Kaspersky Threat Intelligence Portal
6.5#4 in threat intelligence platformsFree planFree planWebAPI
VisitKaspersky Threat Intelligence Portal vs Yeti
What both publish
| Fact | Kaspersky Threat Intelligence Portal | Yeti |
|---|---|---|
| API | The portal provides a REST API for web address lookups using an API token. | Yeti provides a REST API, including endpoints for importing observables from text, files, and URLs. |
| Integrations | Kaspersky lists out-of-the-box connectors including Maltego, MISP, Splunk Enterprise Security, IBM QRadar, and Elastic SIEM. | Yeti describes exporting data in user-defined formats for ingestion by third-party SIEM and DFIR applications. |
| Purpose | The portal is a centralized investigation workspace that gives security teams access to current cyberthreat intelligence. | Yeti describes itself as a Forensics Intelligence platform and pipeline for DFIR teams, intended to bridge CTI and DFIR practitioners. |
Kaspersky Threat Intelligence Portal plans
- Free accessFree
Yeti plans
No prices published.
Pick Kaspersky Threat Intelligence Portal if…
The portal is aimed at SOC teams, threat analysts, and threat hunters handling investigation, incident response, and threat hunting. It may suit security teams that need indicator enrichment and sandbox analysis.
Pick Yeti if…
Yeti suits DFIR and CTI teams managing shared threat data, forensic artifacts, and automated analysis. It is aimed at organizations able to operate a Docker-based self-hosted deployment.