Kaspersky Threat Intelligence Portal
6.5#4 in threat intelligence platformsFree planFree planWebAPI
Visit
| Fact | Kaspersky Threat Intelligence Portal | MISP |
|---|---|---|
| API | The portal provides a REST API for web address lookups using an API token. | MISP provides an OpenAPI-described REST API with extensive restSearch capabilities and bundled PyMISP support. |
| Intended users | Kaspersky presents the portal for SOC teams, threat analysts, and threat hunters. | The project says MISP is designed for incident analysts, security and ICT professionals, and malware reversers. |
| Purpose | The portal is a centralized investigation workspace that gives security teams access to current cyberthreat intelligence. | MISP is an open source platform for collecting, storing, distributing, and sharing cybersecurity indicators and threat information for incident and malware analysis. |
The portal is aimed at SOC teams, threat analysts, and threat hunters handling investigation, incident response, and threat hunting. It may suit security teams that need indicator enrichment and sandbox analysis.
MISP is suited to incident analysts, security and ICT professionals, and malware reversers who need to manage and exchange threat information. Its API, streaming channels, and sharing controls may also fit teams automating intelligence workflows.