TheHive

TheHive is an open-source security incident response platform for SOCs and CSIRTs. It helps track security incidents, collaborate on investigation tasks, and link artifacts to threat intelligence. A built-in case management workflow ensures each step is documented. Integration with Cortex analyzer speeds up evidence gathering. TheHive suits cybersecurity teams wanting a free, self-hosted IR platform focusing on incident triage, analysis, and real-time collaboration on security events.