Security Vision TIP vs Threat Intelligence Platform

Security Vision TIP collects, analyzes and enriches threat data to help security teams detect, investigate and respond to activity across infrastructure. It covers technical, tactical, operational and strategic indicators, including hashes, IP addresses, URLs, processes, vulnerabilities and attacker attribution. More than 50 connectors receive events from SIEM, NGFW, proxy and email systems, and new connectors can be developed. Supported formats include Syslog, CEF, LEEF, EMBLEM and Event log. TIP uses machine learning for DGA detection and offers match and retrospective searches across collected data. Indicators can be enriched using MITRE ATT&CK and services such as VirusTotal, Shodan, IPInfo.io and MaxMind Geo-IP. Analysts can initiate actions from graph and table views, including blocking an IP, changing a web-control policy, stopping a process or ending a user session. The self-hosted, browser-accessed client-server platform supports Linux and Windows Server 2016 and later, with an API for partner integrations. Pricing is calculated individually through sales; no product price or trial duration is stated.

Threat Intelligence Platform combines threat intelligence feeds with in-house databases to analyze threat hosts and attack infrastructure in real time. Its web interface provides details about a host and its underlying infrastructure. The Domain Infrastructure Analysis API returns web, mail, and name servers, known subdomains, IP addresses, geolocation, and subnet information. The Domain Reputation API assesses domains and IPv4 addresses against more than 120 parameters to calculate a reputation score. Other APIs cover SSL certificate chains, SSL configuration, malware checks, and connected domains. The APIs are presented for integration with cybersecurity products such as CTI platforms, SIEM solutions, and DRP solutions, and for enriching systems or examining indicators of compromise, third-party digital assets, and attack-surface exposure. The service is available on the web and through APIs, with cloud deployment. A free, fully functional trial requires no credit card or company information. The free subscription provides 100 credits after sign-up; web analysis costs 10 credits per request, and API requests cost 1–3 credits each. API use is limited to 100 requests per minute.