
DAS-Security ATIP
DAS-Security ATIP is a threat intelligence center that combines information from multiple sources with network threat analysis and APT tracking, using Hengna…
What DAS-Security ATIP is
DAS-Security ATIP is a threat intelligence center that combines information from multiple sources with network threat analysis and APT tracking, using Hengnao AI. It covers IP addresses, domains, URLs, and file hashes, and includes analysis fields and blocking-level judgments. The listed data includes 11B+ intrusion-detection IPs, 312M+ compromised-detection records, 10B+ file-hash samples, 5,000M+ malicious URLs, 35K+ vulnerability records, and 600+ threat organizations with TTP attack matrices. Its workflow describes automated collection, translation, summarization, threat analysis, risk scoring, knowledge graphs, and RAG retrieval. The platform can classify alerts and emergency responses by threat level and impact scope, check internet exposure, flag website-tampering risk, profile attack IPs, and trace IPs or domains. Organizations can consume intelligence through API, Kafka streaming, offline packages, or MCP, and deploy fully on-premise, including isolated environments. Other capabilities include automated blocking through security tools and vulnerability correlation with enterprise assets. The paid product is self-hosted, with web and API access; pricing is available on request.
Good
- Covers IPs, domains, URLs, and file hashes.
- Supports API, Kafka, offline packages, and MCP.
- Offers fully on-premise deployment for isolated environments.
- Correlates vulnerability intelligence with enterprise assets.
Watch out
- Pricing is available only on request.
- The listed product deployment is self-hosted.
Who it suits
ATIP suits security teams that need to aggregate threat intelligence, investigate indicators, and coordinate response. Its fully on-premise deployment and isolated-environment support may suit organizations that keep intelligence data within their own network.
Verdict
ATIP brings threat feeds, analysis, vulnerability data, and response capabilities together for security operations. Its on-premise approach and multiple consumption options are useful considerations for teams assessing data control and integration needs.
The facts
Each one read from DAS-Security ATIP's own pages, with the date it was checked.
What it does
- AI clients
- Its MCP threat-intelligence service is listed as compatible with Claude Desktop, Cursor, and Kiro.checked 10 Oct 2026
- AI intelligence workflow
- Its workflow describes automated collection, multilingual translation, text summarization, threat analysis, AI risk scoring, knowledge graphs, and RAG retrieval.checked 10 Oct 2026
- API access
- The threat intelligence API uses API-key authentication, returns JSON, and charges one quota per query.checked 11 Oct 2026
- Asset and attribution analysis
- It offers internet exposure checks, website-tampering risk alerts, attack-IP profiling, and IP/domain tracing.checked 10 Oct 2026
- Automated response
- The platform supports automated blocking through firewalls, WAF, IDS/IPS, and EDR, plus notifications through DingTalk and WeCom.checked 11 Oct 2026
- Consumption options
- Intelligence can be consumed through API, Kafka streaming, offline packages, or MCP, with integrations for SIEM, SOAR, NGSOC, AiLPHA, and security devices.checked 11 Oct 2026
- Deployment and data control
- The page describes fully on-premise deployment and says intelligence data stays within the organization; it supports internet-connected, air-gapped, and network-isolated scenarios.checked 11 Oct 2026
- Integrations
- The page names Tencent, Qi-AnXin, ThreatBook, 360, SkyEye, and Kaspersky as supported intelligence providers.checked 11 Oct 2026
- Intelligence processing
- Its fusion engine normalizes, deduplicates, and merges intelligence records and scores their confidence.checked 11 Oct 2026
- Intelligence sources
- It supports feeds from DAS-Security, third-party providers, organizational sharing, and locally produced intelligence.checked 11 Oct 2026
- IOC coverage
- It covers IP addresses, domains, URLs, and file hashes, with threat analysis fields and blocking-level judgments.checked 10 Oct 2026
- Purpose
- ATIP is an enterprise threat intelligence management platform for building an on-premise intelligence center.checked 11 Oct 2026
- Reporting
- It can generate daily, weekly, and monthly intelligence consumption reports and deliver them by scheduled email.checked 11 Oct 2026
- Risk response
- It describes threat alerts and emergency response classification based on threat level and impact scope.checked 10 Oct 2026
- Security tools
- The page lists cloud-sandbox dynamic analysis for submitted files or URLs and security scanning for AI agent skill packages.checked 10 Oct 2026
- Support
- The product page invites users to contact the threat intelligence team for product details, demos, or customized solutions and lists 400-6059-110.checked 11 Oct 2026
- Threat data
- The page lists 11B+ intrusion-detection IPs, 312M+ compromised-detection records, 10B+ file-hash samples, and 5,000M+ malicious URLs.checked 10 Oct 2026
- Threat discovery
- It combines multi-source threat intelligence with AI analysis to help identify APTs, zero-day exploits, and other sophisticated attacks.checked 11 Oct 2026
- Updates
- The platform supports direct, proxy, gateway, and offline updates, with full refreshes daily.checked 11 Oct 2026
- Vulnerabilities and actors
- It lists 35K+ vulnerability records and 600+ threat organizations with TTP attack matrices.checked 10 Oct 2026
- Vulnerability management
- It correlates vulnerability intelligence with enterprise assets and uses Adaptive Vulnerability Prioritization Technology to rescore severity.checked 11 Oct 2026
The company
- Founded
- 2007checked 28 Sep 2026
- Headquarters
- Hangzhou, Zhejiang, Chinachecked 28 Sep 2026
- Maker
- DAS-Security is the English name used on the product page for 安恒信息技术股份有限公司, founded in Hangzhou in 2007.checked 11 Oct 2026
Alternatives to DAS-Security ATIP
- 1

MISP
Free planOpen sourceWebAPILinuxSelf-hosted7.9From €7.31 a year - 2
Pulse Intelligence
Free planWebAPILinuxmacOS6.8Free plan - 3
Google Cloud Secret Manager
Free planWeb6.5From $0.02 a month - 4
Kaspersky Threat Intelligence Portal
Free planWebAPI6.5Free plan - 56.5From $4,550 a year
- 6
IBM X-Force Exchange
Free planWebAPI6.3Free plan
