Packages & Pricing
Yearly commitment
Plans available for teams of every size
Community | Gold | Platinum | |
|---|---|---|---|
QUOTAS | |||
| Number of users?We charge for active user with write permissions. Read-only users are free of charge | 2 | pay per user | pay per user |
| Number of organizations?Number of active organizations. | 1 | Up to 5 | pay per org. |
| Multi Tenancy?Possibility to create more than one organization. |  |  | |
| Cortex Servers?Number of Cortex servers you can integrate with your TheHive instance. | 1 | Up to 5 | Unlimited |
| MISP Servers?Number of MISP servers you can integrate with your TheHive instance. | 1 | Up to 5 | Unlimited |
FEATURES | |||
| Define Custom views?Create and save user defined list views as bookmarks. | | | |
| Custom Knowledge Base?Create an organization Wiki available for all users (resources, procedures, documentation...). | | | |
| White labeling?Customize the product logo, name, and icon. | | | |
CASE MANAGEMENT | |||
| Case Attachments | | | |
| Case Similar Alerts?Identify Alerts similar to a given Case based on common IOCs. | | | |
| Case Pages | | | |
| Case Comments | | | |
| Case from MISP File | | | |
| Case Timeline?Display a Case timeline including all events, tasks, TTPs and IOCs. | | | |
| Case Export/Import?Export Cases as an importable password protected archive. | | | |
| Custom Case Lifecycle?Define custom Case statuses. | | | |
ALERT MANAGEMENT | |||
| Alert Comments | | | |
| Alert Similar Alerts?Identify Alerts similar to a given Alert based on common IOCs. | | | |
| Alert TTPs | | | |
| Alert Observable Analysis?Analyze Alert Observables using the available Cortex services. | | | |
| Custom Alert Lifecycle?Define custom Alert statuses. | | | |
USER MANAGEMENT | |||
| User Enrollment?Send emails to reset users passwords or redefine forgotten passwords. | | | |
| Unified User Management?Advanced and global view for user management. | | | |
| Custom User Profiles?Define custom user profiles using the existing RBAC permissions. | | | |
| LDAP/AD Users Synchronization?Configure one or many LDAP servers TheHive can use to synchronize its list of users. | | | |
INTEGRATIONS | |||
| Sync MISP TTPs | | | |
| MITRE ATT&CK TTP catalogs | | | |
NOTIFICATIONS & ACTIONS | |||
| Webhooks?Send raw TheHive audit log events to simple Webhooks. | | | |
| Email Notifications?Send and customize TheHive events to a mailbox or to TheHive users. | | | |
| Cortex Automatic Actions?Define rules to automatically run Cortex responders on TheHive events. | | | |
| Custom HTTP Request?Call custom HTTP requests on TheHive events. | | | |
| Slack, Mattermost, Kafka?Send Slack or Mattermost messages or Send TheHive events to a Kafka bus. | | | |
SECURITY & COMPLIANCE | |||
| Two Factor Authentication?Users can enable 2FA using Authenticator apps (MS, Google, Authy...) for a better security. | | | |
| Local Authentication?Users can be defined in TheHive's local database. It's possible to configure a password policy. | | | |
| LDAP Authentication?User authentication can be made thourgh a LDAP server. | | | |
| AD Authentication?User authentication can be made thourgh an Active Directory. | | | |
| OAuth 2 (SSO)?User authentication can be made thourgh Okta, OpenID Connect, MS365 or any OAuth 2 provider. | | | |
| Custom HTTP Header Authentication?User authentication can be made using a custom HTTP Header. | | | |
| GDPR Compliance?Delete or protect your data older than a customizable period. | | | |
SUPPORT | |||
| Support Coverage?StrangeBee support team availability per license plan. | Community | Business hours (EU) | Business hours (EU) |
| Support Channels?StrangeBee support channels per license plan. | Community | +Chat +Video | |
| Response Time?StrangeBee support response time per license plan. | Community | 2 Bus. Days | 1 Bus. Day |
| Priority Handling of Bugs | | | |
| Priority Handling of Features Requests | | | |
| Operational Process & Workflow Consulting | Community | Option Available | Option Available |
| Integration Development Consulting | Community | Option Available | Option Available |
QUOTAS | |
| Number of users?We charge for active user with write permissions. Read-only users are free of charge | |
| Number of organizations?Number of active organizations. | |
| Multi Tenancy?Possibility to create more than one organization. | |
| Cortex Servers?Number of Cortex servers you can integrate with your TheHive instance. | |
| MISP Servers?Number of MISP servers you can integrate with your TheHive instance. | |
FEATURES | |
| Define Custom views?Create and save user defined list views as bookmarks. | |
| Custom Knowledge Base?Create an organization Wiki available for all users (resources, procedures, documentation...). | |
| White labeling?Customize the product logo, name, and icon. | |
CASE MANAGEMENT | |
| Case Attachments | |
| Case Similar Alerts?Identify Alerts similar to a given Case based on common IOCs. | |
| Case Pages | |
| Case Comments | |
| Case from MISP File | |
| Case Timeline?Display a Case timeline including all events, tasks, TTPs and IOCs. | |
| Case Export/Import?Export Cases as an importable password protected archive. | |
| Custom Case Lifecycle?Define custom Case statuses. | |
ALERT MANAGEMENT | |
| Alert Comments | |
| Alert Similar Alerts?Identify Alerts similar to a given Alert based on common IOCs. | |
| Alert TTPs | |
| Alert Observable Analysis?Analyze Alert Observables using the available Cortex services. | |
| Custom Alert Lifecycle?Define custom Alert statuses. | |
USER MANAGEMENT | |
| User Enrollment?Send emails to reset users passwords or redefine forgotten passwords. | |
| Unified User Management?Advanced and global view for user management. | |
| Custom User Profiles?Define custom user profiles using the existing RBAC permissions. | |
| LDAP/AD Users Synchronization?Configure one or many LDAP servers TheHive can use to synchronize its list of users. | |
INTEGRATIONS | |
| Sync MISP TTPs | |
| MITRE ATT&CK TTP catalogs | |
NOTIFICATIONS & ACTIONS | |
| Webhooks?Send raw TheHive audit log events to simple Webhooks. | |
| Email Notifications?Send and customize TheHive events to a mailbox or to TheHive users. | |
| Cortex Automatic Actions?Define rules to automatically run Cortex responders on TheHive events. | |
| Custom HTTP Request?Call custom HTTP requests on TheHive events. | |
| Slack, Mattermost, Kafka?Send Slack or Mattermost messages or Send TheHive events to a Kafka bus. | |
SECURITY & COMPLIANCE | |
| Two Factor Authentication?Users can enable 2FA using Authenticator apps (MS, Google, Authy...) for a better security. | |
| Local Authentication?Users can be defined in TheHive's local database. It's possible to configure a password policy. | |
| LDAP Authentication?User authentication can be made thourgh a LDAP server. | |
| AD Authentication?User authentication can be made thourgh an Active Directory. | |
| OAuth 2 (SSO)?User authentication can be made thourgh Okta, OpenID Connect, MS365 or any OAuth 2 provider. | |
| Custom HTTP Header Authentication?User authentication can be made using a custom HTTP Header. | |
| GDPR Compliance?Delete or protect your data older than a customizable period. | |
SUPPORT | |
| Support Coverage?StrangeBee support team availability per license plan. | |
| Support Channels?StrangeBee support channels per license plan. | |
| Response Time?StrangeBee support response time per license plan. | |
| Priority Handling of Bugs | |
| Priority Handling of Features Requests | |
| Operational Process & Workflow Consulting | |
| Integration Development Consulting |