Ontic built the system of record for protective intelligence — cases, investigations, incidents, with serious compliance credentials including FedRAMP Moderate. Threatwhere builds the intelligence itself: grounded AI documentation on a live geospatial platform, with the operational layer attached.
Threatwhere, at a glance
$1,999 /licence/month — Overwatch
Published price · start without a sales call
What it takes to fill their column
The Ontic column spans Risk Intelligence, Incidents & Case Management and Executive Protection modules, an AlertMedia integration for notification, and an announced International SOS alliance for travel risk. Our column is one platform — Overwatch for the operations room, with an Operator licence for the field included in every Overwatch licence.
Nineteen capabilities. Every affirmative Ontic cell links to its public source; a dash means not publicly documented, nothing more.
| Capability | Threatwhere | Ontic |
|---|---|---|
| Intelligence & AI documentation | ||
| AI security documentation (multi-type) | ✓Eleven intelligence products from one platform — briefs, risk assessments, entity profiles, travel dossiers, digests, pattern detection, route analysis, event analysis, evacuation plans, 7-day threat forecasts and trip debriefs. | ◐AI summarization turns high-volume signals into insights, and AI summaries accelerate reporting on incidents and investigations. Multi-type document generation is not publicly documented.Risk Intelligencesource(opens in a new tab) |
| Conversational AI grounded in its own intelligence corpus | ✓Conversational assistant grounded in the platform’s own intelligence corpus — ask in plain language, receive a finished document. | —Not publicly documented. |
| Country / regional risk scoring | ✓Live scored country-risk baseline held in the platform; AI risk language is anchored to it, not estimated. | —Signals can be filtered by region, country, facility or principal; a country risk score is not publicly documented.Risk Intelligencesource(opens in a new tab) |
| Voice-operated intelligence | ✓Speak a query, hear a summary; the full document renders on screen. | —Not publicly documented. |
| Retraction / provenance controls on AI output | ✓Retract intelligence once and it is excluded from every future document — automatically. | —Not publicly documented. |
| OPSEC output governance | ✓Every deliverable protects sensitive tooling, collection and attribution details before release. | —Not publicly documented. |
| Organisation-doctrine personalisation of AI output | ✓Your own doctrine library and organisation preferences shape supported products, including evacuation plans built on your SOPs. | —Not publicly documented. |
| Operations | ||
| Geospatial common operating picture | ✓Live global threat map with an in-map AI assistant — click a threat, ask about it, generate the document. | ✓Signals in context — mapped alongside teams, sites, incidents and threat actors, filterable by region, country, facility or principal.Risk Intelligencesource(opens in a new tab) |
| Travel risk management workflow | ✓Missions, pre-travel dossiers with verified emergency contacts, scheduled check-ins, and post-mission debriefs that freeze into the record. | ◷An announced alliance with International SOS to jointly develop travel risk management software — previewed at GSX 2024, with full capabilities rolled out in future phases.Intl SOS alliancesource(opens in a new tab) |
| Evacuation planning | ✓Generated evacuation plans with facility-validated extraction points and doctrine retrieved from your own library. | —Not publicly documented. |
| Geofencing and location alerting | ✓Draw a geofence; events and incidents inside it trigger alerts with your threat-score threshold, in real-time or digest. | ✓Geo-based Risk Events with dynamic principal profiles covering routines, locations and exposure data.Executive Protectionsource(opens in a new tab) |
| Intelligence document workspace | ✓A shared intelligence workspace with folders, team sharing at view, comment or edit, and organisation-scoped permissions on every document. | ✓Case management with task assignment, teammate tagging and granular access controls down to the field level for sensitive casework.Incidents & Case Managementsource(opens in a new tab) |
| Auto-filing of generated intelligence | ✓Completed reports file themselves — mission reports into the mission workspace, personal research kept private. | —AI summaries exist for incidents and investigations; automatic filing of AI output into the case record is not publicly documented.Incidents & Case Managementsource(opens in a new tab) |
| Branded export with report-type banners | ✓Consistent branding across print, PDF and email export, with report-type banners and links back into the platform. | —Not publicly documented. |
| Platform & reach | ||
| Enterprise access control | ✓Enforced multi-factor authentication, per-licence entitlement and organisation-scoped access across every intelligence surface. | ✓Fine-grained permissions dictating who can access specific information, with SOC 2, FedRAMP Moderate, ISO 27001 and CSA STAR. Customer-facing SSO is not publicly documented.Platformsource(opens in a new tab) |
| OSINT collection & public-web augmentation | ✓Multi-source intelligence across open news at global scale, the open web, social platforms and closed messaging channels — without publishing a source inventory. See the note on “dark web” below. | ✓Topics tracked across 10,000+ open sources, from social media to the dark web and fringe platforms.Risk Intelligencesource(opens in a new tab) |
| Real-time multi-source intelligence feed | ✓Continuous multi-source intelligence delivered live to the dashboard as events, incidents and country risk develop. | ✓Thousands of OSINT sources monitored continuously.Risk Intelligencesource(opens in a new tab) |
| Mass notification | ◐Multi-channel alerting driven by intelligence triggers — routed to the people the intelligence actually affects. Life-safety broadcast to an entire population is a different category of product. | ⧉Notifications created from Ontic signals across text, email, voice, WhatsApp, desktop and in-app — delivered by its AlertMedia partnership.AlertMedia integrationsource(opens in a new tab) |
| Mobile field / operator app | ✓Threatwhere Operator: acknowledged SOS, scheduled safety check-ins, and dependable background location for field teams. | ◐iOS and Android apps extend the platform, with location-based notifications for nearby activity. SOS and duress functions are not documented in the store listing.Mobile appsource(opens in a new tab) |
Ontic’s public materials document AI summaries — of signals, incidents and investigations already in the system. Threatwhere’s capability is generation: eleven governed intelligence products, shaped by your organisation’s doctrine where supported, protected before release, and delivered into a permissioned workspace as branded documents.
Quote-only, scoped per deployment. No third-party estimates found — and we won’t invent one.
Published
$1,999
/licence/month — Overwatch
Every Overwatch licence includes an Operator licence for the field at no extra cost; standalone Operator seats from $199/month. $19,990/licence billed annually. Every number is on our public pricing page.
Start without a sales call7-day trial · card required · $1,999/licence/month · cancel before day 7 to pay nothing.
Quote only
Ontic
Ontic Platform
No published pricing — “Every Ontic deployment is shaped by your needs. We’ll scope it with you.” Scoped on products, scale, integrations and implementation. source(opens in a new tab)
Talk to sales to get a number.
How you buy
Threatwhere
Published pricing and a self-serve 7-day trial — sign up and start without a sales call. Overwatch $1,999/licence/month with an Operator licence included per Overwatch licence; standalone Operator seats from $199/month.
Ontic
None of the five vendors on these pages publishes a price; every one routes you to a sales conversation. Third-party buyer-reported estimates — not vendor list prices — show quote-only pricing varies materially by deployment and buyer: Everbridge estimates alone span roughly $15,000 to over $300,000 a year. When the range is that wide, the price is about you, not the product. source(opens in a new tab)
These are the documented reasons Ontic belongs on a serious shortlist — from their own public materials. The matrix shows where Threatwhere takes the operation further.
Protective intelligence pedigree: acquired SIGMA Threat Management Associates (2021); Dr. Marisa Randazzo leads its Center of Excellence and Fred Burton its Center for Protective Intelligence. source(opens in a new tab)
Compliance: annual SOC 2 audits, FedRAMP Moderate Authorization, ISO 27001, CSA STAR, per-client isolated databases, 30-day post-contract deletion. source(opens in a new tab)
Backing: a $230 million Series C led by KKR (August 2025) for its Connected Intelligence Platform. source(opens in a new tab)
Analyst recognition: Growth and Innovation Leader in the Frost Radar for Risk Intelligence Solutions, three consecutive years. source(opens in a new tab)
Ontic does not publish pricing — deployments are custom-scoped, with support and training included per its pricing page. Threatwhere publishes its pricing — Overwatch at $1,999/licence/month, an Operator licence included with every Overwatch licence, standalone Operator seats from $199/month — all on a public pricing page.
Protective intelligence: threat monitoring, investigations, incidents and case management on its Connected Intelligence Platform, with FedRAMP Moderate authorization.
Ontic documents AI summarization of signals, incidents and investigations. Multi-type AI document generation is not publicly documented.
Ontic is a system of record with AI summaries and deep compliance credentials. Threatwhere is an intelligence engine with the record-keeping attached — grounded generation, provenance controls, a live map, travel risk management, and a published price.
All competitor information on this page was verified against the linked public sources as of 15 August 2026, and is re-verified quarterly. “Not publicly documented” means exactly that — it is never a claim that a vendor lacks a capability. Third-party price figures are buyer-reported or analyst estimates, never vendor list prices. All product names and trademarks belong to their respective owners; comparisons are provided for evaluation purposes. See something outdated? Tell us via our contact page and we will correct it.
19 capabilities · published pricing · 7-day trial
Use the 7-day trial to generate a finished intelligence product from your own operating picture — or book a demo and make us prove the claims that matter to your operation.