

ThreatCluster
Free threat intelligence platform that aggregates 4000+ cybersecurity sources, clusters related articles, and delivers daily digests on APTs, ransomware, CVEs, and emerging threats.
Cost / License
- Free
- Proprietary
Platforms
- Online




ThreatCluster
Features
Properties
- Lightweight
Features
- Ad-free
- Dark Mode
- Multiple Account support
- No Tracking
- Import/Export OPML Feeds
- No registration required
Tags
- News
- threat-monitoring
- cybersecuritysolutions
- Cybersecurity
- threat intelligence
- Newsletters
ThreatCluster News & Activities
Recent activities
- james-mockford added ThreatCluster as alternative to Feedly, MISP and OpenCTI
- james-mockford added ThreatCluster
ThreatCluster information
What is ThreatCluster?
ThreatCluster is a free threat intelligence aggregation platform designed for security analysts, SOC teams, and researchers who need to stay on top of emerging cyber threats.
Key Features:
• Aggregates 4000+ cybersecurity news sources in real-time • Semantic-powered clustering groups related articles about the same threat or incident from multiple sources • Tracks threat actors (APT groups, ransomware gangs), malware families, CVEs, IOCs, and more • Threat scoring ranks clusters by severity and relevance • Personalised feeds - add custom keywords and entities to surface threats relevant to you or your organisation • Daily email digest tailored to your interests delivers the most important threats to your inbox • Entity pages for deep-dives on specific actors, malware, or vulnerabilities • STIX/TAXII export for integration with security tools • Completely free with no registration required to browse
ThreatCluster saves analysts hours of manual feed trawling by automatically correlating articles from multiple sources about the same event, giving you a complete picture of each threat in one place.
Built by a working CTI professional who got tired of checking 50 tabs every morning.
