TheHive Alternatives
TheHive is described as 'Scalable 3-in-1 Security Incident Response Platform designed to make life easier for SOCs, CSIRTs, CERTs and any information security practitioner dealing with security incidents that need to be investigated and acted upon swiftly' and is an app. There are four alternatives to TheHive for Self-Hosted, SaaS, Docker and Linux. The best TheHive alternative is MISP, which is both free and Open Source. Other great apps like TheHive are Palo Alto Networks Cortex, IBM QRadar SOAR and DFIR-IRIS.
Alternatives list
Cost / License
- Paid
- Proprietary
Platforms
- Self-Hosted
- Software as a Service (SaaS)
IBM Security® QRadar® SOAR, formerly Resilient®, is designed to help your security team respond to cyberthreats with confidence, automate with intelligence and collaborate with consistency.
Cost / License
- Paid
- Proprietary
Platforms
- Self-Hosted
- Software as a Service (SaaS)
+1
IRIS is a collaborative platform for incident response analysts that helps to share investigations at a technical level. It's a web application that can be installed on a fixed server or on a laptop for roaming investigations where internet might not be available.
Cost / License
- Free
- Open Source (LGPL-3.0)
Platforms
- Self-Hosted
- Docker
+2
Belgium
EU
United States
Germany
TheHive is designed to work in conjunction with MISP, not as an alternative.