Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Pulse Intelligence

Free#23 of 32 in Threat Intelligence PlatformsContainer Monitoring

Pulse Intelligence: A broad public-feed and enrichment workspace for self-hosted CTI operations. Ranked #23 of 32 in Threat Intelligence Platforms by our editors (7.5/10); pricing: Open source; best for self-hosted teams aggregating public feeds.

7.5/10Editor score
Pulse Intelligence7.5 Visit site

At a glance

  • Editor score
    7.5 / 10
  • Pricing
    Open source
  • Best for
    Self-hosted teams aggregating public feeds
  • Paid from
    Free
  • Indicator enrichment
    Yes
  • Facts checked
    20 Sep 2026
Pulse Intelligence screenshot
  • Where it wins

    • Ingests public feeds including CISA KEV, NVD, EPSS, OTX, and abuse.ch
    • Enriches indicators with OTX, AbuseIPDB, and VirusTotal
    • Supports hunts, scheduled alerts, ATT&CK mapping, exports, APIs, and reports
  • Where it doesn't

    • Requires Node.js, PostgreSQL, and Redis-compatible infrastructure
    • Self-hosted deployment places operations and maintenance with the team
    • Case management and AI are outside the described feature scope

Our verdict on Pulse Intelligence

Pulse Intelligence is an open-source, self-hosted threat intelligence platform for CTI analysts, junior intelligence teams, and SOC teams. It organizes threat actors, campaigns, indicators, vulnerabilities, reports, sources, and ATT&CK mappings in one workspace. Its deployment model targets teams that can provide Node.js, PostgreSQL, and Redis-compatible infrastructure, with an optional Docker Compose path. Web, Windows, macOS, Linux, and self-hosted environments are supported.

Its strongest fit is broad public-feed coverage paired with investigation workflows. Pulse Intelligence can ingest information from CISA KEV, NVD, FIRST EPSS, abuse.ch, OTX, vendor blogs, and security news. Indicators can be enriched through OTX, AbuseIPDB, and VirusTotal, while saved threat hunts support scheduled matching and new-match alerts. ATT&CK technique and tactic mapping adds structure for analysis, and scheduled Markdown reports help turn collected intelligence into recurring outputs. Teams working across existing security tools can use integrations with Microsoft Sentinel, Splunk, Elastic, and MISP.

Operational portability is another clear strength. Exports include CSV, STIX 2.1, MISP JSON, and Snort/Suricata formats, while scoped read-only API keys provide indicator, actor, and campaign endpoints. Administrative audit logging adds oversight for platform activity. The trade-off is ownership of the deployment stack: teams must run and maintain the application and its supporting services. Pulse Intelligence suits self-hosted teams that value public-feed aggregation, enrichment, hunts, and flexible exports. Organizations seeking a managed service, built-in case management, or AI capabilities should consider a platform with those functions explicitly included.

Your product? Our editors can test Pulse Intelligence in depth and publish a review, labelled as paid · from $149/mo →

Pulse Intelligence pricing

Plans Open sourceFree Free to use — no paid tier required for the core job.
See plans on github.com

Pulse Intelligence fact sheet

Free planNot verified
Paid fromFree
Indicator enrichmentYes
STIX/TAXII supportYes
Report managementYes
Workflow automationYes
Case managementNot verified
DeploymentSelf-hosted
DeploymentSelf-hosted
PlatformsWeb, Windows, macOS, Linux
SupportDocs, Community
Built forSmall business, Mid-market (editorial estimate)
Integrations11 integrations: CISA KEV, NVD, FIRST EPSS, abuse.ch, AlienVault OTX, AbuseIPDB …
PricingOpen source
Websitegithub.com
Facts checked20 Sep 2026

Pulse Intelligence integrations

Pulse Intelligence lists 11 integrations on its own site.

  • CISA KEV
  • NVD
  • FIRST EPSS
  • abuse.ch
  • AlienVault OTX
  • AbuseIPDB
  • VirusTotal
  • Microsoft Sentinel
  • Splunk
  • Elastic
  • MISP

Alternatives to Pulse Intelligence

See all Pulse Intelligence alternatives →

Also Ranked In

Pulse Intelligence is ranked in 2 of our directories.

Used Pulse Intelligence? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Pulse Intelligence for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — Pulse Intelligence 7.5/10

Pulse Intelligence is listed in our Threat Intelligence Platforms directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/pulse-intelligence/"><img src="https://www.itechguides.com/best/badge/pulse-intelligence.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update