Skip to content
Z Zendikt
A
Threat Intelligence Software · Rank #5 of 10

Anomali review and pricing

TIP heritage with feed aggregation and SIEM-anchored correlation.

By Anomali · Founded 2013 · Redwood City, CA · private

Anomali combines a long-standing TIP (ThreatStream) with feed aggregation, correlation against historic log data (Match), and a security analytics layer added in 2022 and 2023. The platform fits organizations that want to ingest dozens of intel feeds (commercial, ISAC, open source), normalize them in STIX/TAXII, and push curated IOCs into SIEM/SOAR. Brand momentum has been quieter than Recorded Future in recent years, but the analyst workflow remains mature.

Visit Anomali Compare to CrowdStrike Falcon Intelligence
Best for

CTI teams aggregating multiple commercial, ISAC, and OSINT feeds into a normalized TIP and pushing curated IOCs into SIEM/SOAR.

Worst for

Buyers wanting deepest proprietary research (Recorded Future or Mandiant win), dark-web depth (Flashpoint wins), or modern UX.

Vendor Trust Score

Is Anomali a trustworthy vendor?

6.8/10
Mixed
Pricing transparency
Published rates; no hidden fees
5.0
Contract fairness
Reasonable terms; no auto-renew traps
7.0
Incident response
How they handle outages and breaches
7.5
Post-acquisition behavior
Customer treatment after M&A or PE
7.5
Executive stability
Leadership churn over 24 months
6.5
Roadmap honesty
Public commitments held
7.0
Trust signal log
  • 2023-05-09
    Anomali pivoted to security analytics platform positioning
  • 2024-09-18
    Executive team changes; brand momentum reset
Vendor Trust is scored independently of product quality. A great product from an unfair vendor still earns a low trust score.
Review Intelligence

What 180 reviews actually say

Synthesized from G2, Capterra, Reddit, Trustpilot. Patterns >15% prevalence shown.

Last synthesized
2026-04-29

Praise patterns

  • Mature TIP for feed aggregation and curation
    78% →
  • Match correlates IOCs against historic logs
    64% →
  • Strong STIX/TAXII and ISAC integrations
    51% →
  • Reasonable mid-market pricing
    47% →

Complaint patterns

  • Brand momentum slowed vs Recorded Future
    51% ↑
  • Less proprietary intel than competitors
    47% →
  • UI feels older than next-gen platforms
    41% →
  • Customer success quality variable
    38% →
Sentiment trend (6 months)
77/100 +1 pts
12
01
02
03
04
05
Patterns are extracted from review corpus and human-verified. We surface trends, not anecdotes.
Verified Pricing

What buyers actually pay

41 anonymized deal disclosures · last updated 2026-05-01

Contribute your deal price
Company size Median annual
500-2,000 employees $78,000
2,000-10,000 employees $192,000
Verified pricing is crowdsourced from buyers under anonymity guarantees. Vendor-listed prices are validated against actual deals quarterly.
Compliance & Security

Auto-verified certifications

Verified 2026-05-01
SOC 2 Type II
ISO 27001
HIPAA
GDPR
CCPA
PCI DSS
◐ FedRAMP In-Process

Editorial: Strengths

  • Mature TIP (ThreatStream) for feed ingestion and curation
  • Match correlates IOCs against historic SIEM log data
  • Strong STIX/TAXII support and ISAC integrations
  • Reasonable mid-market pricing relative to Recorded Future
  • Lens browser extension for analyst pivots
  • Customizable analyst workflow

Editorial: Weaknesses

  • Brand momentum has slowed against Recorded Future and ZeroFox
  • Less proprietary intel than Recorded Future Insikt Group
  • UI feels older than next-gen analyst platforms
  • Pricing opaque on higher tiers
  • Customer success quality reported as variable

Key features & integrations

  • +ThreatStream TIP
  • +Match historic IOC correlation
  • +Lens browser extension
  • +STIX/TAXII import and export
  • +ISAC integrations (FS-ISAC, H-ISAC, A-ISAC)
  • +Analyst workflow and case management
  • +Threat bulletins and curated feeds
  • +API for custom enrichment
  • +Anomali Insights analyst portal
  • +SOAR-friendly IOC publishing
150+ integrations
SplunkMicrosoft SentinelIBM QRadarPalo Alto Cortex XSOARCrowdStrike FalconServiceNowFS-ISAC
Geography supported
Global
Best fit
500-25,000+ employees · CTI teams running multi-feed TIP workflows
Editorial deep-dive

Read our full ranking of Threat Intelligence Software

Anomali ranks #5 in our editorial review of 10 threat intelligence software platforms. The deep-dive covers methodology, comparison tables, decision matrix, migration scoring, and FAQs.

Read the full ranking

Closest alternatives in Threat Intelligence Software

#4
CrowdStrike Falcon Intelligence
Native intel for Falcon EDR customers.
★ 4.6 partial
#6
ThreatConnect
TIP plus cyber-risk quantification in one platform.
★ 4.3 opaque
#3
Flashpoint
Dark-web and underground forum intelligence specialist.
★ 4.4 opaque
Help the next buyer

Contribute your verified deal price

Pricing in B2B software is opaque because vendors want it that way. Verified buyer prices fix that, anonymously. Share what you actually paid for Anomali; we’ll add it to the verified pricing dataset on this page (with company size band only, no identifying details).

Submit anonymously