DAS-Security ATIP vs Pulse Intelligence

DAS-Security ATIP is a paid threat-intelligence center available through web, API, and self-hosted deployment. It combines feeds from DAS-Security, third-party providers, organizational sharing, and locally produced intelligence, then normalizes, deduplicates, merges, and confidence-scores records. Coverage includes IP addresses, domains, URLs, file hashes, vulnerabilities, and threat organizations with TTP matrices. The listed data includes 11B+ intrusion-detection IPs, 312M+ compromised-detection records, 10B+ file-hash samples, 5,000M+ malicious URLs, 35K+ vulnerability records, and 600+ threat organizations. Hengnao AI supports collection, translation, summarization, analysis, risk scoring, knowledge graphs, and RAG retrieval. Teams can investigate exposure, website tampering, attack IPs, and domains, while alerts and emergency responses are classified by threat level and impact. REST API, Kafka, offline packages, and MCP provide consumption options, including integrations with SIEM, SOAR, NGSOC, AiLPHA, and security devices. Fully on-premise deployment supports connected, air-gapped, and isolated environments. Pricing is available on request.

Pulse Intelligence is an open-source, self-hosted threat intelligence workspace for analyst workflows. It organizes threat actors, aliases, campaigns, indicators, reports, sources, CVEs and ATT&CK mappings, and ingests public feeds including CISA KEV, NVD, FIRST EPSS, abuse.ch, OTX, vendor blogs and security news. Indicator enrichment uses OTX, AbuseIPDB and VirusTotal, with Redis-backed quota controls. Analysts can save hunts across indicator fields, receive alerts for new matches and export results as CSV, STIX 2.1, MISP JSON, or Snort and Suricata rules. Scheduled Markdown reports can cover new indicators, KEV additions, hunt alerts and feed health. A public read-only API with scoped keys supports integrations; its default limit is 120 requests per API key per 60-second window, and indicator pages are capped at 500. The project lists Argon2id passwords, database-backed session cookies, hashed API keys and an admin-only audit log. Deployment requires Node.js 20.9+, PostgreSQL 17 or compatible PostgreSQL, and a Redis-compatible server. Native and Docker Compose deployment paths are documented.