Solutions

Packages & Pricing

Yearly commitment

Plans available for teams of every size

Community

Gold

Platinum

QUOTAS

Number of users?We charge for active user with write permissions. Read-only users are free of charge2pay per userpay per user
Number of organizations?Number of active organizations.1Up to 5pay per org.
Multi Tenancy?Possibility to create more than one organization.includedincludedincluded
Cortex Servers?Number of Cortex servers you can integrate with your TheHive instance.1Up to 5Unlimited
MISP Servers?Number of MISP servers you can integrate with your TheHive instance.1Up to 5Unlimited

FEATURES

Define Custom views?Create and save user defined list views as bookmarks.includedincludedincluded
Custom Knowledge Base?Create an organization Wiki available for all users (resources, procedures, documentation...).includedincludedincluded
White labeling?Customize the product logo, name, and icon.includedincludedincluded

CASE MANAGEMENT

Case Attachmentsincludedincludedincluded
Case Similar Alerts?Identify Alerts similar to a given Case based on common IOCs.includedincludedincluded
Case Pagesincludedincludedincluded
Case Commentsincludedincludedincluded
Case from MISP Fileincludedincludedincluded
Case Timeline?Display a Case timeline including all events, tasks, TTPs and IOCs.includedincludedincluded
Case Export/Import?Export Cases as an importable password protected archive.includedincludedincluded
Custom Case Lifecycle?Define custom Case statuses.includedincludedincluded

ALERT MANAGEMENT

Alert Commentsincludedincludedincluded
Alert Similar Alerts?Identify Alerts similar to a given Alert based on common IOCs.includedincludedincluded
Alert TTPsincludedincludedincluded
Alert Observable Analysis?Analyze Alert Observables using the available Cortex services.includedincludedincluded
Custom Alert Lifecycle?Define custom Alert statuses.includedincludedincluded

USER MANAGEMENT

User Enrollment?Send emails to reset users passwords or redefine forgotten passwords.includedincludedincluded
Unified User Management?Advanced and global view for user management.includedincludedincluded
Custom User Profiles?Define custom user profiles using the existing RBAC permissions.includedincludedincluded
LDAP/AD Users Synchronization?Configure one or many LDAP servers TheHive can use to synchronize its list of users.includedincludedincluded

INTEGRATIONS

Sync MISP TTPsincludedincludedincluded
MITRE ATT&CK TTP catalogsincludedincludedincluded

NOTIFICATIONS & ACTIONS

Webhooks?Send raw TheHive audit log events to simple Webhooks.includedincludedincluded
Email Notifications?Send and customize TheHive events to a mailbox or to TheHive users.includedincludedincluded
Cortex Automatic Actions?Define rules to automatically run Cortex responders on TheHive events.includedincludedincluded
Custom HTTP Request?Call custom HTTP requests on TheHive events.includedincludedincluded
Slack, Mattermost, Kafka?Send Slack or Mattermost messages or Send TheHive events to a Kafka bus.includedincludedincluded

SECURITY & COMPLIANCE

Two Factor Authentication?Users can enable 2FA using Authenticator apps (MS, Google, Authy...) for a better security.includedincludedincluded
Local Authentication?Users can be defined in TheHive's local database. It's possible to configure a password policy.includedincludedincluded
LDAP Authentication?User authentication can be made thourgh a LDAP server.includedincludedincluded
AD Authentication?User authentication can be made thourgh an Active Directory.includedincludedincluded
OAuth 2 (SSO)?User authentication can be made thourgh Okta, OpenID Connect, MS365 or any OAuth 2 provider.includedincludedincluded
Custom HTTP Header Authentication?User authentication can be made using a custom HTTP Header.includedincludedincluded
GDPR Compliance?Delete or protect your data older than a customizable period.includedincludedincluded

SUPPORT

Support Coverage?StrangeBee support team availability per license plan.CommunityBusiness hours (EU)Business hours (EU)
Support Channels?StrangeBee support channels per license plan.Community+Email+Chat +Video
Response Time?StrangeBee support response time per license plan.Community2 Bus. Days1 Bus. Day
Priority Handling of Bugsincludedincludedincluded
Priority Handling of Features Requestsincludedincludedincluded
Operational Process & Workflow ConsultingCommunityOption AvailableOption Available
Integration Development ConsultingCommunityOption AvailableOption Available

QUOTAS

Number of users?We charge for active user with write permissions. Read-only users are free of charge
Number of organizations?Number of active organizations.
Multi Tenancy?Possibility to create more than one organization.
Cortex Servers?Number of Cortex servers you can integrate with your TheHive instance.
MISP Servers?Number of MISP servers you can integrate with your TheHive instance.

FEATURES

Define Custom views?Create and save user defined list views as bookmarks.
Custom Knowledge Base?Create an organization Wiki available for all users (resources, procedures, documentation...).
White labeling?Customize the product logo, name, and icon.

CASE MANAGEMENT

Case Attachments
Case Similar Alerts?Identify Alerts similar to a given Case based on common IOCs.
Case Pages
Case Comments
Case from MISP File
Case Timeline?Display a Case timeline including all events, tasks, TTPs and IOCs.
Case Export/Import?Export Cases as an importable password protected archive.
Custom Case Lifecycle?Define custom Case statuses.

ALERT MANAGEMENT

Alert Comments
Alert Similar Alerts?Identify Alerts similar to a given Alert based on common IOCs.
Alert TTPs
Alert Observable Analysis?Analyze Alert Observables using the available Cortex services.
Custom Alert Lifecycle?Define custom Alert statuses.

USER MANAGEMENT

User Enrollment?Send emails to reset users passwords or redefine forgotten passwords.
Unified User Management?Advanced and global view for user management.
Custom User Profiles?Define custom user profiles using the existing RBAC permissions.
LDAP/AD Users Synchronization?Configure one or many LDAP servers TheHive can use to synchronize its list of users.

INTEGRATIONS

Sync MISP TTPs
MITRE ATT&CK TTP catalogs

NOTIFICATIONS & ACTIONS

Webhooks?Send raw TheHive audit log events to simple Webhooks.
Email Notifications?Send and customize TheHive events to a mailbox or to TheHive users.
Cortex Automatic Actions?Define rules to automatically run Cortex responders on TheHive events.
Custom HTTP Request?Call custom HTTP requests on TheHive events.
Slack, Mattermost, Kafka?Send Slack or Mattermost messages or Send TheHive events to a Kafka bus.

SECURITY & COMPLIANCE

Two Factor Authentication?Users can enable 2FA using Authenticator apps (MS, Google, Authy...) for a better security.
Local Authentication?Users can be defined in TheHive's local database. It's possible to configure a password policy.
LDAP Authentication?User authentication can be made thourgh a LDAP server.
AD Authentication?User authentication can be made thourgh an Active Directory.
OAuth 2 (SSO)?User authentication can be made thourgh Okta, OpenID Connect, MS365 or any OAuth 2 provider.
Custom HTTP Header Authentication?User authentication can be made using a custom HTTP Header.
GDPR Compliance?Delete or protect your data older than a customizable period.

SUPPORT

Support Coverage?StrangeBee support team availability per license plan.
Support Channels?StrangeBee support channels per license plan.
Response Time?StrangeBee support response time per license plan.
Priority Handling of Bugs
Priority Handling of Features Requests
Operational Process & Workflow Consulting
Integration Development Consulting

What is a 'user' for the License ?

Can I start with the free version and upgrade to a paid plan later ?

Can we pay on a monthly basis ?

What payment options do you accept?

Is it possible to upgrade my offer during my subscription?

Is it possible to downgrade my offer during my subscription?