CISO Tribune

Vendor comparison · 2 companies

EclecticIQ vs Mave

EclecticIQ is a global provider of threat intelligence technology and services. Mave runs investigations, searches, threat hunts, detection hardening, and governed responses across a customer's existing stack. CISO Tribune files both under Threat intelligence. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • EclecticIQ
  • Mave
EclecticIQ vs Mave: Products, Customers and Funding Compared
EclecticIQEclecticIQ is a global provider of threat intelligence technology and services.eclecticiq.comMaveMave runs investigations, searches, threat hunts, detection hardening, and governed responses across a customer's existing stack.mave.com
What it sells
  • Intelligence Center[4][6][8][9]EclecticIQ's AI-embedded threat intelligence platform. It is designed to enhance security operations.
  • Threat Scout[1]A tool teams use to gather and organize threat data.
  • Malware Sandbox[1]Detonates suspicious files and extracts IOCs.
  • AI SOC[1][14]Governed AI agents that investigate alerts, apply threat intelligence, hunt across tools, improve detections, and execute authorized response actions.
  • Threat Hunting[1][13]Runs continuous, cross-tool threat hunts for threats that never triggered an alert.
  • Detection Engineering[1][13]Finds coverage gaps, tunes noisy detection rules, and creates new detections.
  • Threat Intelligence[1][9][10][14]Converts relevant threat intelligence into investigations, threat hunts, detections, and authorized responses.
Categories
Headquarters
Netherlands[2][3]Not stated on its pages
Founded
2014[2]Not stated on its pages
Ownership and funding
Privately held[2]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • April 13, 2026EclecticIQ appointed James O'Connor, previously its VP of Systems Engineering, as Chief Technology Officer.[12]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, EclecticIQ sells mainly to security teams that run threat intelligence and security operations work. The company says its products serve CTI teams and SOC teams. Its pages also address providers that deliver threat intelligence services to clients. EclecticIQ describes a major global bank as a customer that deployed its platform across global subsidiaries. The company says it collaborates with government and industry partners in the maritime and critical infrastructure space.From its own pages, Mave sells mainly to security operations teams that run many tools and want investigation, hunting, detection work, and response across the stack they already have. Mave addresses managed security service providers that want to scale without adding analysts at the same rate as customers. Mave addresses organizations with multiple SIEMs, tenants, and subsidiaries. Mave addresses organizations that want to reduce SIEM ingestion and retention costs. Mave addresses organizations that want alert triage, investigation, and response in-house, and organizations with on-premises workloads alongside cloud and SaaS. Mave also describes an alternative package for smaller teams.
Last verified
September 27, 2026October 23, 2026

Where they overlap

  • EclecticIQ and Mave are both filed under Threat intelligence.

Where they differ, field by field

  • EclecticIQ's primary category is Threat intelligence; Mave's is AI SOC analysts.
  • Mave is also filed under SIEM.
  • EclecticIQ lists Intelligence Center, Threat Scout and Malware Sandbox. Mave lists AI SOC, Threat Hunting, Detection Engineering and Threat Intelligence.
  • EclecticIQ is headquartered in Netherlands.
  • EclecticIQ was founded in 2014.
  • EclecticIQ is privately held.

What it sells: EclecticIQ

What Intelligence Center does[4][6][8][9]
EclecticIQ Intelligence Center is the AI-embedded platform designed to enhance security operations. The platform normalizes data into STIX 2.1 and EIQ-JSON formats. Custom, role-specific dashboards and an Observable Risk Score feature help teams track and prioritize threats.
What Threat Scout does[1]
Threat Scout is named among the tools teams use to gather and organize data on the platform. The other collection methods named are automated feeds, custom uploads and flexible integrations.

What it sells: Mave

What AI SOC does[1][14]
Mave runs an AI SOC across the security stack a customer already uses. Mave queries live data in the systems that already hold it, reasons across the evidence, and takes the next authorized action. No telemetry migration, duplicate data lake, central index, or fixed SOAR playbook is required.
What Threat Hunting does[1][13]
Mave applies threat intelligence to the customer's environment and runs continuous, cross-tool threat hunts across the SIEM, EDR, cloud, identity, and other security tools. Each finding becomes a complete investigation, a new or tuned detection, or an authorized response action. Source telemetry stays in place, with no new data lake, central index, or prebuilt correlation pipeline.
What Detection Engineering does[1][13]
Mave works across detection languages and formats, including SPL, KQL, YARA-L, Sigma, EQL, Lucene, and SQL-based rules. Agents review, create, translate, test, and tune detection content in the existing workflow, validate it against historical data where it already lives, and commit or deploy approved changes.
What Threat Intelligence does[1][9][10][14]
Mave determines which campaigns, actors, vulnerabilities, indicators, and techniques are relevant to the customer's environment. Mave evaluates each threat against assets, identities, technologies, vulnerabilities, detections, and live activity.

Questions about EclecticIQ and Mave

What do EclecticIQ and Mave sell?
EclecticIQ sells Intelligence Center, Threat Scout and Malware Sandbox. Mave sells AI SOC, Threat Hunting, Detection Engineering and Threat Intelligence.
Are EclecticIQ and Mave in the same category?
They share Threat intelligence. EclecticIQ's primary category is Threat intelligence and Mave's is AI SOC analysts.
Where are EclecticIQ and Mave headquartered?
EclecticIQ is headquartered in Netherlands.
When were EclecticIQ and Mave founded?
EclecticIQ was founded in 2014.
Who owns EclecticIQ and Mave?
EclecticIQ is privately held.
Who are EclecticIQ and Mave sold to?
From its own pages, EclecticIQ sells mainly to security teams that run threat intelligence and security operations work. From its own pages, Mave sells mainly to security operations teams that run many tools and want investigation, hunting, detection work, and response across the stack they already have.
What have EclecticIQ and Mave announced recently?
April 13, 2026: EclecticIQ appointed James O'Connor, previously its VP of Systems Engineering, as Chief Technology Officer.

About EclecticIQ

EclecticIQ is a global provider of threat intelligence technology and services. EclecticIQ says its products run from an AI-embedded threat intelligence platform to a browser extension, and that they improve workflows and reduce analyst fatigue. EclecticIQ says it helps security teams make smarter, faster decisions with dynamic solutions that reduce complexity and streamline threat detection and response.[4][11]

EclecticIQ Intelligence Center is the AI-embedded platform designed to enhance security operations. EclecticIQ says its platform helps teams define and capture Intelligence Requirements in one place with Intelligence Compass. Intelligence Compass uses AI-driven and keyword-based mapping to align threat information with business context. Teams can assign tasks and track progress. Custom, role-specific dashboards let teams visualize and track key metrics and threats, and a dynamic Observable Risk Score feature helps identify and prioritize the most critical risks. The platform includes automated discovery rules and real-time alerts.[1][4][9]

For data collection, teams can gather and organize data with automated feeds, custom uploads, flexible integrations and tools like Threat Scout. The platform normalizes data into STIX 2.1 and EIQ-JSON formats. Beyond the standard STIX object types, the platform ingests specialized intelligence via Custom objects. The platform automates deduplication and normalization. Reusable keyword lists let teams define what matters to the organization once and apply that context across rules and workflows. AI-driven entity extraction pulls threat actors, malware and attack patterns from unstructured reports. A Malware Sandbox detonates suspicious files in a secure environment, extracts IOCs and correlates them automatically. EclecticIQ says its platform centralizes and normalizes threat data through a single interface.[1][4][5]

For analysis, teams can visualize attack trends and TTPs using MITRE ATT&CK Navigator, heatmaps and dynamic graphs. Native DISARM Framework integration lets teams classify and analyze disinformation and influence operation TTPs. Teams can collaborate in dedicated workspaces and track threats with customizable watchlists. AI Suite is used to surface insights and automate repetitive tasks. EclecticIQ says its platform uses search technology that scans intelligence sources simultaneously to reduce critical response time from days to minutes. For reporting, the platform provides native editors and branded, audience-tailored templates to produce finished intelligence reporting. For sharing, the platform supports STIX, HTML and CSV formats and a full REST API, and export filters manage authentication, anonymization and timing.[1][4]

EclecticIQ describes integrations with other security tools. IBM QRadar and EclecticIQ Intelligence Center integration enhances threat detection and response by providing enriched intelligence. The EclecticIQ and ServiceNow integration automatically enriches observables with threat intelligence. SOC teams can visualize and track observables in real-time using ready-to-use widgets and send incidents to EclecticIQ for deeper analysis and reporting. The Cisco Umbrella API integration helps analysts understand registration details, similar domains and potential malicious ties to observable data.[5][6][7]

In a case study, a major global bank deployed the EclecticIQ Threat Intelligence Platform and streamlined intelligence triage and improved real-time collaboration across global subsidiaries. EclecticIQ partnered with the NATO Cooperative Cyber Defence Centre of Excellence to deliver actionable intelligence for protecting maritime infrastructure against state-sponsored cyber threats. EclecticIQ invites partners to bring security solutions and services to end users. EclecticIQ says it is an active member of the open source community.[8][10][11]

Cody Barrow is the EclecticIQ CEO. EclecticIQ states that it is certified to the ISO 9001 and 27001 standards.[4][5][6][10][11]

EclecticIQ on the record

Sources

EclecticIQ full record

  1. [1]Threat Intelligence PlatformEclecticIQ · undated page, accessed September 27, 2026 · Tier A
  2. [2]Eclecticiq sells endpoint detection talent and software capabilities to reliaquestEclecticIQ · eclecticiq.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]About usEclecticIQ · undated page, accessed October 24, 2026 · Tier A
  4. [4]The threat intelligence platform that understands your businessEclecticIQ · undated page, accessed October 24, 2026 · Tier A
  5. [5]IntegrationsEclecticIQ · undated page, accessed October 24, 2026 · Tier A
  6. [6]IBM Security and EclecticIQ Intelligence CenterEclecticIQ · undated page, accessed October 24, 2026 · Tier A
  7. [7]ServiceNow and EclecticIQ Intelligence CenterEclecticIQ · undated page, accessed October 24, 2026 · Tier A
  8. [8]Enhancing Triage and Collaboration for Global Banking SecurityEclecticIQ · undated page, accessed October 24, 2026 · Tier A
  9. [9]Threat Intelligence PlatformEclecticIQ · undated page, accessed November 5, 2026 · Tier A
  10. [10]EclecticIQ partners with NATO CCDCOE to strengthen European maritime port infrastructure securityEclecticIQ · published July 21, 2025 · Tier A
  11. [11]Maturity-based action plan template | EclecticIQEclecticIQ · undated page, accessed November 5, 2026 · Tier A
  12. [12]EclecticIQ appoints James O’Connor as Chief Technology Officer to drive next phase of product scale and innovationEclecticIQ · published April 13, 2026 · Tier A
  13. [13]EclecticIQ Appoints Chief Marketing Officer and Chief Revenue Officer to Drive Next Phase of GrowthEclecticIQ · published November 14, 2025 · Tier A

Mave full record

  1. [1]mave.comMave · mave.com · undated page, accessed October 23, 2026 · Tier A
  2. [2]Terms and conditionsMave · mave.com · published February 15, 2026 · Tier A
  3. [3]AI Security Operations Platform | MaveMave · undated page, accessed November 10, 2026 · Tier A
  4. [4]Mave Platform | The SecOps Operating SystemMave · undated page, accessed November 10, 2026 · Tier A
  5. [5]Reduce MDR Reliance | MaveMave · undated page, accessed November 10, 2026 · Tier A
  6. [6]SIEM Cost Reduction & Replacement | MaveMave · undated page, accessed November 10, 2026 · Tier A
  7. [7]On-Prem SecOps Deployment | MaveMave · undated page, accessed November 10, 2026 · Tier A
  8. [8]Multi-SIEM & Post-M&A SecOps | MaveMave · undated page, accessed November 10, 2026 · Tier A
  9. [9]Multi-Tenant SecOps For MSSPs | MaveMave · undated page, accessed November 10, 2026 · Tier A
  10. [10]Threat Hunting | MaveMave · undated page, accessed November 10, 2026 · Tier A
  11. [11]Detection Engineering with MITRE ATT&CK | MaveMave · undated page, accessed November 10, 2026 · Tier A
  12. [12]Threat Intelligence | MaveMave · undated page, accessed November 10, 2026 · Tier A
  13. [13]Pricing | MaveMave · undated page, accessed November 10, 2026 · Tier A
  14. [14]AI SOC Agents for Full-Loop SecOps | MaveMave · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.