Kaspersky Threat Intelligence Portal
6.5#4 in threat intelligence platformsFree planFree planWebAPI
VisitKaspersky Threat Intelligence Portal vs Pulse Intelligence
Pulse Intelligence
6.8#2 in threat intelligence platformsFree planFree planWebAPILinuxmacOS
VisitWhat both publish
| Fact | Kaspersky Threat Intelligence Portal | Pulse Intelligence |
|---|---|---|
| API | The portal provides a REST API for web address lookups using an API token. | The public API is read-only, supports scoped API keys, and is intended for analyst scripts, SOAR playbooks, internal tools, and integrations. |
| Integrations | Kaspersky lists out-of-the-box connectors including Maltego, MISP, Splunk Enterprise Security, IBM QRadar, and Elastic SIEM. | Its public read-only API supports scoped keys and integrations such as analyst scripts, SOAR playbooks, and internal tools. |
| Purpose | The portal is a centralized investigation workspace that gives security teams access to current cyberthreat intelligence. | Pulse Intelligence is an open-source, self-hosted threat intelligence workspace for analysts and junior CTI teams. |
Kaspersky Threat Intelligence Portal plans
- Free accessFree
Pulse Intelligence plans
- Open-source self-hostedFree
Pick Kaspersky Threat Intelligence Portal if…
The portal is aimed at SOC teams, threat analysts, and threat hunters handling investigation, incident response, and threat hunting. It may suit security teams that need indicator enrichment and sandbox analysis.
Pick Pulse Intelligence if…
Pulse Intelligence suits analysts, junior CTI teams, and SOC teams seeking a self-hosted threat intelligence workspace. It is intended for teams able to operate the required Node.js, PostgreSQL, and Redis-compatible services.