Community Edition

Threat intelligence and analysis for everyone.

Free threat intelligence and analysis for everyone. Search indicators, analyze suspicious files, explore threat campaigns, visualize relationships, and investigate threats through a unified intelligence portal.

Free to use. No deployment required.

What you can do

A unified intelligence portal, free to use.

Investigate Indicators

Search and analyze:

  • IP addresses
  • Domains
  • URLs
  • File hashes
  • Email addresses
  • Threat actors

Gain immediate context around reputation, relationships, and observed activity.

Analyze Suspicious Files

Upload files for analysis and review:

  • Malware behavior
  • Extracted indicators
  • Network activity
  • MITRE ATT&CK mapping
  • Risk assessment

Understand suspicious artifacts before they reach production environments.

Explore Threat Campaigns

Track active campaigns and emerging threats — understand:

  • Threat actors
  • Infrastructure relationships
  • Malware families
  • Campaign evolution
  • Associated indicators

Stay ahead of adversary activity as campaigns evolve over time.

Visualize Relationships

Use Threat Graph to uncover connections between:

  • Indicators
  • Infrastructure
  • Malware
  • Threat actors
  • Campaigns

Move beyond isolated indicators and understand the bigger picture.

AI-Augmented Analysis

Leverage CLARA to assist with:

  • IOC analysis
  • Threat intelligence interpretation
  • MITRE ATT&CK mapping
  • Investigation summaries
  • Threat actor research

CLARA helps practitioners investigate faster while keeping the evidence in focus.

Community intelligence

Contribute to collective defense.

ThreatLens Community enables researchers, analysts, and defenders to collaborate through shared intelligence and collective visibility into emerging threats. By contributing intelligence and observations, users help improve threat understanding across the community.

Community vs Enterprise

Start free. Scale when you need to.

The same investigation DNA — Enterprise adds scale, collaboration, deployment flexibility, and support.

CapabilityCommunityEnterprise
IOC Search
Threat Intelligence Access
File Analysis
Threat Graph
CLARA IntelligenceBasicAdvanced
Investigation WorkspaceLimitedFull
Multi-Source CorrelationLimitedFull
Case Management
Integrations
Enterprise Support
Private Cloud
On-Prem Deployment
Who is it for?

Built for the whole security community.

Security Analysts

Investigate indicators and suspicious activity.

Threat Researchers

Track campaigns and adversary infrastructure.

Students & Learners

Learn modern threat investigation techniques.

Small Security Teams

Gain threat intelligence and analysis capabilities without enterprise infrastructure.

Incident Responders

Rapidly assess indicators and suspicious files during investigations.

Upgrade

Upgrade to ThreatLens Platform

Need investigation workflows, enterprise integrations, response guidance, and deployment flexibility?

ThreatLens Platform extends Community capabilities with a complete investigation and response platform for modern security operations.

The bigger picture

Part of the ThreatLens Ecosystem.

One company, one mission — investigation-grade truth and governed security across your stack and your AI.

Get started

Start investigating today.

Free to use. No deployment required. Jump straight into threat intelligence and analysis.

Start Investigating Explore the platform