in the CRQ Forrester Wave, which highlights its commitment to providing high-fidelity threat intelligence solutions. The company serves a wide range of clients, including Fortune 100 companies, showcasing its capability to meet the needs of large organizations across various sectors.

3. Cyberint, a Check Point Company

• Website: cyberint.com
• Ownership type: Corporate
• Headquarters: Petah Tikva, Center, Israel
• Employee distribution: Israel 65%, United States (USA) 15%, Singapore 3%, Other 16%
• Latest funding: $200.0M, August 2024
• Founded year: 2009
• Headcount: 51-200
• LinkedIn: cyberint

Cyberint, a Check Point Company, is a cybersecurity firm based in Petah Tikva, Israel, founded in 2009. With a workforce of approximately 163 employees, the company focuses on threat intelligence and digital risk protection. Cyberint provides a range of services designed to help organizations manage and mitigate cyber risks. Their offerings include attack surface management, deep cyber investigations, and threat landscape analysis, which are essential for businesses looking to enhance their security posture against evolving threats. The company serves various sectors, including financial services and healthcare, demonstrating its capability to address the unique security needs of different industries. Recently, Cyberint secured $200 million in funding, reflecting strong investor interest and confidence in its strategic direction and market relevance.

4. Flashpoint

• Website: flashpoint.io
• Ownership type: Private Equity
• Headquarters: New York, New York, United States (USA)
• Employee distribution: United States (USA) 90%, Canada 6%, Other 5%
• Latest funding: July 2021
• Founded year: 2010
• Headcount: 201-500
• LinkedIn: flashpoint-intel

Flashpoint, founded in 2010 and based in New York, is a cybersecurity firm that specializes in cyber threat intelligence and professional services. With a workforce of approximately 395 employees, the company provides solutions that help organizations manage vulnerabilities and protect against a wide array of cyber threats. Their flagship product, Flashpoint Ignite, offers a robust platform for cyber threat intelligence, vulnerability intelligence, and physical security intelligence. Flashpoint serves various industries, including financial services, retail, healthcare, and technology, delivering tailored intelligence and insights to enhance security measures. The firm has built a reputation for its proactive approach to threat detection and response, leveraging a combination of automated data collection and expert analysis to provide timely and actionable intelligence. Flashpoint's commitment to helping organizations navigate the complexities of cybersecurity makes it a significant player in the industry.

5. Group-IB

• Website: group-ib.com
• Ownership type: Venture Capital
• Headquarters: Singapore
• Employee distribution: Singapore 19%, United Arab Emirates 16%, Uzbekistan 11%, Other 54%
• Latest funding: Other (Grant), July 2020
• Founded year: 2003
• Headcount: 501-1000
• LinkedIn: group-ib

Group-IB, founded in 2003 and based in Singapore, is a cybersecurity firm that specializes in digital risk protection and threat intelligence. With a workforce of around 365 employees, the company offers a range of services designed to help businesses and organizations combat cyber threats. Their offerings include fraud protection, incident response, and digital forensics, which are essential for protecting assets in today's digital landscape. Group-IB is also known for its research initiatives, providing valuable insights into cybercrime trends and tactics. They have hosted events like the Digital Risk Summit, bringing together industry experts to discuss the evolving threat landscape. Their commitment to understanding and mitigating cyber risks makes them a significant player in the cybersecurity industry.

6. Anomali

• Website: anomali.com
• Ownership type: Venture Capital
• Headquarters: Redwood City, California, United States (USA)
• Employee distribution: United States (USA) 62%, United Kingdom (UK) 19%, Colombia 3%, Other 16%
• Latest funding: Series D, $40.0M, January 2018
• Founded year: 2013
• Headcount: 201-500
• LinkedIn: anomali

Anomali Inc., based in Redwood City, California, is a cybersecurity firm that specializes in threat intelligence and security analytics. Founded in 2013, the company has developed a suite of AI-powered solutions aimed at helping organizations effectively detect, investigate, and respond to cyber threats. Their flagship products include the Anomali Platform, which integrates various security operations, Anomali Copilot for immediate insights, and ThreatStream for external threat intelligence management. Anomali's technology is designed to streamline security operations, reduce response times, and enhance overall threat visibility. The company has received substantial venture capital funding, with a notable Series D round of $40 million in 2018, reflecting strong investor interest in their innovative approach to cybersecurity. Anomali actively collaborates with partners to provide a marketplace for threat intelligence feeds, further solidifying its role in the cyber threat intelligence industry.

7. Cybereason

• Website: cybereason.com
• Ownership type: Private Equity
• Headquarters: San Diego, California, United States (USA)
• Employee distribution: Israel 33%, Japan 26%, United States (USA) 16%, Other 26%
• Latest funding: Series E-K, $120.0M, March 2025
• Founded year: 2012
• Headcount: 1001-5000
• LinkedIn: cybereason

Cybereason, founded in 2012 and headquartered in San Diego, California, is a cybersecurity firm that specializes in advanced software solutions aimed at threat detection and incident response. The company offers the Cybereason Defense Platform, which is designed to help organizations protect against a wide array of cyber threats. Their services include endpoint protection, threat hunting, and managed detection and response (MDR), all of which are essential for maintaining robust cybersecurity. Cybereason's threat intelligence capabilities are bolstered by their Nocturnus team, which consists of skilled analysts dedicated to identifying emerging threats. The company has received significant funding, with a recent Series E-K round totaling $120 million, reflecting strong investor interest and support for their innovative approach to cybersecurity.

8. Exabeam

• Website: exabeam.com
• Ownership type: Venture Capital
• Headquarters: Foster City, California, United States (USA)
• Employee distribution: United States (USA) 56%, India 18%, United Arab Emirates 6%, Other 20%
• Latest funding: $1.0M, December 2021
• Founded year: 2003
• Headcount: 501-1000
• LinkedIn: exabeam

Exabeam, founded in 2003 and based in Foster City, California, is a cybersecurity firm that specializes in threat detection, investigation, and response solutions. The company offers an AI-driven Security Operations Platform designed to enhance security operations for organizations across various industries, including financial services and healthcare. Exabeam's platform integrates advanced analytics and automation to streamline the threat detection and response process, making it easier for security teams to manage and mitigate risks. With a workforce of nearly 1,000 employees, Exabeam has established itself as a significant player in the cybersecurity sector. The company has received funding, with its last reported amount being $1 million in December 2021, indicating ongoing investment in its growth and development. Exabeam's focus on addressing insider and external threats, along with its commitment to compliance, positions it as a relevant and active participant in the cybersecurity landscape.

9. Vectra AI

• Website: vectra.ai
• Ownership type: Private Equity
• Headquarters: San Jose, California, United States (USA)
• Employee distribution: United States (USA) 50%, Ireland 18%, Germany 4%, Other 28%
• Latest funding: Series E-K, $130.0M, April 2021
• Founded year: 2011
• Headcount: 501-1000
• LinkedIn: vectra_ai

Vectra AI, Inc., founded in 2011 and based in San Jose, California, is a cybersecurity firm that specializes in artificial intelligence-driven solutions for detecting and responding to sophisticated cyber threats. With a workforce of approximately 647 employees, Vectra AI operates globally, providing services to a range of industries such as banking, healthcare, and government. The company focuses on hybrid attack detection, leveraging advanced technology to enhance security measures for its clients. Vectra AI has raised significant funding, with its last round totaling $130 million in April 2021, which underscores its growth trajectory and the increasing demand for its innovative cybersecurity solutions. Their platform integrates various detection and response capabilities, including network detection and response (NDR) and identity threat detection and response (ITDR), making them a notable player in the cybersecurity sector.

10. DomainTools

• Website: domaintools.com
• Ownership type: Venture Capital
• Headquarters: Seattle, Washington, United States (USA)
• Employee distribution: United States (USA) 83%, United Kingdom (UK) 5%, Germany 3%, Other 8%
• Latest funding: December 2020
• Founded year: 2004
• Headcount: 51-200
• LinkedIn: domaintools

DomainTools, founded in 2004 and based in Seattle, Washington, is a cybersecurity company that specializes in advanced threat intelligence and domain protection solutions. With a workforce of approximately 149 employees, the company operates primarily through a Software as a Service (SaaS) model, integrating its tools with existing security infrastructures. DomainTools offers a suite of products, including the Iris Intelligence Platform, which helps organizations map connected infrastructure and monitor lookalike domains. Their Farsight DNSDB is recognized as the world's largest passive DNS intelligence solution, providing real-time updates and extensive historical data. The company caters to a variety of sectors, including federal government, financial services, healthcare, technology, and retail, helping clients detect and respond to cyber threats effectively. DomainTools has established itself as a trusted source of internet intelligence, with a significant presence in the cybersecurity market, serving over 700 enterprise customers, including many Fortune 100 companies.

11. Optiv

• Website: optiv.com
• Ownership type: Private Equity
• Headquarters: Denver, Colorado, United States (USA)
• Employee distribution: United States (USA) 63%, India 33%, Canada 4%
• Latest funding: Other (Debt), May 2023
• Founded year: 2015
• Headcount: 1001-5000
• LinkedIn: optiv-inc

Optiv Security, Inc., founded in 2015 and based in Denver, Colorado, is a cybersecurity consulting firm that specializes in comprehensive information security services. With a workforce of over 2,300 employees, Optiv serves a wide array of industries, helping organizations manage cyber risks, ensure compliance, and enhance their cybersecurity posture. Their service offerings include advanced detection and response, application security, cloud security, and identity modernization, among others. Optiv also provides threat intelligence services, which are crucial for organizations to stay ahead of evolving cyber threats. They work with more than 450 technology partners, allowing them to deliver tailored solutions that meet the specific needs of their clients. Optiv's commitment to managing cyber risk and improving security outcomes positions them as a significant player in the cybersecurity industry.

12. Intel 471

• Website: intel471.com
• Ownership type: Private Equity
• Headquarters: Wilmington, Delaware, United States (USA)
• Employee distribution: United States (USA) 51%, United Kingdom (UK) 13%, Netherlands 13%, Other 23%
• Latest funding: September 2021
• Founded year: 2014
• Headcount: 201-500
• LinkedIn: intel-471

Intel 471, founded in 2014 and based in Wilmington, Delaware, is a cybersecurity firm that specializes in cyber threat intelligence solutions. With a workforce of approximately 195 employees, the company serves a variety of industries, providing critical services such as adversary intelligence, credential monitoring, and incident response. Their flagship product, the TITAN Cybercrime Intelligence Platform, offers organizations insights into the cyber underground, enabling them to proactively defend against threats. Intel 471's intelligence capabilities are bolstered by their focus on human intelligence, allowing them to gather nuanced insights into the behaviors and tactics of cybercriminals. The company has also been recognized for its contributions to the field, receiving awards that highlight its innovative approach to cyber threat intelligence.

13. Cybersixgill, a Bitsight Company

• Website: cybersixgill.com
• Ownership type: Corporate
• Headquarters: Tel Aviv-Yafo, Tel Aviv, Israel
• Employee distribution: Israel 88%, United States (USA) 9%, Philippines 3%
• Latest funding: $115.0M, November 2024
• Founded year: 2014
• Headcount: 51-200
• LinkedIn: sixgill

Cybersixgill, a Bitsight Company, is a cybersecurity firm based in Tel Aviv-Yafo, Israel, established in 2014. The company specializes in threat intelligence services, offering real-time insights and monitoring solutions that empower organizations to detect and respond to cyber threats effectively. Cybersixgill's expertise lies in its ability to gather and analyze data from a wide array of sources, including the clear, deep, and dark web. Their services cater to a broad clientele, including enterprises and law enforcement agencies across sectors such as financial services, healthcare, and energy. The company has developed a reputation for providing actionable intelligence that helps clients preemptively address potential threats. In November 2024, Cybersixgill secured $115 million in funding, underscoring its growth trajectory and the confidence investors have in its capabilities and market relevance.

14. Silobreaker

• Website: silobreaker.com
• Ownership type: Private Equity
• Headquarters: London, England, United Kingdom (UK)
• Employee distribution: Sweden 53%, United Kingdom (UK) 41%, United States (USA) 5%
• Latest funding: January 2022
• Founded year: 2005
• Headcount: 51-200
• LinkedIn: silobreaker

Silobreaker, founded in 2005 and based in London, is an intelligence platform that specializes in cyber, geopolitical, and physical risk management. The company offers a range of services aimed at helping businesses and organizations identify and mitigate risks effectively. Their platform integrates various data sources, providing clients with actionable insights to enhance operational resilience. Silobreaker serves a wide array of industries, including financial services, healthcare, and technology, demonstrating its versatility in addressing different risk scenarios. The company has not reported any recent funding, indicating a stable operational model. With a team of around 73 employees, Silobreaker continues to innovate in the field of threat intelligence, focusing on automating workflows and improving analyst efficiency. Their commitment to providing high-quality insights positions them as a valuable resource for organizations seeking to safeguard their assets and operations.

15. SecurityScorecard

• Website: securityscorecard.com
• Ownership type: Private Equity
• Headquarters: New York, New York, United States (USA)
• Employee distribution: United States (USA) 64%, India 5%, Czech Republic 4%, Other 27%
• Latest funding: Series E-K, $180.0M, March 2021
• Founded year: 2013
• Headcount: 501-1000
• LinkedIn: security-scorecard

SecurityScorecard, founded in 2013 and based in New York, is a cybersecurity firm that specializes in supply chain risk management and threat intelligence. The company offers a suite of services aimed at enhancing the cybersecurity posture of organizations across various industries, including technology, healthcare, and finance. Their platform provides tools for automatic vendor detection, security ratings, and cyber risk quantification, enabling businesses to identify and mitigate risks associated with their supply chains. SecurityScorecard has gained recognition for its innovative approach to cybersecurity, particularly in the realm of third-party risk management. The firm has attracted substantial investment, with a reported $180 million in funding as of March 2021, underscoring its growth potential and relevance in the cybersecurity landscape.

16. IntSights, a Rapid7 company

• Website: intsights.com
• Ownership type: Corporate
• Headquarters: New York, New York, United States (USA)
• Employee distribution: Israel 77%, United States (USA) 8%, Singapore 8%, Other 8%
• Latest funding: $335.0M, July 2021
• Founded year: 2015
• Headcount: 201-500
• LinkedIn: intsights

IntSights, a Rapid7 company, is a cybersecurity firm based in New York, founded in 2015. The company focuses on providing threat intelligence solutions that empower organizations to identify and respond to external threats effectively. IntSights operates under the umbrella of Rapid7, which offers a comprehensive suite of security solutions, including threat detection and incident response services. With a workforce primarily located in Israel, IntSights leverages advanced technology and intelligence to deliver insights that help businesses protect their digital assets. The company has received significant funding, amounting to $335 million as of July 2021, which underscores its growth potential and commitment to enhancing cybersecurity measures for its clients.

17. DarkOwl

• Website: darkowl.com
• Ownership type: Venture Capital
• Headquarters: Denver, Colorado, United States (USA)
• Employee distribution: United States (USA) 100%
• Latest funding: $8.0M, October 2019
• Founded year: 2009
• Headcount: 11-50
• LinkedIn: one-world-labs

DarkOwl, based in Denver, Colorado, is a cybersecurity firm established in 2009 that specializes in darknet data and threat intelligence. The company provides a comprehensive suite of products and services designed to assist businesses and organizations in monitoring and analyzing potential threats originating from the dark web. Their offerings include various APIs, such as the Search API and DarkSonar API, as well as risk analysis services that cater to critical sectors like national security and critical infrastructure. DarkOwl has built the largest commercially available database of darknet content, which empowers organizations to swiftly detect security gaps and mitigate potential damage from compromised data. The company has received significant funding, with a reported amount of $8 million in 2019, indicating investor confidence in their business model and growth potential.

18. Cyjax

• Website: cyjax.com
• Ownership type: Private
• Headquarters: London, England, United Kingdom (UK)
• Employee distribution: United Kingdom (UK) 100%
• Latest funding: $2.5M, August 2023
• Founded year: 2012
• Headcount: 51-200
• LinkedIn: cyjax

Cyjax, based in London, UK, is a cybersecurity firm that specializes in threat intelligence and security solutions. Founded in 2012, the company has developed a range of products aimed at helping businesses protect against cyber threats, improve incident response, and ensure compliance with regulatory standards. Their flagship platform, CYMON, offers real-time insights and integrates seamlessly with existing security operations. Cyjax serves a variety of sectors, including banking, healthcare, and media, and emphasizes proactive security measures and risk assessment. The company recently secured £2.54 million in funding in August 2023, reflecting its ongoing growth and commitment to enhancing its threat intelligence capabilities. Cyjax also actively monitors the dark web to uncover potential threats, providing clients with actionable intelligence to strengthen their defenses against cybercriminal activities.

19. S2grupo

• Website: s2grupo.es
• Ownership type: Private
• Headquarters: Valencia, Valencian Community, Spain
• Employee distribution: Spain 91%, Colombia 7%, Other 2%
• Latest funding: Other (Grant), $63,000, October 2014
• Founded year: 1999
• Headcount: 501-1000
• LinkedIn: s2-grupo

S2 Grupo, founded in 1999 and based in Valencia, Spain, is a private cybersecurity firm with a workforce of approximately 678 employees. The company specializes in threat detection, incident management, and advanced security audits, catering to both businesses and public institutions. With a strong emphasis on protecting critical systems and ensuring compliance with security regulations, S2 Grupo has built a reputation for its expertise in cybersecurity. They operate in over 35 countries and maintain several Security Operations Centers (SOCs) in key locations, including Valencia, Madrid, Mexico, and Bogotá. S2 Grupo is also committed to research and development, allocating around 10% of its turnover to innovative projects aimed at enhancing cybersecurity practices. Their initiatives extend beyond corporate clients, as they actively promote cybersecurity awareness in the community, particularly among vulnerable groups. This holistic approach to cybersecurity underscores their role as a significant player in the industry.

20. Risk Based Security

• Website: riskbasedsecurity.com
• Ownership type: Corporate
• Headquarters: Richmond, Virginia, United States (USA)
• Latest funding: January 2022
• Founded year: 2011
• Headcount: 11-50
• LinkedIn: risk-based-security

Risk Based Security, founded in 2011 and based in Richmond, Virginia, is a cybersecurity firm that focuses on threat intelligence and vulnerability management. The company provides services tailored to businesses and organizations, particularly in the financial and healthcare sectors. Their offerings include customized reporting, managed intelligence, and incident response services, which are essential for organizations looking to enhance their security posture. Risk Based Security has built a reputation for delivering actionable insights that help clients navigate the complexities of cyber threats. They have not reported any recent funding, indicating a stable operational model without external financial backing.

21. Etek

• Website: etek.com
• Ownership type: Private
• Headquarters: Charlotte, North Carolina, United States (USA)
• Employee distribution: Colombia 75%, India 10%, Peru 8%, Other 8%
• Founded year: 1984
• Headcount: 201-500
• LinkedIn: etek-international

Etek, founded in 1984 and based in Charlotte, North Carolina, is a private cybersecurity services firm with a workforce of approximately 217 employees. The company specializes in managed cybersecurity solutions, catering to various sectors including telecommunications, banking, and retail. Etek's service portfolio includes threat intelligence, data protection, and vulnerability management, which are critical components in the fight against cyber threats. They adopt a consultative approach, leveraging advanced technologies to enhance their clients' cybersecurity measures. Etek operates globally, with a significant presence in Colombia, India, Peru, and Canada, and has established a reputation for delivering proactive cybersecurity services. Their commitment to empowering organizations through training and awareness further solidifies their role in the cybersecurity industry.

22. GroupSense

• Website: groupsense.io
• Ownership type: Venture Capital
• Headquarters: Arlington, Virginia, United States (USA)
• Employee distribution: United States (USA) 91%, Bulgaria 9%
• Latest funding: Seed, $450,000, March 2024
• Founded year: 2014
• Headcount: 11-50
• LinkedIn: groupsense

GroupSense, founded in 2014 and based in Arlington, Virginia, is a cybersecurity firm that specializes in digital risk protection and threat intelligence services. The company offers a variety of solutions aimed at helping businesses and organizations mitigate risks associated with cyber threats. Their services include ransomware negotiation, election threat protection, and comprehensive monitoring of digital assets. GroupSense employs a proactive approach, which involves not only monitoring threats but also engaging with threat actors to gather intelligence. This strategy enhances their ability to provide tailored security measures for their clients. Recently, they secured seed funding of approximately $450,000 in March 2024, indicating ongoing investment in their capabilities and growth within the cybersecurity sector.

Cyber Threat Intelligence Insights: Key Companies

Want to Find More Cyber Threat Intelligence Companies?

With Inven you'll also get to know the company's:

• Detailed Ownership: Who owns the company? Is it a public or private company? What is the ownership structure?
• Contact data: Who are the founders and CEO's? What are their emails and phone numbers?
• Financials: How do these companies perform financially? What are their revenues and profit margins?

...and a lot more!