Nirad TIP vs Pulse Intelligence

Nirad TIP is a threat intelligence platform centered on actors targeting India. Nirad’s Threat Research Team curates intelligence covering APT activity, BFSI phishing infrastructure, and critical-infrastructure threats. The product page reports 1.78 million indicators tracked and 14 APT campaigns monitored, using sources including NBTF, Mandiant, MISP, Abuse.ch, NCIIPC, and CERT-In. Indicators are enriched, scored, and mapped to MITRE ATT&CK, with hunting across actors, campaigns, sightings, and TLP-marked sharing communities. A policy engine can block, flag, or notify according to confidence thresholds. High-confidence indicators can be sent as block rules to Nirad Connect 5G and EdgeX 5G devices; the page states enforcement latency under three seconds. Nirad lists bidirectional STIX 2.1 and TAXII 2.1 exchange, SIEM connectors for Splunk, QRadar, ArcSight, Sentinel, and Wazuh, plus a REST API. Deployment options include on-premises, air-gapped, and Indian-cloud environments with India data residency. Access controls include role-based access, SAML SSO, and tamper-evident audit logs. Pricing is available on request.

Pulse Intelligence is an open-source, self-hosted threat intelligence workspace for analyst workflows. It organizes threat actors, aliases, campaigns, indicators, reports, sources, CVEs and ATT&CK mappings, and ingests public feeds including CISA KEV, NVD, FIRST EPSS, abuse.ch, OTX, vendor blogs and security news. Indicator enrichment uses OTX, AbuseIPDB and VirusTotal, with Redis-backed quota controls. Analysts can save hunts across indicator fields, receive alerts for new matches and export results as CSV, STIX 2.1, MISP JSON, or Snort and Suricata rules. Scheduled Markdown reports can cover new indicators, KEV additions, hunt alerts and feed health. A public read-only API with scoped keys supports integrations; its default limit is 120 requests per API key per 60-second window, and indicator pages are capped at 500. The project lists Argon2id passwords, database-backed session cookies, hashed API keys and an admin-only audit log. Deployment requires Node.js 20.9+, PostgreSQL 17 or compatible PostgreSQL, and a Redis-compatible server. Native and Docker Compose deployment paths are documented.