DAS-Security ATIP vs Kaspersky Threat Intelligence Portal

DAS-Security ATIP is a paid threat-intelligence center available through web, API, and self-hosted deployment. It combines feeds from DAS-Security, third-party providers, organizational sharing, and locally produced intelligence, then normalizes, deduplicates, merges, and confidence-scores records. Coverage includes IP addresses, domains, URLs, file hashes, vulnerabilities, and threat organizations with TTP matrices. The listed data includes 11B+ intrusion-detection IPs, 312M+ compromised-detection records, 10B+ file-hash samples, 5,000M+ malicious URLs, 35K+ vulnerability records, and 600+ threat organizations. Hengnao AI supports collection, translation, summarization, analysis, risk scoring, knowledge graphs, and RAG retrieval. Teams can investigate exposure, website tampering, attack IPs, and domains, while alerts and emergency responses are classified by threat level and impact. REST API, Kafka, offline packages, and MCP provide consumption options, including integrations with SIEM, SOAR, NGSOC, AiLPHA, and security devices. Fully on-premise deployment supports connected, air-gapped, and isolated environments. Pricing is available on request.

Kaspersky Threat Intelligence Portal is a cloud investigation workspace that gives security teams access to current cyberthreat intelligence. Its tools support indicator enrichment, malware analysis, threat actor and campaign tracking, and incident response. Threat Lookup connects related threats in Kaspersky’s knowledge base, while Threat Analysis examines suspicious files using multiple analysis layers. AI features provide summaries for triage and investigation, actor profiles linking updated tactics, techniques, procedures, campaigns, and indicators in related reports, plus OSINT search and relationship tracing through KIRA. Remote MCP can connect compatible assistants such as Claude and ChatGPT to portal data. Users can look up IP addresses, hashes, domains, and web addresses; registered users can submit URLs to a sandbox for reports on page activity. The REST API supports URL lookups using a token and file submissions for sandbox analysis, with a documented maximum file size of 256 MB. Listed connectors include Maltego, MISP, Splunk Enterprise Security, IBM QRadar, and Elastic SIEM. Free access is available, with limited suspicious-file and URL executions. General access may show no data in some report sections; full reports require demo access.