alternatives to

Anomali ThreatStream

Commercial threat intelligence platform that collects intelligence feeds, scores indicators and shares them with security tools. A closed product from Anomali.

OpenCTI, MISP, and Yeti. 3 alternatives to Anomali ThreatStream, in TypeScript, PHP, Python. Compare fit, licence, stars and the latest signed release.

Side by side

3 alternatives to Anomali ThreatStream
Tool	Fit	Stars	Licence	Terms	Self-hosted	Language	Latest	Last push
OpenCTI	Partial	10k	Other	Open core	Yes	TypeScript	7.261016.0	2026-10-18
MISP	Partial	6.6k	AGPL-3.0	Open source	Yes	PHP	v2.5.50	2026-10-19
Yeti	Partial	2k	Apache-2.0	Open source	Yes	Python	2.12.0	2026-10-09

Every alternative

3 alternatives

OpenCTI Partial

Open Cyber Threat Intelligence Platform

Ingests, links and shares intelligence from many feeds in STIX format, self-hosted.

Language: TypeScript
Licence: Other
Stars: 10k
Latest: 7.261016.0
Last push: 2026-10-18

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

Collects, correlates and shares indicators and events between organizations; the intelligence feeds are up to you.

Language: PHP
Licence: AGPL-3.0
Stars: 6.6k
Latest: v2.5.50
Last push: 2026-10-19

Your Everyday Threat Intelligence

Stores observables and threat entities and links them, with feeds and analytics; smaller than a commercial platform.

Language: Python
Licence: Apache-2.0
Stars: 2k
Latest: 2.12.0
Last push: 2026-10-09

Head to head

About Anomali ThreatStream

Vendor: Anomali

Anomali ThreatStream website ↗