Is Liberty91 a direct replacement for Anomali?

They overlap but solve the problem from different ends. Anomali is a powerful platform a team operates to aggregate and analyse threat data, with a strong integration ecosystem. Liberty91 runs the full lifecycle for you and produces finished, per-organisation intelligence, which suits MSSPs delivering a service per customer and mid-market teams that do not want to staff and run a platform. The right fit depends on whether you want a platform to operate or finished intelligence delivered.

How does Liberty91 pricing compare to Anomali?

Anomali pricing is quote-based and not publicly listed, which is normal for enterprise platforms. Liberty91 is priced per customer organisation, so the cost scales with the accounts you serve rather than arriving as a large upfront licence. The specifics depend on volume and source tiers and are worth a short conversation, but the model is designed to stay accessible to mid-market budgets.

Can an MSSP deliver Liberty91 under its own brand?

Yes. Each customer runs as its own tenant with its own agent stack and its own Intelligence Requirements, and you brand the sender, the email templates and the report PDFs. Mailroom's Sent log filters per customer, which is what you take into a QBR or a renewal.

What does Liberty91 actually deliver to each customer?

A daily report tailored to the customer, surfaced, prioritised, and drafted in real time, plus thematic reports on a specific threat actor, malware family, or campaign in minutes. Alongside the human-readable reporting, it produces IOC lists, Sigma detection rules, and STIX 2.1 bundles for the customer's SIEM, SOAR, firewall, and security tooling.

Considering Anomali for threat intelligence?

Anomali is a category-defining threat intelligence platform with deep feed aggregation and a broad integration ecosystem. If what you actually want is finished intelligence tailored to each organisation, delivered as a service that makes a small team go a long way, this is how Liberty91 compares.

Start for Free Book a demo

What Anomali is good at.

Anomali is one of the original threat intelligence platforms, and that pedigree shows. It is strong at aggregating and normalising large volumes of feeds, integrating with the rest of a mature security stack, and giving a dedicated team a powerful surface to operate. More recent additions bring AI-assisted analytics and a security data lake into the same environment.

If you have an established SOC and CTI team who want a platform to run, with the breadth of integrations a large enterprise environment needs, Anomali is a serious option and deserves a place on the shortlist.

At a glance.

A fair, side-by-side read of where each one puts its emphasis.

	Anomali	Liberty91
Primary focus	A threat intelligence platform for aggregating, normalising, and operationalising feeds, with broad integrations and a security data lake.	An end-to-end platform that runs collection to delivery for you and produces finished, tailored intelligence per organisation.
Best fit for	Enterprise SOC and dedicated CTI teams that want a powerful platform to operate, with newer tiers reaching toward mid-market.	MSSPs delivering a service per customer, and mid-market teams that want the output of a CTI function without building one.
Operating model	Your team configures the platform, manages feeds and integrations, and runs the analysis and reporting on top of it.	The platform runs the lifecycle. Your people review and direct the work rather than carrying collection and formatting.
Per-customer tailoring	Rich data and analytics that your analysts shape to your environment.	Self-maintaining Intelligence Requirements per organisation, so every event is assessed for relevance to that specific organisation.
MSSP and white-label	A dedicated MSSP programme with multi-tenant support.	Multi-tenant by design, with white-label across the sender, email templates, and report PDFs, priced per customer.
Pricing model	Quote-based, enterprise sales. Pricing is not publicly listed.	Per customer organisation, so cost scales with your customer base. Built to stay accessible to mid-market budgets.

Where Liberty91 is different.

Finished intelligence, not just aggregation

Aggregating and normalising feeds is a strong foundation, and it is where a lot of platform value sits. Liberty91 starts after that point: it assesses relevance against each organisation's requirements and hands over finished reports, IOC lists, Sigma rules, and STIX bundles, drafted and ready to use.

Tailored to each organisation by default

Each organisation gets its own self-maintaining Intelligence Requirements and a dedicated agent stack. Two organisations in the same sector get different reads because their requirements differ. The relevance call is made for them, not for a generic enterprise audience.

A multiplier for the team you have

You get the output of a mature CTI function without standing up a large analyst practice or licensing sources one by one. If you already have analysts, Liberty91 makes them reach much further: the collection and first-draft production run at machine speed, so the same team covers far more, faster, and spends its time on judgement rather than plumbing. Real intel at machine speed, and a force multiplier, not a replacement.

White-label delivery for MSSPs

Where an enterprise TIP is something your own team operates, this runs across your whole customer base under your brand. The sender and reply-to, the email templates and the report PDFs are yours, and Mailroom's Sent log proves delivery account by account.

When Liberty91 is likely the better fit.

Liberty91 fits better when you want finished finished intelligence rather than a platform to operate. That is usually true if you are an MSSP delivering a tailored service to many customers under your own brand, or a mid-market team that wants real intelligence mapped to your assets and suppliers without standing up a dedicated function first.

If your priority is a platform your in-house team operates with a very wide integration estate, an established enterprise TIP may suit you better. The question to answer for yourself is whether you want to run the lifecycle or have it run for you.

See the platform →For MSSPs →

Frequently Asked Questions.

What reviewers say on G2.

“Automated, Actionable Cyber Threat Intelligence at Scale”

What do you like best?

“Integrating Liberty91’s AI enrichment into the OpenCTI ecosystem feels like a natural fit. It gives our users automated scoring, deduplication, and contextualisation at scale, helping turn raw threat data into prioritised, actionable intelligence without all the manual effort.”

What do you dislike?

“Like many similar platforms it takes a little time to ramp up and become familiar with all of the functions and features available in Liberty91, and to configure and refine from initial deployment.”

What problems is Liberty91 solving?

“Centralisation of intelligence into a single platform from multiple sources and enabling the full analytical lifecycle from ingestion to reporting reduces the need for users to log into multiple tools, increasing operational effectiveness and efficiency.”

Verified user in Information Technology and Services, Mid-Market, 51 to 1,000 employees. October 2026.

“Liberty91: Simplifying Work and Boosting Efficiency”

What do you like best?

“What I like best about Liberty91 is its user-friendly interface, efficient workflow, and ability to bring relevant information together in one platform. It helps streamline day-to-day tasks, improves visibility, and makes it easier to access the information needed to work effectively.”

What do you dislike?

“I don’t have any dislikes about Liberty91. Overall, I’m very satisfied with the platform.”

What problems is Liberty91 solving?

“Liberty91 helps streamline workflows by bringing relevant information and tools together in one platform. This saves time, improves efficiency, and makes it easier to access the information I need, allowing me to work more effectively and focus on important tasks.”

Verified user in Consulting, Mid-Market, 51 to 1,000 employees. October 2026.

Read the reviews on G2

Other comparisons.

Want to see this in your own organisation?

Request a demo, or start for free right away, and you will be looking at actionable, real-time, relevant threat intelligence built around your own organisation instead of generic reporting.