Benchmarking Cyber Threat Intelligence Services: Key Findings

A hands-on benchmark of five cyber threat intelligence services was conducted, evaluating them against 33 criteria across eight categories. The evaluation utilized historical indicators of compromise (IOCs), six threat actors, and four exploited CVEs. Notably, the free AlienVault OTX matched the capabilities of the premium CrowdStrike platform in automation. Each service represents a distinct archetype within threat intelligence, highlighting their unique roles rather than declaring a single winner. CrowdStrike's offerings span multiple subscriptions, covering a wide range of threat intelligence capabilities. The benchmark revealed that marketing claims often misrepresent the actual effectiveness of these services. The results aim to guide organizations in developing layered threat intelligence programs.

Key Points: • AlienVault OTX, a free service, matched CrowdStrike in automation capabilities. • Five distinct threat intelligence services were evaluated, each serving unique roles. • CrowdStrike's offerings span multiple subscriptions, complicating direct comparisons.