Overview
Service Information on ThreatBook Advanced Threat Intelligence
Updated 13th October 2025
What is ThreatBook Advanced Threat Intelligence?
ThreatBook Advanced Threat Intelligence Pricing
Overall experience with ThreatBook Advanced Threat Intelligence
Engineering Manager
50M - 250M USD, IT ServicesFAVORABLE
“Significant reduction in triage time thanks to advanced IOC enrichment”
We adopted ThreatBook. TIPabout ten months. ago tostrengthen threat intelligence enrichment for our IoT connectivity platform. As. a provider managingconnectivity. for hundred. ofenterprise clients,we process thousands of security. events daily,and TIP has become the backbone of our automated IOC enrichment pipeline. The API integration was smooth; we. hadit connected to our SIEM. andSOAR within two weeks. What stood out most is the context depth on high-fidelity indicators: attribution data, MITRE ATT&CK mapping, and geopolitical background come bundled with every IOC, which helps our small team make faster, more informed decisions without being intelligence analysts ourselves. The threat research portal. has als. provenvaluablefor proactive hunting; we have identified several Mirai and Mozi variant campaigns targeting IoT infrastructure weeks before they hit mainstream news. The vendor's support. teamis responsive, typically answering technical questions within. hours.Overall, TIP has cut our. meantime to triage from around. 45minutes to under. 15for most alerts.
There are no reviews in this category.
CRITICAL
About Company
Company Description
ThreatBook is a provider of cyber threat detection and response services. We developed new approaches to deliver high-fidelity, efficient, and actionable security intelligence. We integrated these capabilities with a full life cycle threat detection system and incident response mechanisms to enhance protection across cloud, network, and endpoints. This helps enterprises respond to threats efficiently, reduce complexity, and improve security operations.
Company Details
Company type
Private
Year Founded
2015
Head office location
Beijing, China
Number of employees
501 - 1000
Do You Manage Peer Insights at ThreatBook?
Access Vendor Portal to update and manage your profile.
Key Insights
A Snapshot of What Matters - Based on Validated User Reviews
Top ThreatBook Advanced Threat Intelligence Alternatives
Peer Discussions
ThreatBook Advanced Threat Intelligence Reviews and Ratings
Filter Reviews
Sort By:
Most helpful
Last 12 Months
Star Rating
Reviewer Type
Reviewer's Company Size
Reviewer's Industry
Reviewer's Region
Reviewer's Job Function
- Engineering Manager50M-1B USDIT ServicesReview Source
Significant reduction in triage time thanks to advanced IOC enrichment
We adopted ThreatBook. TIPabout ten months. ago tostrengthen threat intelligence enrichment for our IoT connectivity platform. As. a provider managingconnectivity. for hundred. ofenterprise clients,we process thousands of security. events daily,and TIP has become the backbone of our automated IOC enrichment pipeline. The API integration was smooth; we. hadit connected to our SIEM. andSOAR within two weeks. What stood out most is the context depth on high-fidelity indicators: attribution data, MITRE ATT&CK mapping, and geopolitical background come bundled with every IOC, which helps our small team make faster, more informed decisions without being intelligence analysts ourselves. The threat research portal. has als. provenvaluablefor proactive hunting; we have identified several Mirai and Mozi variant campaigns targeting IoT infrastructure weeks before they hit mainstream news. The vendor's support. teamis responsive, typically answering technical questions within. hours.Overall, TIP has cut our. meantime to triage from around. 45minutes to under. 15for most alerts. - Manager, IT Security and Risk Management50M-1B USDTelecommunicationReview Source
Telecom-focused threat intelligence streamlined BGP hijack detection and response
We integrated ThreatBook TIP. into ourglobal SOC to enrich threat visibility across international carrier operations spanning Asia-Pacific, Europe, and the Americas. As a telecom operator, we face unique threats — BGP hijacking campaigns, DDoS botnet infrastructure targeting carrier backbone nodes, and SS7/Diameter signaling attacks — that generic threat feeds. simplydo not cover. TIP filled this gap with telecom-specific intelligence, including BGP. hijack actortracking and DDoS command-and-control infrastructure mapping. The API consistently delivers IOC enrichment in under 200 milliseconds, integrated directly with our SIEM and traffic scrubbing platforms for automated blocking decisions. Within. the first quarter,TIP surfaced an active BGP hijack preparation. campaignagainst our Hong Kong-to-Singapore transit route that our existing feeds completely missed. The human-curated weekly briefings on carrier-targeted threat actors. have become essential readin. forou. threat hunting team, providingcontextand attribution we previously spent hours researching manually. - IT Security & Risk Management Associate1B-10B USDManufacturingReview Source
ThreatBook TIP Sharply Reduced Alert Fatigue and Investigation Time
TIP acts as the core threat intelligence center. ofour enterprise security operation system, providing external threat intelligence aggregation, internal threat correlation, and IOC subscription services. The intelligence library. covers awide range. of threattypes including APT campaigns, vulnerability exploits, and phishing infrastructures with regular update cycles, which effectively supports our threat early warning and incident investigation workflows. The API integration with our existing SIEM and SOAR platforms has been relatively smooth. However, some functions in multi-source intelligence fusion, custom rule flexibility, and the visualization dashboard need further enhancement to meet our growing security operation requirements. - IT Associate50M-1B USDManufacturingReview Source
Investigation efficiency improved by rich context and accurate threat feeds
We have deployed ThreatBook Threat Intelligence Platform for 12 months as our core threat intelligence source, with an overall satisfaction score of 4.5 out of 5. The core reason for the high. ratin. is its high-fidelityIOC feedsand rich contextual threat analysis, which greatly improves our SOC team's investigation efficiency. It performs. excellentlyin IP reputation scoring, domain risk. assessment, and automated threat indicator sharingvia API, while minor drawbacks include occasional intelligence update latency for. niche APT campaigns and limited industry-specificthreat profiling customization. - IT Associate<50M USDManufacturingReview Source
A Powerful Threat Intelligence Management Platform for Advanced Threat Detection
TIP is very useful for us.It provides highly accurate threat intelligence and also serves as a local threat intelligence platform.We use it daily to reduce noise from security device alerts and detect compromise scenarios.Since we have many security devices generating excessive alerts and false positives, we rely on threat intelligence to reduce false alarms and focus on real threats within a limited time.In addition to its intelligence capabilities, TIP can also integrate with other gateway devices to block malicious IPs and domains.The entire process,from threat detection to blocking,is fully automated,except for a small number of cases that require secondary analysis by our team.
...
Showing Result 1-5 of 96
Recommended Gartner Insights
This service may contain translations provided by Google. Google disclaims all warranties related to the translations, express or implied, including any warranties of accuracy, reliability, and any implied warranties of merchantability, fitness for a particular purpose and noninfringement. Gartner's use of this provider is for operational purposes and does not constitute an endorsement of its products or services.
