Pulse Intelligence
6.8#2 in threat intelligence platformsFree planFree planWebAPILinuxmacOS
VisitPulse Intelligence vs ThreatForge
ThreatForge
6.1#10 in threat intelligence platformsFree planFree planWebAPISelf-hosted
VisitWhat both publish
| Fact | Pulse Intelligence | ThreatForge |
|---|---|---|
| Deployment | The maker documents direct Node deployment and a Docker Compose full-stack deployment, with both the web app and worker kept running. | The README documents Docker Compose deployment, a web UI served by the API and interactive API documentation. |
| Integrations | Its public read-only API supports scoped keys and integrations such as analyst scripts, SOAR playbooks, and internal tools. | MISP, OpenCTI and generic integrations are listed as catalog entries and stubs in Community, while the Enterprise edition enables them. |
| Purpose | Pulse Intelligence is an open-source, self-hosted threat intelligence workspace for analysts and junior CTI teams. | ThreatForge is an open-source CTI and Digital Risk Protection platform for threat monitoring, brand protection and digital risk investigation. |
| Security | The repository lists Argon2id passwords, database-backed session cookies, hashed API keys, and an admin-only audit log. | The web UI uses JWT sessions in httpOnly and SameSite=Strict cookies, Argon2id password handling when available, and web security headers and login rate limiting. |
Pulse Intelligence plans
- Open-source self-hostedFree
ThreatForge plans
- Community EditionFree
- Enterprise EditionPriced on request
Pick Pulse Intelligence if…
Pulse Intelligence suits analysts, junior CTI teams, and SOC teams seeking a self-hosted threat intelligence workspace. It is intended for teams able to operate the required Node.js, PostgreSQL, and Redis-compatible services.
Pick ThreatForge if…
ThreatForge is intended for security analysts, SOC and fraud teams, and researchers who need to organize indicators, enrich observables, monitor brand abuse, or prioritize risk.