Empowering Incident Responders Worldwide

StrangeBee is the company behind TheHive and Cortex, two widely adopted open source platforms for security incident response and case management. TheHive provides a collaborative investigation workspace where SOC analysts and incident responders can manage cases, track observables, and coordinate response activities across distributed teams. StrangeBee serves CERTs, CSIRTs, and enterprise SOCs worldwide that need structured, repeatable incident handling workflows at scale.

The Cortex automation engine complements TheHive by enabling analysts to enrich observables and execute response actions through a library of analyzers and responders that connect to threat intelligence feeds, sandboxes, and security tools. StrangeBee offers both community editions and enterprise-grade deployments with advanced features including multi-tenancy, RBAC, and custom dashboards. Together, TheHive and Cortex form a complete incident response ecosystem that reduces investigation time, ensures consistent case documentation, and helps security teams handle growing alert volumes efficiently.