Mandiant Advantage Threat Intelligence

Mandiant Advantage Threat Intelligence

Score 8.6 out of 10
Mandiant Advantage Threat Intelligence


What is Mandiant Advantage Threat Intelligence?

Since 2004, Mandiant has been a partner to security-conscious organizations. Mandiant’s approach helps organizations develop more effective and efficient cyber security programs and instills confidence in their readiness to defend against and respond to cyber threats.
Read more

Recent Reviews

Read all reviews

How Mandiant Advantage Threat Intelligence Differs From Its Competitors

Improved Visibility

Mandiant Advantage is a one stop shop for the latest Intel on threats spanning all major industries and geopolitical boundaries. It has greatly improved visibility through the reporting and assessments on the main topics of interest in our industry and beyond.
Continue reading

Threat Actionability

Mandiant Advantage Threat Intelligence provides actionable profiles on malwares, adversaries, vulnerabilities, etc. that most always contain some level of recommendation, behavioral analysis, rating, or mitigation. This allows for proactive defense measures to be put in place or to use said …
Continue reading

Improved Visibility

With the right subscriptions, Mandiant Advantage Threat Intelligence can raise awareness of unknown threats to new heights. In the hands of a capable analyst, the platform allows a user to make logically sound conclusions that can aid a company in securing resources before compromise. Mandiant …
Continue reading

Threat Actionability

Mandiant Advantage Threat Intelligence can provide actionable intelligence at all three levels of intelligence in the right hands and with adequate access. When dealing with specific threats or security events (tactical), Mandiant Advantage Threat Intelligence provides the context needed to expand …
Continue reading

Improved Visibility

Mandiant Advantage Threat Intelligence provides reports on new threats in the sector of interest that are very helpful in preventing and mitigating. And it not only stands out in new threats but also in preparing malicious activity trend reports that help to glimpse what direction the threats may …
Continue reading

Threat Actionability

The information given by Mandiant Advantage Threat Intelligence is very actionable in security since it provides indicators of compromises, tactics, and techniques, among others, that at the security level can be implemented to improve the entity's protection against future threats. In addition, …
Continue reading

Improved Visibility

Mandiant Advantage Threat Intelligence has provided a wealth of information and knowledge on threats previously unknown to the team, as well as specialized analysts on topics that are not as common and require intelligence analysis. With the external support of Mandiant Advantage Threat …
Continue reading

Threat Actionability

One of the great advantages of Mandiant Advantage Threat Intelligence is its high level of responsiveness to urgent incidents. This provides a layer of security and peace of mind by being covered. With threats detected, it allows for a better strategy in the event of an attack against us.
Continue reading

Threat Actionability

Mandiant Advantage Threat Intelligence provides IOCs and TTPs related to almost every threat that they detect. They also offer the connection to a MISP instance with lots of IOCs that have been detected.
Continue reading

Improved Visibility

The vulnerability intelligence feed has provided correlations between both malware and threat actors, and vulnerabilities, which when tied with exploitation activity observed in the SOC, have enabled new insights into threats.
Continue reading

Threat Actionability

Mandiant Advantage: Threat Intelligence platform provides a high level of actionability, by helping security analysts to focus on the threats that matter by providing the latest, most relevant threat intelligence.
Continue reading

Reviewer Pros & Cons

View all pros & cons

Video Reviews

Leaving a video review helps other professionals like you evaluate products. Be the first one in your network to record a review of Mandiant Advantage Threat Intelligence, and make your voice heard!

Return to navigation


View all pricing

What is Mandiant Advantage Threat Intelligence?

Since 2004, Mandiant has been a partner to security-conscious organizations. Mandiant’s approach helps organizations develop more effective and efficient cyber security programs and instills confidence in their readiness to defend against and respond to cyber threats.

Entry-level set up fee?

  • Setup fee optional


  • Free Trial
  • Free/Freemium Version
  • Premium Consulting / Integration Services

Would you like us to let the vendor know that you want pricing?

68 people want pricing too

Alternatives Pricing

What is CrowdStrike Falcon?

CrowdStrike offers the Falcon Endpoint Protection suite, an antivirus and endpoint protection system emphasizing threat detection, machine learning malware detection, and signature free updating. Additionally the available Falcon Spotlight module delivers vulnerability assessment with no performance…

What is Webroot Endpoint Protection?

Webroot Endpoint Protection is the OpenText company's business class multi-vector endpoint protection application, providing centralized endpoint management, deep learning intelligence, and advanced behavioral analytics. For SMBs, Webroot Smarter Cybersecurity solutions were designed from the ground…

Return to navigation

Product Details

What is Mandiant Advantage Threat Intelligence?

Mandiant Advantage Threat Intelligence Suite aims to accelerate security and risk decision making – operational as well as strategic – and to enable security teams to focus on threats that matter to them, so they become experts and can prepare the business better against impacts from current or future attacks.

Mandiant Advantage Threat Intelligence Features

  • Supported: Public intelligence descriptions and scoring
  • Supported: Dynamic Actor, Malware, Vulnerability views
  • Supported: Dark Web monitoring and search
  • Supported: Mandiant Finished Intel Reports

Mandiant Advantage Threat Intelligence Screenshots

Screenshot of Mandiant Advantage DashboardScreenshot of Mandiant Advantage Actor DetailsScreenshot of Mandiant Advantage Actor Graph

Mandiant Advantage Threat Intelligence Videos

Mandiant Advantage - Cyber Threat Intelligence
Threat intelligence capabilities can be found in a variety of products. In this video, the TrustRadius team goes over 4 leading products in the space, including Mandiant Advantage Threat Intelligence.

Mandiant Advantage Threat Intelligence Competitors

  • Recorded Future
  • Crowdstrike Falcon X
  • IBM X-Force Threat Intelligence
  • Kaspersky Threat Intelligence Services

Mandiant Advantage Threat Intelligence Technical Details

Deployment TypesSoftware as a Service (SaaS), Cloud, or Web-Based
Operating SystemsUnspecified
Mobile ApplicationNo
Supported CountriesWorldwide
Supported LanguagesEnglish

Frequently Asked Questions

Since 2004, Mandiant has been a partner to security-conscious organizations. Mandiant’s approach helps organizations develop more effective and efficient cyber security programs and instills confidence in their readiness to defend against and respond to cyber threats.

Recorded Future are common alternatives for Mandiant Advantage Threat Intelligence.

Reviewers rate Usability highest, with a score of 8.2.

The most common users of Mandiant Advantage Threat Intelligence are from Enterprises (1,001+ employees).

Mandiant Advantage Threat Intelligence Customer Size Distribution

Small Businesses (1-50 employees)0%
Mid-Size Companies (51-500 employees)15%
Enterprises (more than 500 employees)85%
Return to navigation


View all alternatives
Return to navigation

Reviews and Ratings


Attribute Ratings


(1-9 of 9)
Companies can't remove reviews or game the system. Here's why
Score 10 out of 10
Vetted Review
Verified User
We use Mandiant Advantage to stay up to date on the most relevant cyber threats to our industry and company. The platform provides a plethora of collections to utilize as inputs to meeting our stakeholders' prioritized intelligence requirements and is a great starting point for any analyst to understand the current landscape of cyber threats.
  • The organization of finished Threat Intelligence reports is a huge plus. Mandiant Advantage has broken up their delivery of Intel in a way that makes it seamless to access the things analysts are interested in. Whether it is a particular adversary, vulnerability or malware family, executing searches on any of the categories provided is intuitive and provides a great deal of info in the search results.
  • Transparency in Intel sources, risk scoring and assessments is something Mandiant Advantage does very well. When Mandiant is not the source of the investigations or has not reached a definitive conclusion from their research, they are transparent in these gaps and they avoid biases at all costs in their reporting.
  • Mandiant Advantage does a great job with flexibility in delivery of Threat Intelligence that makes sense to your company and the things you care about. Through dashboard customizations, it makes displaying the high priority Intelligence an easy task.
  • The Digital Threat Monitoring (DTM) module within Mandiant Advantage has been a value add for our company and has gone through a complete overhaul in usability that has greatly improved the functionality. That said, this is an area that should not be viewed as complete as there are always ways to improve upon these types of alerting queues to continue staying competitive in the market.
  • The user access provisioning within the platform itself has room for improvement, but this is not a show stopper by any means.
The Mandiant Advantage platform is continually discussed as a market leader in threat intelligence delivery for a reason. The intuitive user experience makes it seamless to get to the topics that are of highest priority to your company and its stakeholders. Additionally, the reporting is unbiased and transparent and is backed by a large footprint of endpoint / network telemetry and real incident response data. This helps keep customers on the forefront of the ever-evolving state of cyber threats and applicable defense mechanisms.
The usability of Mandiant Advantage is top notch. Seamless, intuitive and flexible, all of which support getting the right threat intelligence in the right hands, faster.
Score 7 out of 10
Vetted Review
Verified User
My organization was looking to expand our threat intelligence capabilities and wanted to utilize an industry leader. Mandiant Advantage Threat Intelligence was chosen to increase contextual data around indicators of compromise and potential issues. The Mandiant Advantage Threat Intelligence platform offered a wealth of data to enhance our investigations and reduce redundant processes.
  • Well structured UX
  • Wealth of information
  • Well researched
  • Paywalls exist throughout the data set and can halt an investigation without the right model
  • Some data was incomplete or broken up between pay tiers
  • Navigation through the data lacked a definitive trail or breadcrumbs to retrace steps during investigations
Mandiant Advantage Threat Intelligence is well suited to data enrichment tasks and surfacing additional potential indicators of compromise based on observables found in an environment. Difficulties arise if the given data is classified in multiple platform modules, each requiring a different subscription. When tracking an indicator of compromise and wanting to see what actors it relates to and further understand the actor, you often end up with one side of the data or the other. IOCs with little campaign context or actor details with no tactical data.
I have discussed at length my displeasure with Mandiant Advantage Threat Intelligence's insistence on driving product purchase through opportunistic data classifications within their platform across different subscription levels. I believe this mentality of giving users enough to start an investigation but not go beyond one or two use cases without paying extra is the experience you would get from an organization with questionable ethics and should not be true of a leader in the industry.
Score 9 out of 10
Vetted Review
Verified User
With regard to Threat Intelligence and, more generally to Attack Surface Reduction, there are many malicious actors, as well as constant threats that can affect the entity, and this product helps us keep track of the most relevant ones, as well as search for information on those that are of interest to us.
  • Threat actors details
  • Pivoting between related information
  • Advanced threat reports
  • Time for deliverables
  • Subscription limitations
  • Platform migration
When we have had to investigate a particular threat, the platform has been of great help in linking TTPs, vulnerabilities, entry vectors, and malware used to that threat. On the other hand, when the threats are very new, it does falter when it comes to offering information. Despite this, you can always request a report on it, which they prepare in a reasonable amount of time.
Mandiant Advantage Threat Intelligence has a very usable platform, with well-differentiated sections for the analyst, as well as the possibility of cross-searching to obtain the desired results. All this is presented with an interface that is easy on the eye and not very messy, which increases productivity and the speed with which work is done.
Score 9 out of 10
Vetted Review
Verified User
Mandiant Advantage Threat Intelligence is used as an intelligence provider that gives us valuable information to be prepared for possible cyber-attacks by threat actors. We take care of reducing the attack surface and try to obtain as much information as possible about cyber threats that jeopardize the integrity of the bank or its users. It allows us to keep abreast of the latest threats from both open and closed sources.
  • Detailed intelligence reports on any type of threat
  • Monitoring of information on the dark web
  • Exhaustive analysis of zero-day vulnerabilities
  • Research on malicious threat actors
  • Illustrated reports on threat trends
  • Improved organization of TTPs and TAs
Mandiant Advantage Threat Intelligence is suitable for any type of company and sector that require a good cyber intelligence service, where they need analysts who can search and analyze information in open sources, through OSINT, or closed sources, such as underground forums about threats that jeopardize the integrity of the company. Mandiant Advantage Threat Intelligence includes focusing on selling data leaks extracted after a cyber attack, recent vulnerabilities, or any kind of attack. Additionally, it has high-quality technical and executive reports. Mandiant Advantage Threat Intelligence is less appropriate for companies that already have a specialized cyber intelligence team and do not require an external professional service that can generate daily information or incident investigations.
Mandiant Advantage Threat Intelligence is a great cyber intelligence service with a great team of professional analysts. They provide quick responses to queries or incidents that require further investigation or information. Additionally, they provide personalized treatment as well as monthly meetings to coordinate teams. We have high reliability in the results obtained, as well as a large number of daily reports and trends.
Score 8 out of 10
Vetted Review
Verified User
Mandiant Advantage Threat Intelligence is a really useful platform for gathering actionable intelligence related to the threats that are affecting companies operating in our sector. It's always updated to the latest threats, techniques, and tactics used by the adversaries and provides useful insights to mitigate them. Mandiant Advantage Threat Intelligence provides high-level information about these threats so we can be updated on the current trends.
  • Quality of the information that they are able to gather
  • Ad-hoc meetings based on your intelligence requirements
  • IOCs, TTPs and other actionable intelligence
  • It is difficult to customize the platform
  • There are different platforms running at the same time for similar purposes (Legacy, Advantage...)
Mandiant Advantage Threat Intelligence brings good intelligence related to threats that affect different countries and sectors. Their monitoring is good and provides a level of detail that others cannot. They can do better in the underground monitoring of brand mentions in underground forums, especially in the interaction with the users of those forums in order to obtain further detail about the threats.
The platform is pretty useful and also has a beautiful design. There are graphs for high-level detail, but also extensive reports for the analysts.
Score 10 out of 10
Vetted Review
Verified User
Mandiant Advantage provides vulnerability intelligence that we correlate with vulnerability scan data for prioritization purposes.
  • Provides timely expert risk analysis for each vulnerability
  • Provides information regarding threat actors associated with vulnerabilities and exploitation
  • Provides information regarding malware associated with vulnerabilities and exploitation
  • Additional information on exploitation activity was reported but not yet observed by Mandiant in the wild.
  • Increased CVE coverage
Mandiant advantage is an excellent enrichment to any vulnerability management and scanning solution.
The API is reliable and robust.
Score 10 out of 10
Vetted Review
Verified User
[Mandiant Advantage: Threat Intelligence] has been great in telling us about threat actors and their tools, techniques, and procedures (TTP). Whenever we get a hit on IOC, we can investigate if [Mandiant Advantage: Threat Intelligence] has a profile on the actor.
  • Threat actor profile
  • Threat actor TTPs
  • Industry exploited by threat actor
  • IOCs
  • Merging into attack surface management - they just bought a co. for that
  • Brand monitoring - still yet to do social media monitoring
1. Best in class threat intel
2. IOCs from frontlines breach investigations
3. Fast pump of IOCs into FireEye Helix, FireEye agents, and FireEye ETP
Easy to use, navigate, easy to understand.
Score 10 out of 10
Vetted Review
Verified User
The Mandiant Advantage: Threat Intelligence platform is being utilized by CSIRT and SOC analysts. It provides an in-depth level of threat visibility so that the CSIRT and SOC teams can be better prepared, understand which vulnerabilities, malware, actors, or tactics target the corporate environment, and scale the cybersecurity controls to threats that matter to them.
  • It provides extensive and accurate information about threat actors, malware, and vulnerabilities seen in the real world.
  • It gives the latest threat reports regarding an artifact (file hash, IP address, domain, or URL).
  • A dedicated browser extension provides real-time information about an artifact.
  • It provides a detailed analysis of cyber threat intelligence news with comments from Mandiant experts.
  • It provides powerful research functionality used to navigate to additional tools, including MITRE ATT&CK mapping or access additional reports.
  • It took some time to get familiar with all the sections, features, and documentation of the platform.
Mandiant Advantage: Threat Intelligence is mainly beneficial to the CSIRT and/or SOC teams, by helping the organization to take proactive steps to dramatically reduce vulnerabilities, related risks, and to focus on the business at hand.
It has very high usability due to the easy-to-use and digest charts, graphs, and report navigation.
Nigel Gardner | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
It is used by Information Security and it supports Risk and Compliance, Information Technology, eCommerce, and Fraud. It addresses the cyber threats our businesses face and helps translate the threat to a business unit and overall risk to the company.
  • Accurate and very detailed reporting.
  • Outstanding customer support.
  • Access to subject matter experts for all cyber threats.
  • Improved portal flexibility to research information.
Mandiant Intelligence has continuously provided our organization with detailed reporting and recommendations that improved our overall security posture. Changes in the environment are easily accepted when it is backed by an industry leader. When it came to investigating incidents, Mandiant Threat Intelligence provided us with playbooks and other data sources that allowed the team to get ahead of the threat and prevent any harmful activity.
The reporting and analysis are very thorough, giving the analysts a complete picture of the situation or problem. From executive summaries to specific malware analysis deep dives, the level of expertise, clarity, and analysis provided by Mandiant is suitable for all audiences.
Return to navigation