Kaspersky Threat Intelligence Portal
Ranked in Threat Intelligence Platforms ·Free plan
About
Kaspersky Threat Intelligence Portal is a cloud investigation workspace for security teams working with current cyberthreat intelligence. It supports indicator enrichment, malware analysis, threat actor and campaign tracking, and incident response. Threat Lookup connects related threats in Kaspersky’s knowledge base, while Threat Analysis examines suspicious files using multiple analysis layers. Users can look up IP addresses, file hashes, domains, and web addresses; registered users can submit URLs to a sandbox for a report on page activity without opening the page in their browser. KIRA provides AI summaries, OSINT search, relationship tracing, and human-readable verdicts, while AI actor profiles link updated tactics, techniques, procedures, campaigns, and indicators when related Kaspersky reports are published. Remote MCP connects compatible assistants such as Claude and ChatGPT to portal data. The REST API supports URL lookups with a token and file submissions for sandbox analysis, up to 256 MB. Listed connectors include Maltego, MISP, Splunk Enterprise Security, IBM QRadar, and Elastic SIEM. Free access is available, with limited sandbox executions; full reports require demo access.
Who it is for
The portal suits SOC teams, threat analysts, and threat hunters handling investigations, incident response, or threat hunting. Its API and listed connectors may fit teams integrating threat intelligence into existing tools.
What is good
- Supports IP, hash, domain, and URL lookups.
- KIRA summarizes intelligence and traces relationships.
- REST API supports URL lookup and file submissions.
- Connectors include Splunk Enterprise Security and Elastic SIEM.
What to know first
- Free access limits sandbox file and URL executions.
- Some report sections may have no data.
- Full reports require demo access.
- Submitted samples must not be confidential or commercially sensitive.
Verdict
The portal combines threat lookup, file and URL analysis, AI assistance, and API access for security investigations. Check access limits and submission terms before sending samples or relying on full reports.
Compared on threat intelligence platforms
- Free plan
- Yesopentip.kaspersky.com
- Indicator enrichment
- Yesopentip.kaspersky.com
- STIX/TAXII support
- Yesopentip.kaspersky.com
- Report management
- Yesopentip.kaspersky.com
- Deployment
- cloudopentip.kaspersky.com
Facts
- Purpose
- The portal is a centralized investigation workspace that gives security teams access to current cyberthreat intelligence.kaspersky.com · 8 Oct 2026
- Investigations
- It supports IOC enrichment, malware analysis, threat actor and campaign tracking, and incident response.kaspersky.com · 8 Oct 2026
- AI summaries
- AI automation turns threat information into concise, actionable intelligence to help analysts triage and investigate.kaspersky.com · 8 Oct 2026
- Actor profiles
- AI-powered actor profiles link updated TTPs, campaigns, and technical indicators when related Kaspersky reports are published.kaspersky.com · 8 Oct 2026
- AI integrations
- Remote MCP support connects the portal to compatible assistants such as Claude and ChatGPT.kaspersky.com · 8 Oct 2026
- Threat Lookup
- Threat Lookup provides access to Kaspersky's cyberthreat knowledge base and connections between related threats.kaspersky.com · 8 Oct 2026
- Threat analysis
- Threat Analysis provides multi-layered analysis of suspicious files to detect previously unknown threats.kaspersky.com · 8 Oct 2026
- API
- The portal provides a REST API for web address lookups using an API token.opentip.kaspersky.com · 8 Oct 2026
- File analysis API
- The API can submit a file for sandbox analysis and return a basic report; the documented maximum file size is 256 MB.opentip.kaspersky.com · 8 Oct 2026
- Integrations
- Kaspersky lists out-of-the-box connectors including Maltego, MISP, Splunk Enterprise Security, IBM QRadar, and Elastic SIEM.usa.kaspersky.com · 8 Oct 2026
- Free access
- Kaspersky describes a free version of the Threat Intelligence Portal that provides access to trusted threat intelligence.kaspersky.com · 8 Oct 2026
- Trial access
- Users can request trial access by submitting contact information and selecting the demo request option.opentip.kaspersky.com · 8 Oct 2026
- Access limits
- General access provides general information about submitted objects, while some report sections may have no data and full reports require demo access.opentip.kaspersky.com · 8 Oct 2026
- Submission terms
- The general access terms say submitted samples must not be confidential or commercially sensitive and restrict use to non-commercial malware detection and prevention.opentip.kaspersky.com · 8 Oct 2026
- Intended users
- Kaspersky presents the portal for SOC teams, threat analysts, and threat hunters.kaspersky.com · 8 Oct 2026
- File analysis
- File analysis uses dynamic, static, and behavioral analysis technologies and a global cloud reputation system to detect threats.opentip.kaspersky.com · 8 Oct 2026
- Indicator lookup
- Users can look up IP addresses, file hashes, domains, and web addresses to validate and prioritize alerts and incidents.opentip.kaspersky.com · 8 Oct 2026
- URL sandbox
- Registered users can submit web addresses to a URL Sandbox and receive a report on page activity, including downloads and JavaScript, without opening the page in their own browser.opentip.kaspersky.com · 8 Oct 2026
- AI features
- KIRA provides AI summarization and OSINT search, and can automatically trace relationships between searched objects and produce a human-readable verdict.kaspersky.com · 8 Oct 2026
- AI connectivity
- Remote MCP support lets users connect compatible AI assistants such as Claude and ChatGPT to Portal data.kaspersky.com · 8 Oct 2026
- Free access limits
- The free version provides registered users a limited number of suspicious file and URL executions in Kaspersky Cloud Sandbox.kaspersky.com · 8 Oct 2026
- Terms and sample handling
- The General Access terms say submitted samples must not be confidential or commercially sensitive and grant Kaspersky rights to use, store, edit, reproduce, distribute, and delete their contents.opentip.kaspersky.com · 8 Oct 2026
- Who it is for
- Kaspersky describes the Portal as a workspace for SOC teams and threat analysts, including incident response and threat hunting use cases.kaspersky.com · 8 Oct 2026
- Company
- Kaspersky is a global cybersecurity and digital privacy company founded in 1997.kaspersky.com · 8 Oct 2026
Company
- Founded
- 1997opentip.kaspersky.com · 28 Sept 2026
Best Kaspersky Threat Intelligence Portal alternatives
See all 20
Where it ranks on Inferse
Sources
- kaspersky.com/enterprise-security/threat-intelligence· checked 8 Oct 2026
- opentip.kaspersky.com/Help/Doc_data/en-US/URLLookupAPI.htm· checked 8 Oct 2026
- opentip.kaspersky.com/Help/Doc_data/en-US/SubmitFileAPI.htm· checked 8 Oct 2026
- usa.kaspersky.com/enterprise-security/threat-intelligence· checked 8 Oct 2026
- kaspersky.com/enterprise-security/threat-intelligence· checked 8 Oct 2026
- opentip.kaspersky.com/Help/Doc_data/en-US/RequestingDemo.htm· checked 8 Oct 2026
- opentip.kaspersky.com/terms-of-use· checked 8 Oct 2026
- opentip.kaspersky.com/howto/· checked 8 Oct 2026
- kaspersky.com/about/press-releases/kaspersky-threat-i· checked 8 Oct 2026
- kaspersky.com/about/press-center· checked 8 Oct 2026
- opentip.kaspersky.com· checked 28 Sept 2026