Kaspersky Threat Intelligence Portal
6.5#4 in threat intelligence platformsFree planFree planWebAPI
Visit| Fact | Kaspersky Threat Intelligence Portal | ThreatForge |
|---|---|---|
| Integrations | Kaspersky lists out-of-the-box connectors including Maltego, MISP, Splunk Enterprise Security, IBM QRadar, and Elastic SIEM. | MISP, OpenCTI and generic integrations are listed as catalog entries and stubs in Community, while the Enterprise edition enables them. |
| Intended users | Kaspersky presents the portal for SOC teams, threat analysts, and threat hunters. | It is described as helping security analysts, SOC teams, fraud teams and researchers organize indicators, enrich observables, monitor brand abuse and prioritize risk. |
| Purpose | The portal is a centralized investigation workspace that gives security teams access to current cyberthreat intelligence. | ThreatForge is an open-source CTI and Digital Risk Protection platform for threat monitoring, brand protection and digital risk investigation. |
The portal is aimed at SOC teams, threat analysts, and threat hunters handling investigation, incident response, and threat hunting. It may suit security teams that need indicator enrichment and sandbox analysis.
ThreatForge is intended for security analysts, SOC and fraud teams, and researchers who need to organize indicators, enrich observables, monitor brand abuse, or prioritize risk.