Packages & Pricing. Yearly commitment Priced for organizations of all sizes.
Features by service level
Community
Gold
Platinum
QUOTAS
Number of users?We charge for active user with write permissions. Read-only users are free of charge
2pay per userpay per userNumber of organizations?Number of active organizations.
1pay per org (up to 5)pay per org.Multi Tenancy?Possibility to create more than one organization.
Cortex Servers?Number of Cortex servers you can integrate with your TheHive instance.
1Up to 5UnlimitedMISP Servers?Number of MISP servers you can integrate with your TheHive instance.
1Up to 5UnlimitedFEATURES
Define Custom views?Create and save user defined list views as bookmarks.
Custom Knowledge Base?Create an organization Wiki available for all users (resources, procedures, documentation...).
White labeling?Customize the product logo, name, and icon.
Clustering support?Capabilities to deploy a multi-nodes architecture, for HA or Kubernetes deployment
CASE MANAGEMENT
Case Attachments
Case Similar Alerts?Identify Alerts similar to a given Case based on common IOCs.
Case Pages
Case Comments
Case from MISP File
Case Timeline?Display a Case timeline including all events, tasks, TTPs and IOCs.
Case Export/Import?Export Cases as an importable password protected archive.
Custom Case Lifecycle?Define custom Case statuses.
Case Reporting?Define custom case report templates and use them to generate investigation reports in HTML or Markdown formats.
ALERT MANAGEMENT
Alert Comments
Alert Similar Alerts?Identify Alerts similar to a given Alert based on common IOCs.
Alert TTPs
Alert Observable Analysis?Analyze Alert Observables using the available Cortex services.
Custom Alert Lifecycle?Define custom Alert statuses.
USER MANAGEMENT
User Enrollment?Send emails to reset users passwords or redefine forgotten passwords.
Unified User Management?Advanced and global view for user management.
Custom User Profiles?Define custom user profiles using the existing RBAC permissions.
LDAP/AD Users Synchronization?Configure one or many LDAP servers TheHive can use to synchronize its list of users.
INTEGRATION
Sync MISP TTPs
MITRE ATT&CK TTP catalogs
AUTOMATION
Webhooks?Send raw TheHive audit log events to simple Webhooks.
Email Notifications?Send and customize TheHive events to a mailbox or to TheHive users.
Cortex Automatic Actions?Define rules to automatically run Cortex responders on TheHive events.
Custom HTTP Request?Call custom HTTP requests on TheHive events.
Slack, Mattermost, Kafka?Send Slack or Mattermost messages or Send TheHive events to a Kafka bus.
Custom Functions?Create custom ingestion endpoints to push data to TheHive from a detection or automation platform
SECURITY & COMPLIANCE
Two Factor Authentication?Users can enable 2FA using Authenticator apps (MS, Google, Authy...) for a better security.
Local Authentication?Users can be defined in TheHive's local database. It's possible to configure a password policy.
LDAP Authentication?User authentication can be made thourgh a LDAP server.
AD Authentication?User authentication can be made thourgh an Active Directory.
OAuth 2 (SSO)?User authentication can be made thourgh Okta, OpenID Connect, MS365 or any OAuth 2 provider.
SAML 2.0?User authentication can be made through a SAML v2.0 provider.
Custom HTTP Header Authentication?User authentication can be made using a custom HTTP Header.
GDPR Compliance?Delete or protect your data older than a customizable period.
SUPPORT
Support Coverage?StrangeBee support team availability per license plan.
CommunityBusiness hours (EU)Business hours (EU)Support Channels?StrangeBee support channels per license plan.
Community+Email+Chat +VideoResponse Time?StrangeBee support response time per license plan.
Community2 Bus. Days1 Bus. DayPriority Handling of Bugs
Priority Handling of Features Requests
Operational Process & Workflow Consulting
CommunityOption AvailableOption AvailableIntegration Development Consulting
CommunityOption AvailableOption Available
QUOTAS
Number of users?We charge for active user with write permissions. Read-only users are free of charge
Number of organizations?Number of active organizations.
Multi Tenancy?Possibility to create more than one organization.
Cortex Servers?Number of Cortex servers you can integrate with your TheHive instance.
MISP Servers?Number of MISP servers you can integrate with your TheHive instance.
FEATURES
Define Custom views?Create and save user defined list views as bookmarks.
Custom Knowledge Base?Create an organization Wiki available for all users (resources, procedures, documentation...).
White labeling?Customize the product logo, name, and icon.
Clustering support?Capabilities to deploy a multi-nodes architecture, for HA or Kubernetes deployment
CASE MANAGEMENT
Case Attachments
Case Similar Alerts?Identify Alerts similar to a given Case based on common IOCs.
Case Pages
Case Comments
Case from MISP File
Case Timeline?Display a Case timeline including all events, tasks, TTPs and IOCs.
Case Export/Import?Export Cases as an importable password protected archive.
Custom Case Lifecycle?Define custom Case statuses.
Case Reporting?Define custom case report templates and use them to generate investigation reports in HTML or Markdown formats.
ALERT MANAGEMENT
Alert Comments
Alert Similar Alerts?Identify Alerts similar to a given Alert based on common IOCs.
Alert TTPs
Alert Observable Analysis?Analyze Alert Observables using the available Cortex services.
Custom Alert Lifecycle?Define custom Alert statuses.
USER MANAGEMENT
User Enrollment?Send emails to reset users passwords or redefine forgotten passwords.
Unified User Management?Advanced and global view for user management.
Custom User Profiles?Define custom user profiles using the existing RBAC permissions.
LDAP/AD Users Synchronization?Configure one or many LDAP servers TheHive can use to synchronize its list of users.
INTEGRATION
Sync MISP TTPs
MITRE ATT&CK TTP catalogs
AUTOMATION
Webhooks?Send raw TheHive audit log events to simple Webhooks.
Email Notifications?Send and customize TheHive events to a mailbox or to TheHive users.
Cortex Automatic Actions?Define rules to automatically run Cortex responders on TheHive events.
Custom HTTP Request?Call custom HTTP requests on TheHive events.
Slack, Mattermost, Kafka?Send Slack or Mattermost messages or Send TheHive events to a Kafka bus.
Custom Functions?Create custom ingestion endpoints to push data to TheHive from a detection or automation platform
SECURITY & COMPLIANCE
Two Factor Authentication?Users can enable 2FA using Authenticator apps (MS, Google, Authy...) for a better security.
Local Authentication?Users can be defined in TheHive's local database. It's possible to configure a password policy.
LDAP Authentication?User authentication can be made thourgh a LDAP server.
AD Authentication?User authentication can be made thourgh an Active Directory.
OAuth 2 (SSO)?User authentication can be made thourgh Okta, OpenID Connect, MS365 or any OAuth 2 provider.
SAML 2.0?User authentication can be made through a SAML v2.0 provider.
Custom HTTP Header Authentication?User authentication can be made using a custom HTTP Header.
GDPR Compliance?Delete or protect your data older than a customizable period.
SUPPORT
Support Coverage?StrangeBee support team availability per license plan.
Support Channels?StrangeBee support channels per license plan.
Response Time?StrangeBee support response time per license plan.
Priority Handling of Bugs
Priority Handling of Features Requests
Operational Process & Workflow Consulting
Integration Development Consulting
What is a 'user' for the License ?
Can I start with the free version and upgrade to a paid plan later ?
Can we pay on a monthly basis ?
What payment options do you accept?
Is it possible to upgrade my offer during my subscription?
Is it possible to downgrade my offer during my subscription?
Beloved by Analysts from Organizations of All Sizes.
