OODA Intelligence vs Pulse Intelligence

OODA Intelligence is a cloud platform for threat intelligence, data-leak detection, incident management, and SOAR automation. It monitors the surface, deep, and dark web with encrypted keywords and immediate alerts, searching combolists, stealer logs, forums, and marketplaces for exposed credentials and data. Seven intelligence areas cover domains, networks, phishing, brand protection, fake apps, social networks, and fraud. Incident tools include IOC tracking, MISP integration, file attachments, team collaboration, indicator enrichment, STIX/TAXII, report management, case management, and workflow automation. Integrations listed include Splunk, Sentinel, QRadar, Slack, Teams, MISP, Jira, REST API, and GraphQL. The REST API offers more than 50 endpoints with JWT authentication and rate limiting. Security controls include multi-tenant isolation, role-based access, a five-level hierarchy, and mandatory two-factor authentication. OODA lists LGPD/GDPR compliance, Fernet encryption, an immutable audit trail, and a 99.9% SLA. Access is through web and API; pricing is on request.

Pulse Intelligence is an open-source, self-hosted threat intelligence workspace for analyst workflows. It organizes threat actors, aliases, campaigns, indicators, reports, sources, CVEs and ATT&CK mappings, and ingests public feeds including CISA KEV, NVD, FIRST EPSS, abuse.ch, OTX, vendor blogs and security news. Indicator enrichment uses OTX, AbuseIPDB and VirusTotal, with Redis-backed quota controls. Analysts can save hunts across indicator fields, receive alerts for new matches and export results as CSV, STIX 2.1, MISP JSON, or Snort and Suricata rules. Scheduled Markdown reports can cover new indicators, KEV additions, hunt alerts and feed health. A public read-only API with scoped keys supports integrations; its default limit is 120 requests per API key per 60-second window, and indicator pages are capped at 500. The project lists Argon2id passwords, database-backed session cookies, hashed API keys and an admin-only audit log. Deployment requires Node.js 20.9+, PostgreSQL 17 or compatible PostgreSQL, and a Redis-compatible server. Native and Docker Compose deployment paths are documented.