EclecticIQ Platform vs Pulse Intelligence
EclecticIQ Platform
eclecticiq.comPulse Intelligence
github.comSide by side
| Figure | EclecticIQ Platform | Pulse Intelligence |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 2 | 1 |
| Spec score · Threat Intelligence Platforms | 7.5 (#12) | 8.4 (#3) |
| Deployment | Foundation is delivered as a single cloud deployment, while Enterprise can be deployed in the cloud, on premises, or air-gapped. | The maker documents direct Node deployment and a Docker Compose full-stack deployment, with both the web app and worker kept running. |
| Integrations | The maker describes Foundation as including more than 100 integrations, and its documentation lists integrations such as CrowdStrike, Cisco, Splunk, and VirusTotal. | Its public read-only API supports scoped keys and integrations such as analyst scripts, SOAR playbooks, and internal tools. |
| Purpose | Intelligence Center is an AI-embedded threat intelligence platform that helps teams prioritize threats relevant to their business. | Pulse Intelligence is an open-source, self-hosted threat intelligence workspace for analysts and junior CTI teams. |
| Security | EclecticIQ says it is certified to ISO 9001 and ISO 27001 standards. | The repository lists Argon2id passwords, database-backed session cookies, hashed API keys, and an admin-only audit log. |
Plans
EclecticIQ Platform
- Intelligence Center EnterprisePriced on request
- Intelligence Center FoundationPriced on request
In their own words
EclecticIQ Platform
EclecticIQ Platform has no write-up on Specifiction yet; its figures are above.
Pulse Intelligence
Pulse Intelligence is an open-source, self-hosted threat intelligence workspace for analyst workflows. It organizes threat actors, aliases, campaigns, indicators, reports, sources, CVEs and ATT&CK mappings, and ingests public feeds including CISA KEV, NVD, FIRST EPSS, abuse.ch, OTX, vendor blogs and security news. Indicator enrichment uses OTX, AbuseIPDB and VirusTotal, with Redis-backed quota controls. Analysts can save hunts across indicator fields, receive alerts for new matches and export results as CSV, STIX 2.1, MISP JSON, or Snort and Suricata rules. Scheduled Markdown reports can cover new indicators, KEV additions, hunt alerts and feed health. A public read-only API with scoped keys supports integrations; its default limit is 120 requests per API key per 60-second window, and indicator pages are capped at 500. The project lists Argon2id passwords, database-backed session cookies, hashed API keys and an admin-only audit log. Deployment requires Node.js 20.9+, PostgreSQL 17 or compatible PostgreSQL, and a Redis-compatible server. Native and Docker Compose deployment paths are documented.