Kaspersky Threat Intelligence Portal
6.5#4 in threat intelligence platformsFree planFree planWebAPI
Visit| Fact | Kaspersky Threat Intelligence Portal | Threat Intelligence Platform |
|---|---|---|
| Company | Kaspersky is a global cybersecurity and digital privacy company founded in 1997. | Threat Intelligence Platform, LLC was incorporated in 2018 and is headquartered in Los Angeles, California, according to an interview with its founder and CEO. |
| Integrations | Kaspersky lists out-of-the-box connectors including Maltego, MISP, Splunk Enterprise Security, IBM QRadar, and Elastic SIEM. | The maker describes the APIs as integrable with cybersecurity products including CTI platforms, SIEM solutions and DRP solutions. |
| Intended users | Kaspersky presents the portal for SOC teams, threat analysts, and threat hunters. | The maker presents the APIs for enriching existing systems and analyzing indicators of compromise, third-party digital assets and attack surface exposure. |
| Purpose | The portal is a centralized investigation workspace that gives security teams access to current cyberthreat intelligence. | The platform combines threat intelligence feeds with in-house databases to analyze threat hosts and attack infrastructure in real time. |
The portal is aimed at SOC teams, threat analysts, and threat hunters handling investigation, incident response, and threat hunting. It may suit security teams that need indicator enrichment and sandbox analysis.
Threat Intelligence Platform suits cybersecurity teams that want to enrich existing systems or investigate indicators of compromise and digital assets. Its web interface and APIs cover host infrastructure, reputation, SSL, and malware checks.