Overview
Service Information on ThreatBook Advanced Threat Intelligence
Updated 13th October 2025
What is ThreatBook Advanced Threat Intelligence?
ThreatBook Advanced Threat Intelligence Pricing
Overall experience with ThreatBook Advanced Threat Intelligence
Engineering Manager
50M - 250M USD, IT ServicesFAVORABLE
“Significant reduction in triage time thanks to advanced IOC enrichment”
We adopted ThreatBook. TIPabout ten months. ago tostrengthen threat intelligence enrichment for our IoT connectivity platform. As. a provider managingconnectivity. for hundred. ofenterprise clients,we process thousands of security. events daily,and TIP has become the backbone of our automated IOC enrichment pipeline. The API integration was smooth; we. hadit connected to our SIEM. andSOAR within two weeks. What stood out most is the context depth on high-fidelity indicators: attribution data, MITRE ATT&CK mapping, and geopolitical background come bundled with every IOC, which helps our small team make faster, more informed decisions without being intelligence analysts ourselves. The threat research portal. has als. provenvaluablefor proactive hunting; we have identified several Mirai and Mozi variant campaigns targeting IoT infrastructure weeks before they hit mainstream news. The vendor's support. teamis responsive, typically answering technical questions within. hours.Overall, TIP has cut our. meantime to triage from around. 45minutes to under. 15for most alerts.
There are no reviews in this category.
CRITICAL
About Company
Company Description
ThreatBook is a provider of cyber threat detection and response services. We developed new approaches to deliver high-fidelity, efficient, and actionable security intelligence. We integrated these capabilities with a full life cycle threat detection system and incident response mechanisms to enhance protection across cloud, network, and endpoints. This helps enterprises respond to threats efficiently, reduce complexity, and improve security operations.
Company Details
Company type
Private
Year Founded
2015
Head office location
Beijing, China
Number of employees
501 - 1000
Do You Manage Peer Insights at ThreatBook?
Access Vendor Portal to update and manage your profile.
Key Insights
A Snapshot of What Matters - Based on Validated User Reviews
Top ThreatBook Advanced Threat Intelligence Alternatives
Peer Discussions
ThreatBook Advanced Threat Intelligence Reviews and Ratings
Filter Reviews
Sort By:
Most helpful
Last 12 Months
Star Rating
Reviewer Type
Reviewer's Company Size
Reviewer's Industry
Reviewer's Region
Reviewer's Job Function
- Engineering Manager50M-1B USDIT ServicesReview Source
Significant reduction in triage time thanks to advanced IOC enrichment
We adopted ThreatBook. TIPabout ten months. ago tostrengthen threat intelligence enrichment for our IoT connectivity platform. As. a provider managingconnectivity. for hundred. ofenterprise clients,we process thousands of security. events daily,and TIP has become the backbone of our automated IOC enrichment pipeline. The API integration was smooth; we. hadit connected to our SIEM. andSOAR within two weeks. What stood out most is the context depth on high-fidelity indicators: attribution data, MITRE ATT&CK mapping, and geopolitical background come bundled with every IOC, which helps our small team make faster, more informed decisions without being intelligence analysts ourselves. The threat research portal. has als. provenvaluablefor proactive hunting; we have identified several Mirai and Mozi variant campaigns targeting IoT infrastructure weeks before they hit mainstream news. The vendor's support. teamis responsive, typically answering technical questions within. hours.Overall, TIP has cut our. meantime to triage from around. 45minutes to under. 15for most alerts. - Manager, IT Security and Risk Management50M-1B USDTelecommunicationReview Source
Telecom-focused threat intelligence streamlined BGP hijack detection and response
We integrated ThreatBook TIP. into ourglobal SOC to enrich threat visibility across international carrier operations spanning Asia-Pacific, Europe, and the Americas. As a telecom operator, we face unique threats — BGP hijacking campaigns, DDoS botnet infrastructure targeting carrier backbone nodes, and SS7/Diameter signaling attacks — that generic threat feeds. simplydo not cover. TIP filled this gap with telecom-specific intelligence, including BGP. hijack actortracking and DDoS command-and-control infrastructure mapping. The API consistently delivers IOC enrichment in under 200 milliseconds, integrated directly with our SIEM and traffic scrubbing platforms for automated blocking decisions. Within. the first quarter,TIP surfaced an active BGP hijack preparation. campaignagainst our Hong Kong-to-Singapore transit route that our existing feeds completely missed. The human-curated weekly briefings on carrier-targeted threat actors. have become essential readin. forou. threat hunting team, providingcontextand attribution we previously spent hours researching manually. - IT Associate<50M USDManufacturingReview Source
A Powerful Threat Intelligence Management Platform for Advanced Threat Detection
TIP is very useful for us.It provides highly accurate threat intelligence and also serves as a local threat intelligence platform.We use it daily to reduce noise from security device alerts and detect compromise scenarios.Since we have many security devices generating excessive alerts and false positives, we rely on threat intelligence to reduce false alarms and focus on real threats within a limited time.In addition to its intelligence capabilities, TIP can also integrate with other gateway devices to block malicious IPs and domains.The entire process,from threat detection to blocking,is fully automated,except for a small number of cases that require secondary analysis by our team. - IT Associate50M-1B USDConsumer GoodsReview Source
Powerful Local Threat Intelligence Platform
The overall user experience of the product is very good.With the help of threat intelligence, it can filter out a large number of false positives ,especially in environments with many security devices and massive alert volumes,which significantly reduces the pressure on security operations.TIP also has a certain level of openness and supports integration with other intelligence sources, such as open-source threat intelligence feeds.However, since it is deployed locally, the intelligence update frequency is lower compared to the cloud version. - Customer Service & Support Associate10B+ USDIT ServicesReview Source
Integration Platform Reduces False Blockage Reports but Query Costs Remain High
We use the TIP and situational awareness platform for integration, which can significantly reduce many false reports of blockages for us.
...
Showing Result 1-5 of 89
Recommended Gartner Insights
This service may contain translations provided by Google. Google disclaims all warranties related to the translations, express or implied, including any warranties of accuracy, reliability, and any implied warranties of merchantability, fitness for a particular purpose and noninfringement. Gartner's use of this provider is for operational purposes and does not constitute an endorsement of its products or services.
