Flashpoint Ignite vs Pulse Intelligence
Flashpoint Ignite
flashpoint.ioPulse Intelligence
github.comSide by side
| Figure | Flashpoint Ignite | Pulse Intelligence |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 1 | 1 |
| Spec score · Threat Intelligence Platforms | 7.8 (#9) | 8.4 (#3) |
| API | Flashpoint says its Technical Indicators API provides MISP endpoints and STIX/TAXII 2.1 endpoints for automated information sharing. | The public API is read-only, supports scoped API keys, and is intended for analyst scripts, SOAR playbooks, internal tools, and integrations. |
| Integrations | Flashpoint describes API access, pre-built integrations for SIEM, TIP, and SOAR tools, and support for STIX and TAXII data formats. | Its public read-only API supports scoped keys and integrations such as analyst scripts, SOAR playbooks, and internal tools. |
| Product | Flashpoint Ignite combines threat data, human expertise, and automated analysis to help identify and respond to cyber, fraud, vulnerability, physical, and national security threats. | Pulse Intelligence is an open-source, self-hosted threat intelligence platform for analyst workflows. |
| Purpose | Flashpoint Ignite combines data, human expertise, and automated analysis to help organizations identify and remediate cyber, fraud, vulnerability, physical security, and national security risks. | Pulse Intelligence is an open-source, self-hosted threat intelligence workspace for analysts and junior CTI teams. |
| Security controls | Flashpoint says Ignite users can tailor dashboards and workspaces to priority intelligence requirements, manage access with granular controls, and set custom alerts. | The README lists Argon2id passwords, database-backed session cookies, hashed API keys, and an admin-only audit log. |
Plans
In their own words
Flashpoint Ignite
Flashpoint Ignite is a cloud platform for organizations tracking cyber, fraud, vulnerability, physical security, and national security risks. It combines threat data, automated analysis, and human expertise, with intelligence that also covers external attack surfaces. Users can search more than 3.6 petabytes of text and image data and explore results through interactive charts, graphs, and maps. Alerts can be tailored by keywords, filters, collection scope, and user roles; analyst-written reports cover technical analysis, geopolitical events, and threat actors. Integrated AI provides summaries and research guidance. Flashpoint says its vulnerability intelligence identifies some vulnerabilities about two weeks before NVD and includes more than 100,000 vulnerabilities absent from the CVE database. Listed integrations include Anomali ThreatStream, ThreatConnect, ServiceNow, Splunk Phantom, Microsoft Sentinel, Slack, MISP, and STIX/TAXII 2.1. Users can also request bespoke analysis from Flashpoint analysts. The platform is available through web and API; pricing is by request, with no numeric price shown.
Pulse Intelligence
Pulse Intelligence is an open-source, self-hosted threat intelligence workspace for analyst workflows. It organizes threat actors, aliases, campaigns, indicators, reports, sources, CVEs and ATT&CK mappings, and ingests public feeds including CISA KEV, NVD, FIRST EPSS, abuse.ch, OTX, vendor blogs and security news. Indicator enrichment uses OTX, AbuseIPDB and VirusTotal, with Redis-backed quota controls. Analysts can save hunts across indicator fields, receive alerts for new matches and export results as CSV, STIX 2.1, MISP JSON, or Snort and Suricata rules. Scheduled Markdown reports can cover new indicators, KEV additions, hunt alerts and feed health. A public read-only API with scoped keys supports integrations; its default limit is 120 requests per API key per 60-second window, and indicator pages are capped at 500. The project lists Argon2id passwords, database-backed session cookies, hashed API keys and an admin-only audit log. Deployment requires Node.js 20.9+, PostgreSQL 17 or compatible PostgreSQL, and a Redis-compatible server. Native and Docker Compose deployment paths are documented.