Trusted by 5,000+ SOC, CERT, CSIRT and MSSP analysts in 50+ countries
SaaS
TheHive Cloud Platform
Get the full TheHive experience in your private and secure AWS space, with maintenance provided by StrangeBee.
ABOUT THEHIVE CLOUD PLATFORM
Why TheHive Cloud Platform might
be perfect for SOCCERTCSIRTMSSP teams
A private, secure and customizable incident response environment,
maintained by the team that built TheHive.
maintained by the team that built TheHive.
Full TheHive, delivered as SaaS
TheHive Cloud Platform gives you the complete TheHive feature set (alert and case management, native orchestration, Cortex enrichment and response) running as a fully managed SaaS instance, with every new version deployed by StrangeBee as soon as it ships.
Your own
environment on AWS
Your instance runs in a dedicated, hardened AWS environment (not shared infrastructure). Data is encrypted at rest, including backups, and processed exclusively within your environment, with the access and security controls your organization requires.
Run by the team that built TheHive
Let your team focus on incident response rather than operations. TheHive Cloud Platform is operated end-to-end by StrangeBee: monitoring, updates, backups and infrastructure maintenance included. We also migrate your existing data and adapt the platform to your current stack.
Secure and
independently verified
Your environment is secured to a standard you don't have to take on faith. TheHive Cloud Platform is SOC 2 Type 2 compliant: the privacy and security controls protecting your data are regularly verified by an independent auditor.
5,000+ analysts worldwide are using TheHive.
Let us show you how you could, too.
Let us show you how you could, too.
deployment options
Deploy TheHive your way
Choose the option that fits your team’s security, infrastructure and operational requirements.
On-prem
IaaS
SaaS
Initial deployment
Install, configure and harden the OS, TheHive, Cortex and requirements
Updates & maintenance
Keep the OS, applications and dependencies updated
Infrastructure operations
Monitoring, backup, restore, security hardening, log management and more
WANT TO KNOW MORE?
Frequently asked questions
about TheHive Cloud Platform
What is TheHive Cloud Platform?
TheHive Cloud Platform is the fully managed SaaS version of TheHive—the Cybersecurity Incident Response Management platform specifically built for SOC, CSIRT, CERT and MSSP teams. It combines TheHive Platinum Edition and Cortex in a dedicated, hardened AWS environment, operated by StrangeBee.
What TheHive features are available on TheHive Cloud Platform?
TheHive Cloud Platform is based on the Platinum edition of TheHive—the most advanced tier, with full access to all features, including multi-tenancy, advanced user management, custom analyzers and responders and more.
What is the difference between TheHive Cloud Platform and TheHive Cloud Images?
TheHive Cloud Platform is a fully managed SaaS solution: StrangeBee handles all deployment, maintenance and operations. TheHive Cloud Images are pre-built IaaS images you deploy and manage in your own AWS or Azure environment. Cloud Images require a separate license (BYOL—Bring Your Own License) to activate your TheHive instance.
Is TheHive Cloud Platform suitable for enterprise security teams?
Yes. TheHive Cloud Platform is built for enterprise-scale incident response: it supports multi-tenancy, SSO, LDAP/AD synchronization, custom roles and permissions, data residency controls and direct access to expert support from the StrangeBee team.
Where will my data be hosted?
TheHive Cloud Platform is hosted on AWS across multiple regions in Europe, the USA and APAC. All data is stored and processed exclusively in your dedicated environment, with encryption at rest for both live and backup versions.
Join 5,000+ users worldwide
SOC, CSIRT, CERT and MSSP teams across 50+ countries rely on TheHive to centralize, structure and automate their incident response.