Anomali Review, Pricing & Features

Anomali is an enterprise threat intelligence platform built on ThreatStream. Learn about its history, features, pricing model, and target SOC customers.

Category
Automation
Pricing
custom
Verified
Not yet
Last updated
July 19, 2026
Founded
2013
Headquarters
Redwood City, California, United States

What Is Anomali

Anomali is an enterprise cybersecurity company that builds a threat intelligence platform used by security operations center (SOC) teams. It was founded in 2013 as ThreatStream by Greg Martin and Colby DeRodeff, and rebranded to Anomali in 2016 while keeping ThreatStream as the name of its flagship product.

The company is headquartered in Redwood City, California, and has raised roughly $96 million across multiple funding rounds from investors including IVP, Paladin Capital Group, and GV.

Anomali is not related to Anki, the flashcard app; the two names simply share a similar prefix.

Key Features

ThreatStream aggregates threat intelligence from open source, commercial, and government feeds into a single platform, giving analysts a consolidated view of known threats, actors, and infrastructure.

The platform applies AI-driven correlation and confidence scoring to threat data, helping reduce alert noise and prioritize the intelligence most relevant to an organization's environment.

Newer 'Next-Gen' capabilities introduce agentic AI features, including autonomous triage and investigation steps designed to accelerate analyst workflows, and the platform is built to integrate with or augment existing SIEM and data lake infrastructure.

Pricing

Anomali does not publish self-serve pricing on its website. Pricing is custom and quote-based, determined by factors such as data volume, number of integrations, and deployment scale.

Prospective customers must contact Anomali's sales team directly for a quote, which is typical for enterprise-grade threat intelligence and SOC platforms sold to mid-market and large organizations.

Key Features

Pros & Cons

Pros

  • Long track record in threat intelligence dating back to 2013
  • Strong enterprise funding and financial backing from major VC firms
  • AI-driven correlation reduces analyst alert fatigue
  • Flexible integration with existing SIEM and data lake infrastructure
  • Purpose-built for SOC and threat intelligence team workflows

Cons

  • No public pricing, requiring a sales engagement to get a quote
  • Primarily suited to mid-market and enterprise customers, not small teams
  • Complex platform with a learning curve for new analysts
  • Value depends heavily on quality of integrated data sources

Frequently Asked Questions

What is Anomali used for?

Anomali is a threat intelligence platform used by SOC teams to aggregate, correlate, and act on cyber threat intelligence, enriching alerts and telemetry with context on threat actors and campaigns.

When was Anomali founded?

Anomali was founded in 2013 as ThreatStream by Greg Martin and Colby DeRodeff, and rebranded to Anomali in 2016.

Is Anomali the same as Anki?

No, Anomali and Anki are unrelated products. Anki is a free flashcard app for studying, while Anomali is an enterprise cybersecurity threat intelligence platform.

How much does Anomali cost?

Anomali does not publish pricing publicly. Pricing is custom and based on factors like data volume and deployment scope, requiring a quote from sales.

Who are Anomali's typical customers?

Anomali targets mid-market and enterprise security operations center (SOC) teams, threat intelligence analysts, and incident responders.

What is ThreatStream?

ThreatStream is Anomali's flagship threat intelligence platform product, originally the company's name before it rebranded to Anomali in 2016.

Where is Anomali headquartered?

Anomali is headquartered in Redwood City, California.

Related Tools