Sold by: StrangeBee
A security case management platform trusted by 3500+ users in 50+ countries to centralize and speed up alert handling, collaboration, investigations and incident response.
4.3
Overview
Cybersecurity teams today are under constant pressure: threats evolve, alerts keep coming, investigations pile up, and coordination between analysts isn't always clear. TheHive is built to change that.
TheHive is a dedicated collaborative security case management platform designed for SOCs, CSIRTs, CERTs and MSSPs. It is a single pane of glass that helps analysts reduce alert fatigue, spend less time switching between tools and resolve incidents faster together, in a structured way and with full traceability.
-
Centralize alerts from multiple sources into a single view for faster triage and consistent management
-
Manage cases end-to-end: create and assign tasks, collect evidence and track incident timelines
-
Support multiple organizations with multi-tenancy and precise access control via customizable roles and LDAP/AD synchronization
-
Keep teams informed automatically via webhooks, email, Slack, Mattermost or custom HTTP requests
-
Track performance with dynamic dashboards and actionable KPIs; create detailed incident reports using customizable templates
-
Connect with over 300 security tools: SIEMs, EDRs, threat intelligence platforms, ticketing systems and more
-
Share threat intelligence natively with MISP and map techniques to MITRE ATT&CK for more context
-
Automate analysis and response actions through tight integration with the native Cortex engine
-
Deploy the way you need: on-premises, SaaS on AWS or IaaS images on AWS and Azure
-
Available in multiple languages to support distributed, global teams
Whether you're running a lean in-house SOC or managing security operations across multiple clients, TheHive adapts to your scale. Its flexible architecture, broad integration ecosystem and straightforward interface mean teams get up to speed quickly and stay effective under pressure. Audit-ready case records support compliance requirements out of the box, and when you need help, a strong user community and responsive support team have you covered.
Highlights
- Centralized alert management and end-to-end case handling cut through the noise, helping SOC, CSIRT, CERT and MSSP teams respond to incidents faster
- Over 300 integrations with SIEMs, EDRs, threat intelligence platforms and ticketing systems fit into the workflows your team already relies on
- Flexible deployment (on-premises, SaaS or IaaS) gives you the freedom to choose what fits your organization's operational needs and growth trajectory
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
TheHive Gold | Gold license, with standard use included (on premises) - based on number of users and organization. | $25,620.00 |
TheHive Platinium | Platinium license, with standard use included (on premises) - based on number of users and organization. | $33,540.00 |
TheHive Cloud Platform Large | THCP Large license, with standard use included (Saas) - based on number of users and organization. | $52,440.00 |
TheHive Cloud Platform X-Large | THCP X-Large license, with standard use included (Saas) - based on number of users and organization. | $58,530.00 |
TheHive Platinium IAAS | Platinium license, with standard use included (IAAS) - based on number of users and organization. | $33,540.00 |
Dimensions summary
You buy TheHive as an annual contract license, priced by the number of users and organizations you need. The five options split across three deployment styles. TheHive Gold and TheHive Platinium cover on-premises use, where you run the software in your own infrastructure. TheHive Cloud Platform Large and X-Large cover the fully managed SaaS version, sized by scale. TheHive Platinium IAAS covers self-managed deployment on cloud infrastructure. All options include standard use. Your price rises as your user count and organization count grow.
Top-of-mind questions for buyers
A user is any person who needs access to TheHive's interface. A team of 10 people needs 10 user licenses. Users with read-only profiles and unlicensed permissions are free and do not count toward your licensed user total.
An organization is a dedicated workspace that isolates a team's alerts, cases, users, and configuration from others. Your price is based on both user count and the number of separate organizations or teams you support, so adding organizations raises your cost.
TheHive Cloud Platform Large and X-Large are fully managed SaaS. StrangeBee handles deployment, maintenance, and operations in a dedicated environment. TheHive Platinium IAAS uses pre-built images you deploy and manage in your own cloud infrastructure, so you control the infrastructure yourself.
strangebee.com+3
Helpful?
Vendor refund policy
Please contact us at support@strangebee.com .
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
For support with TheHive Collaborative Security Platform, please contact us at support@strangebee.com or visit https://strangebee.com/contact-strangebee/ .
Support is available during business hours.
Buyers can expect help via email or through our website for general inquiries, troubleshooting, and product guidance.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
A 4-in-1 Security Incident Response Platform
Hive Platform is an all-in-one service that provides everything you need to develop and operate games. Experience the know-how of global game services experienced in more than 180+ countries with one Hive Platform.
Powerful observable analysis and active response engine
This is a repackaged open source software product wherein additional charges apply for a pre-hardened AMI with automated startup. Docker-based security incident response platform with REST API and RBAC
Customer reviews
Sam F.
Incident Response Platform: TheHive
Reviewed on May 29, 2024
Review provided by G2
What do you like best about the product?
The platform plays a critical role in our incident response. It integrates with and automates many of our processes for our analysts, helping to decrease our response times.
The platform is easy to set up, maintain, and use. There is also an active Discord community for sharing information and asking questions.
The platform is easy to set up, maintain, and use. There is also an active Discord community for sharing information and asking questions.
What do you dislike about the product?
None. We've fed back any problems we've had, which've all been taken onboard and resolved.
What problems is the product solving and how is that benefiting you?
The platform helps us automate our incident response processes and stores and correlates much of our data.
Rohan G.
Opensource Case Management: TheHive
Reviewed on Jun 23, 2023
Review provided by G2
What do you like best about the product?
TheHive is an open source which helps us to create & merge cases in which you are working.
You can integrate TheHive with Cortex & Wazuh, which maintains a better security posture.
For integration purposes, you need the API key of hive, which help us to integrate it with another software.
Also you can create different dashboards to visualise the cases & alerts coming from SIEM tool.
You can integrate TheHive with Cortex & Wazuh, which maintains a better security posture.
For integration purposes, you need the API key of hive, which help us to integrate it with another software.
Also you can create different dashboards to visualise the cases & alerts coming from SIEM tool.
What do you dislike about the product?
TheHive5 is not an opensource it is a paid tool you have to paid to use it.
Also there are different opensource tool like IRIS which can be considered as competitor for TheHive.
Also there are different opensource tool like IRIS which can be considered as competitor for TheHive.
What problems is the product solving and how is that benefiting you?
TheHive helps us to solve the problem of tracking down the incident and also you can assign the tasks to your teammates & track down the case.
Also if your investigation is over, you can close this case with proper justification.
You can also integrate tool with different SIEM, Threat Intel tool etc.
Also if your investigation is over, you can close this case with proper justification.
You can also integrate tool with different SIEM, Threat Intel tool etc.
Satykam A.
Best Open Source Case management
Reviewed on Jun 03, 2022
Review provided by G2
What do you like best about the product?
Best part of TheHive is its integration with multiple threat intelligence tools like Cortex and MISP
What do you dislike about the product?
some of the module not working properly, rest all is fine
What problems is the product solving and how is that benefiting you?
Best for SOC team for incident response and case management
Yash P.
Thehive Overview
Reviewed on Dec 08, 2021
Review provided by G2
What do you like best about the product?
Easy to use and Configure. Various Integration with various threat intel tools.
What do you dislike about the product?
Sometimes it's the cortex module's analyzers not working properly.
What problems is the product solving and how is that benefiting you?
Using TheHive we get all alerts from our SIEM tool to thehive and easily manage. Immense benefits.
Computer & Network Security
Case Management
Reviewed on Dec 08, 2021
Review provided by G2
What do you like best about the product?
integration with cortex (threat intelligence) and misp (threat exchange)
What do you dislike about the product?
Looks fine nothing missing into it.
Product looks promising
Product looks promising
What problems is the product solving and how is that benefiting you?
Incident Response and Incident Handling is performed and managed very nicely.