Kaspersky Threat Intelligence Portal
Kaspersky Threat Intelligence Portal: A strong free option for indicator lookup, enrichment, and malware analysis. Ranked #13 of 32 in Threat Intelligence Platforms by our editors (7.9/10); pricing: Free plan; best for users needing free indicator lookup and analysis.
At a glance
- Editor score7.9 / 10
- PricingFree plan
- Best forUsers needing free indicator lookup and analysis
- Free planYes
- Indicator enrichmentYes
- Founded1997
- Facts checked20 Sep 2026
Where it wins
- Free access covers indicator lookup and contextual enrichment
- Cloud Sandbox supports file and web address analysis
- Exports, REST API, reports, and TAXII access extend investigations
Where it doesn't
- Premium capabilities require registered or premium access
- Premium access follows a demo or contact flow
- Focused on investigation rather than workflow or case management
Our verdict on Kaspersky Threat Intelligence Portal
Kaspersky Threat Intelligence Portal is a web-based service for investigating suspicious files, hashes, IPv4 addresses, domains, and web addresses. It is designed for security researchers, incident responders, and security operations teams that need to classify indicators, review related intelligence, analyze files or web addresses, and consult threat reports. The portal provides risk-zone classifications, WHOIS and DNS context, detections, related objects, malware analysis, and access to APT, crimeware, and industrial threat intelligence reporting.
The free plan is the main reason to consider the portal. It provides broad lookup and contextual enrichment, while registered and premium access add expanded reports, APIs, exports, threat feeds, and intelligence services. The published offering also includes a RESTful API for indicator lookups and file analysis, Cloud Sandbox analysis for uploaded files and web addresses, and export options in JSON, STIX, and CSV for premium investigation results. Premium access also covers features such as the worldwide cyber map, the premium MITRE ATT&CK threat landscape, and demo threat data feeds through a TAXII server.
Its ecosystem fit is strongest for teams that already work with OpenCTI or TAXII. Web and API access support both interactive investigation and programmatic lookup, while STIX and TAXII capabilities can connect intelligence work with established threat-sharing processes. The portal is narrower than a full security operations workflow platform: its emphasis is indicator investigation, enrichment, analysis, and reporting rather than workflow automation or case management. Choose it for free indicator research and a path to deeper intelligence services; consider an alternative if coordinated response workflows are the primary requirement.
Your product? Our editors can test Kaspersky Threat Intelligence Portal in depth and publish a review, labelled as paid · from $149/mo →
Kaspersky Threat Intelligence Portal pricing
Kaspersky Threat Intelligence Portal fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Not verified |
| Indicator enrichment | Yes |
| STIX/TAXII support | Yes |
| Report management | Yes |
| Workflow automation | Not verified |
| Case management | Not verified |
| Deployment | Cloud |
| Deployment | Cloud |
| Platforms | Web |
| Support | Docs |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 2 integrations: OpenCTI, TAXII |
| Pricing | Free plan |
| Website | opentip.kaspersky.com |
| Facts checked | 20 Sep 2026 |
Kaspersky Threat Intelligence Portal integrations
Kaspersky Threat Intelligence Portal lists 2 integrations on its own site.
- OpenCTI
- TAXII
Alternatives to Kaspersky Threat Intelligence Portal
- Anomali PlatformA broad enterprise TIP combining intelligence operations, telemetry, cases, automation, and AI.9.3
- Recorded Future Intelligence CloudA broad intelligence platform for teams that need risk context across security workflows.9.2
- Group-IB Threat Intelligence PlatformA broad cloud platform for actor research, dark-web monitoring, leaks, and intelligence operations.9.0
See all Kaspersky Threat Intelligence Portal alternatives →
Used Kaspersky Threat Intelligence Portal? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Kaspersky Threat Intelligence Portal for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Kaspersky Threat Intelligence Portal is listed in our Threat Intelligence Platforms directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/kaspersky-threat-intelligence-portal/"><img src="https://www.itechguides.com/best/badge/kaspersky-threat-intelligence-portal.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update