Security Vision TIP vs Yeti
Security Vision TIP
securityvision.ruYeti
yeti-platform.ioSide by side
| Figure | Security Vision TIP | Yeti |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| Linux | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 0 |
| Spec score · Threat Intelligence Platforms | 7.9 (#6) | 6.7 (#27) |
| API | The platform has an API for interaction with technology partners and their APIs. | Yeti provides a REST API, including endpoints for importing observables from text, files, and URLs. |
| Enrichment | Automatic indicator enrichment uses MITRE ATT&CK, VirusTotal, Shodan, KasperskyOpenTIP, IPgeolocation.io, IPInfo.io, MaxMind Geo-IP, HaveIBeenPwned and LOLBAS. | The documentation gives VirusTotal data enrichment as an analytics example and says analytics can be extended with private scripts. |
| Purpose | Security Vision TIP collects, analyzes and enriches cybersecurity threat data and supports infrastructure detection, investigation and response. | Yeti describes itself as a Forensics Intelligence platform and pipeline for DFIR teams, intended to bridge CTI and DFIR practitioners. |
Plans
In their own words
Security Vision TIP
Security Vision TIP collects, analyzes and enriches threat data to help security teams detect, investigate and respond to activity across infrastructure. It covers technical, tactical, operational and strategic indicators, including hashes, IP addresses, URLs, processes, vulnerabilities and attacker attribution. More than 50 connectors receive events from SIEM, NGFW, proxy and email systems, and new connectors can be developed. Supported formats include Syslog, CEF, LEEF, EMBLEM and Event log. TIP uses machine learning for DGA detection and offers match and retrospective searches across collected data. Indicators can be enriched using MITRE ATT&CK and services such as VirusTotal, Shodan, IPInfo.io and MaxMind Geo-IP. Analysts can initiate actions from graph and table views, including blocking an IP, changing a web-control policy, stopping a process or ending a user session. The self-hosted, browser-accessed client-server platform supports Linux and Windows Server 2016 and later, with an API for partner integrations. Pricing is calculated individually through sales; no product price or trial duration is stated.