FREEDOM251

Freedom251 › Compare

Side by side

MISP vs Pulse Intelligence

Both stand on threat intelligence platforms. Which one you can start free with, which one lets you read the code, and what each costs once you pay.

MISP

Free plan Open source APILinuxSelf-hosted+1

MISP brings threat-intelligence collection, analysis, sharing controls, and automation into one platform. The software is free, while prioritized support and training are paid options.

Visit MISP

Pulse Intelligence

Free plan APILinuxMac+3

Choose Pulse Intelligence if your team wants an open-source, self-hosted threat intelligence workspace with feed ingestion, enrichment, saved hunts, exports, and scheduled reports. It requires a Node.js, PostgreSQL, and Redis-compatible deployment, so teams without those components should look elsewhere.

Visit Pulse Intelligence

The facts

MISPPulse Intelligence
Free planYesYes
Open sourceYesNot published
Runs onAPI, Linux, Self-hosted, WebAPI, Linux, Mac, Self-hosted, Web, Windows
Lowest paid planSee the plansFree or on request
Plans published71
MakerNot publishedNot published
Websitemisp-project.orggithub.com
On threat intelligence platforms#1 of 32#3 of 32

MISP: what it does well

  • Free, open-source software under AGPL
  • Sharing controls reach individual attributes
  • Instances can synchronize intelligence in real time
  • Supports multiple formats, APIs, and streaming channels
  • Can run on-premise, in the cloud, or as SaaS

What to know first

  • Yearly support contract covers five prioritized issues
  • Custom features are usually project-based
  • Virtual hosting lists 100 GB of HDD space
  • Dedicated hosting lists 500 GB of HDD space

Pulse Intelligence: what it does well

  • Tracks actors, campaigns, indicators, CVEs, and ATT&CK mappings.
  • Ingests public feeds from CISA KEV, NVD, OTX, and others.
  • Enriches indicators through OTX, AbuseIPDB, and VirusTotal.
  • Exports filtered indicators in CSV, STIX 2.1, MISP JSON, and rule formats.
  • Creates scheduled Markdown reports and alerts for new hunt matches.

What to know first

  • Requires Node.js 20.9+, PostgreSQL, and a Redis-compatible server.
  • The API defaults to 120 requests per key per 60 seconds.
  • Indicator page size is capped at 500.
  • The README says the final hardening phase is still in progress.

Alternatives to MISP Alternatives to Pulse Intelligence The whole list