Skip to content
SPECIFICTION
Get listed

DAS-Security ATIP

ti.dbappsecurity.com.cn

WebAPISelf-hosted
Visit ti.dbappsecurity.com.cn
Spec score 7.8 #8 of 32 in Threat Intelligence Platforms

What it is

DAS-Security ATIP is a paid threat-intelligence center available through web, API, and self-hosted deployment. It combines feeds from DAS-Security, third-party providers, organizational sharing, and locally produced intelligence, then normalizes, deduplicates, merges, and confidence-scores records. Coverage includes IP addresses, domains, URLs, file hashes, vulnerabilities, and threat organizations with TTP matrices. The listed data includes 11B+ intrusion-detection IPs, 312M+ compromised-detection records, 10B+ file-hash samples, 5,000M+ malicious URLs, 35K+ vulnerability records, and 600+ threat organizations. Hengnao AI supports collection, translation, summarization, analysis, risk scoring, knowledge graphs, and RAG retrieval. Teams can investigate exposure, website tampering, attack IPs, and domains, while alerts and emergency responses are classified by threat level and impact. REST API, Kafka, offline packages, and MCP provide consumption options, including integrations with SIEM, SOAR, NGSOC, AiLPHA, and security devices. Fully on-premise deployment supports connected, air-gapped, and isolated environments. Pricing is available on request.

Spec sheet

Purpose
ATIP is an enterprise threat intelligence management platform for building an on-premise intelligence center.Read 11 Oct 2026 · ti.dbappsecurity.com.cn
Integrations
The page names Tencent, Qi-AnXin, ThreatBook, 360, SkyEye, and Kaspersky as supported intelligence providers.Read 11 Oct 2026 · ti.dbappsecurity.com.cn
Support
The product page invites users to contact the threat intelligence team for product details, demos, or customized solutions and lists 400-6059-110.Read 11 Oct 2026 · ti.dbappsecurity.com.cn
Headquarters
Hangzhou, Zhejiang, ChinaRead 28 Sep 2026 · ti.dbappsecurity.com.cn
Founded
2007Read 28 Sep 2026 · ti.dbappsecurity.com.cn
Maker
DAS-Security is the English name used on the product page for 安恒信息技术股份有限公司, founded in Hangzhou in 2007.Read 11 Oct 2026 · dbappsecurity.com.cn
AI clients
Its MCP threat-intelligence service is listed as compatible with Claude Desktop, Cursor, and Kiro.Read 10 Oct 2026 · ti.dbappsecurity.com.cn
AI intelligence workflow
Its workflow describes automated collection, multilingual translation, text summarization, threat analysis, AI risk scoring, knowledge graphs, and RAG retrieval.Read 10 Oct 2026 · ti.dbappsecurity.com.cn
API access
The threat intelligence API uses API-key authentication, returns JSON, and charges one quota per query.Read 11 Oct 2026 · ti.dbappsecurity.com.cn
Asset and attribution analysis
It offers internet exposure checks, website-tampering risk alerts, attack-IP profiling, and IP/domain tracing.Read 10 Oct 2026 · ti.dbappsecurity.com.cn
Automated response
The platform supports automated blocking through firewalls, WAF, IDS/IPS, and EDR, plus notifications through DingTalk and WeCom.Read 11 Oct 2026 · ti.dbappsecurity.com.cn
Consumption options
Intelligence can be consumed through API, Kafka streaming, offline packages, or MCP, with integrations for SIEM, SOAR, NGSOC, AiLPHA, and security devices.Read 11 Oct 2026 · ti.dbappsecurity.com.cn
Deployment and data control
The page describes fully on-premise deployment and says intelligence data stays within the organization; it supports internet-connected, air-gapped, and network-isolated scenarios.Read 11 Oct 2026 · ti.dbappsecurity.com.cn
Intelligence processing
Its fusion engine normalizes, deduplicates, and merges intelligence records and scores their confidence.Read 11 Oct 2026 · ti.dbappsecurity.com.cn
Intelligence sources
It supports feeds from DAS-Security, third-party providers, organizational sharing, and locally produced intelligence.Read 11 Oct 2026 · ti.dbappsecurity.com.cn
IOC coverage
It covers IP addresses, domains, URLs, and file hashes, with threat analysis fields and blocking-level judgments.Read 10 Oct 2026 · ti.dbappsecurity.com.cn
Reporting
It can generate daily, weekly, and monthly intelligence consumption reports and deliver them by scheduled email.Read 11 Oct 2026 · ti.dbappsecurity.com.cn
Risk response
It describes threat alerts and emergency response classification based on threat level and impact scope.Read 10 Oct 2026 · ti.dbappsecurity.com.cn
Security tools
The page lists cloud-sandbox dynamic analysis for submitted files or URLs and security scanning for AI agent skill packages.Read 10 Oct 2026 · ti.dbappsecurity.com.cn
Threat data
The page lists 11B+ intrusion-detection IPs, 312M+ compromised-detection records, 10B+ file-hash samples, and 5,000M+ malicious URLs.Read 10 Oct 2026 · ti.dbappsecurity.com.cn
Threat discovery
It combines multi-source threat intelligence with AI analysis to help identify APTs, zero-day exploits, and other sophisticated attacks.Read 11 Oct 2026 · ti.dbappsecurity.com.cn
Updates
The platform supports direct, proxy, gateway, and offline updates, with full refreshes daily.Read 11 Oct 2026 · ti.dbappsecurity.com.cn
Vulnerabilities and actors
It lists 35K+ vulnerability records and 600+ threat organizations with TTP attack matrices.Read 10 Oct 2026 · ti.dbappsecurity.com.cn
Vulnerability management
It correlates vulnerability intelligence with enterprise assets and uses Adaptive Vulnerability Prioritization Technology to rescore severity.Read 11 Oct 2026 · ti.dbappsecurity.com.cn

Strong points and limits

Strong points

  • Covers IPs, domains, URLs, and file hashes
  • Supports API, Kafka, offline, and MCP consumption
  • Fully on-premise and air-gapped deployment
  • Automated blocking through multiple security controls
  • Daily full intelligence refreshes

Limits

  • Paid pricing is available only on request
  • API queries consume one quota each
  • Large data volumes may require operational capacity

Who it suits

It suits security teams, SOC platforms, SIEM or SOAR operators, and organizations needing on-premise or isolated intelligence processing. The MCP service is listed as compatible with Claude Desktop, Cursor, and Kiro.

Verdict

DAS-Security ATIP specifies broad indicator coverage, multiple delivery methods, and detailed response workflows. Its self-hosted and isolated-environment options suit organizations with strict data-control requirements, while pricing must be requested.

Where Specifiction places it

Alternatives to DAS-Security ATIPAll alternatives →

MISP From €0.61/mo · Free plan 9.0 Visit