IntelStitch Logo

Options for all workflows

All plans include unlimited integrations, unlimited nodes, and unlimited users.

  • Research

  • 100 indicators
  • /day
  • On-Premise Only
  • Unlimited feeds
  • Unlimited integrations
  • Unlimited users
  • ThreatExchange membership
  • Community support
  • Essential

  • 2,000 indicators
  • /day
  • Hybrid
  • Unlimited feeds
  • Unlimited integrations
  • Unlimited users
  • ThreatExchange membership
  • Email + phone support
  • Professional

  • 5,000 indicators
  • /day
  • Hybrid
  • Unlimited feeds
  • Unlimited integrations
  • Unlimited users
  • ThreatExchange membership
  • Email + phone support
  • Enterprise

  • 20,000 indicators
  • /day
  • MOST POPULAR
  • Hybrid
  • Unlimited feeds
  • Unlimited integrations
  • Unlimited users
  • ThreatExchange membership
  • Email + phone support

Pricing FAQ

What is an indicator?
An indicator is piece of intelligence and its associated meta-data. For example, a malicious IP address with geo-location data is counted as a single indicator.
What does Hybrid mean?
IntelStitch can be used as SaaS deployment (managed by us) and an on-premise deployment (hosted in your environment). Hybrid deployments are a mix of the two. Hybrid deployments are designed for organisations where security tools are running in environments that cannot directly connect to the internet to collect intelligence.
What is community support?
IntelStitch Answers is our user question and answer forum that provides community support.
What is the ThreatExchange?
The IntelStitch Cyber Threat Exchange allows groups of similar organisations to find and share intelligence with their industry peers.
What if we estimate more than 20,000 indicators per day?
We offer larger plans that scale with your organisation. Contact our sales team directly to talk through our high-volume plans at [email protected].
Still have a question?
Contact our sales team for any further questions at [email protected].