About the license

A license is a time-limited right to use Kaspersky Threat Intelligence Portal services, granted under your contract with Kaspersky.

A license entitles you to the following kinds of services:

• The right to use Kaspersky Threat Intelligence Portal
• Assistance from your dedicated technical account manager

To use Kaspersky Threat Intelligence Portal services, you must purchase a license.

The scope of the service usage term depends on which of the following licenses you opt for.

For Kaspersky Sandbox

• Trial: Provides limited access to Kaspersky Sandbox. The trial license has a limited term and the following restrictions:
  • A quota for file executions and web address analysis in the Kaspersky Sandbox is provided for the entire license term, including the commercial license term.
  • Up to 1000 of the latest file executions and web address analysis results for a user are stored. When the maximum number of stored results is reached, the oldest results are assigned Archived status. For archived tasks, you can only view or delete a brief summary. For more details about archived tasks, refer to the About archived (discarded) tasks section.
  • A trial license is usually only short term. When a trial license expires, you cannot execute files or analyze web addresses in Kaspersky Sandbox. Previous file execution results remain available. To continue using Kaspersky Sandbox, you need to purchase a commercial license.
• Commercial: A license that is provided when you purchase Kaspersky Threat Intelligence Portal services. The commercial license has a limited term and provides daily quotas or quotas for the entire period.

  Up to 1000 of the latest file executions and web address analysis results for a user are stored. When the maximum number of stored results is reached, the oldest results are assigned Archived status. For archived tasks, you can only view or delete a brief summary. For more details about archived tasks, refer to the About archived (discarded) tasks section.

  Running a threat lookup request for a hash does not reduce the Threat Lookup daily quota for your group if the completed execution task for this hash is in Kaspersky Sandbox.

  The number of service users for your company and other limited terms and conditions including quotas are specified in your contract with Kaspersky.

  After the commercial license expires, you cannot upload, execute and analyze files. We recommend renewing the license before it expires.

For Crimeware Threat Intelligence Reporting Service

• Demo: License type intended for trying out the Crimeware Threat Intelligence Reporting Service.

  The demo license has a limited term and the following restrictions:

  • Only a limited list of Crimeware Threat Intelligence reports is available for downloading.
  • Master YARA and Master IOC are not available for downloading.
  • Notifications of new and updated Crimeware Threat Intelligence reports are not available.
  • In the Actor tags selection window, only tags used for a limited list of Crimeware Threat Intelligence reports are available.
• Trial: This provides limited access to the Crimeware Threat Intelligence Reporting Service. The trial license has a limited term and the following restrictions:
  • Notification that a Crimeware Threat Intelligence report is available for downloading is sent after seven days since the report appeared or was updated.
  • You can download up to 10 Crimeware Threat Intelligence reports.
  • Master YARA and Master IOC are not available for downloading.
  • Profiles are available only for actors that are associated with reports from a limited number of Crimeware Threat Intelligence reports to which the user is granted access.
  • A trial license is usually only short term. When the trial license expires, the service may switch to limited demo mode. To continue using the Crimeware Threat Intelligence Reporting Service, you need to purchase a commercial license.
• Commercial: A license that is provided when you purchase Kaspersky Threat Intelligence Portal services. The commercial license has a limited term and provides daily quotas or quotas for the entire period. The number of service users for your company and other limited terms and conditions including quotas are specified in your contract with Kaspersky. If you have not renewed your commercial license, the service may switch to limited demo mode.

If you have not purchased the Crimeware Threat Intelligence Reporting Service license, notifications are not available.

Kaspersky Threat Intelligence Portal allows you to view and download reports marked as DEMO, regardless of the license. For more details, see the Reporting section.

For APT Intelligence Reporting Service

• Demo: This license type allows users to try out the APT Intelligence Reporting Service.

  The demo license has a limited term and the following restrictions:

  • Only a limited list of APT Intelligence reports is available for downloading.
  • Master YARA and Master IOC are not available for downloading.
  • Notifications of new and updated APT Intelligence reports are not available.
  • In the Actor tags selection window, only tags used for a limited list of APT Intelligence reports are available.
  • Profiles are available only for actors associated with reports from a limited number of APT Intelligence reports for which the user is granted access.
• Trial: Provides limited access to the APT Intelligence Reporting Service. The trial license has a limited term and the following restrictions:
  • Only APT Intelligence reports older than seven days are available.
  • Notification that an APT Intelligence report is available for downloading is sent after seven days since the report appeared or was updated.
  • You can download up to 10 APT Intelligence reports.
  • Master YARA and Master IOC are not available for downloading.
  • Profiles are available only for actors that are associated with reports from a limited number of APT Intelligence reports to which the user is granted access.
  • A trial license is usually only short term. When the trial license expires, the service may switch to limited demo mode. To continue using the APT Intelligence Reporting Service, you need to purchase a commercial license.
• Commercial: A license that is provided when you purchase Kaspersky Threat Intelligence Portal services. The commercial license has a limited term and provides daily quotas or quotas for the entire period. The number of service users for your company and other limited terms and conditions including quotas are specified in your contract with Kaspersky. If you have not renewed your commercial license, the service may switch to limited demo mode.

If you have not purchased the APT Intelligence Reporting Service license, notifications are not available.

Kaspersky Threat Intelligence Portal allows you to view and download reports marked as DEMO, regardless of the license. For more details, see the Reporting section.

For Kaspersky Industrial Threat Intelligence Reporting Service

• Demo: Allows you to try out the Industrial Threat Intelligence Reporting Service.

  The demo license has a limited term and the following restrictions:

  • Only a limited number of Industrial reports are available for downloading.
  • Master YARA and Master IOC are not available for downloading.
  • Notifications of new and updated Industrial reports are not available.
  • In the Actor tags selection window, only tags used for a limited list of Industrial reports are available.
• Trial: Provides only limited access to the Industrial Threat Intelligence Reporting Service. The trial license has a limited term and the following restrictions:
  • Only Industrial reports older than seven days are available.
  • Notifications that an Industrial report is available for downloading are sent seven days after the report appeared or was updated.
  • You can download up to 10 Industrial reports.
  • Master YARA and Master IOC are not available for downloading.
  • A trial license is usually only short term. When the trial license expires, the service may switch to limited demo mode. To continue using the Kaspersky Industrial Threat Intelligence Reporting Service, you need to purchase a commercial license.
• Commercial: A license that is provided when you purchase Kaspersky Threat Intelligence Portal services. The commercial license has a limited term and provides daily quotas or quotas for the entire period. The number of service users for your company and other limited terms and conditions including quotas are specified in your contract with Kaspersky. If you have not renewed your commercial license, the service may switch to limited demo mode.

If you do not purchase the Kaspersky Industrial Threat Intelligence Reporting Service license, notifications are not available.

Kaspersky Threat Intelligence Portal allows you to view and download reports marked as DEMO, regardless of the license. For more details, see the Reporting section.

For Kaspersky Threat Lookup / WHOIS Lookup / WHOIS Hunting / Research Graph / OSINT IoCs / Saved Searches

• Trial: Quotas for Threat Lookup and WHOIS Lookup services are provided for the license term.

  A separate quota for creating rules is provided for the WHOIS Hunting service.

  A separate quota for creating saved search requests is provided for the Saved Searches service.

  After the trial license expires, you cannot create lookup and saved search requests. The created saved search requests remain available to you but no updates are received for them.

• Commercial: A license that is provided when you purchase Kaspersky Threat Intelligence Portal services. The commercial license has a limited term and provides daily quotas or quotas for the entire period.

  Daily quotas and quotas for the entire period (depending on the contract with Kaspersky) are provided for Threat Lookup and its services.

  A separate quota for creating rules is provided for the WHOIS Hunting service.

  A separate individual quota for creating research graphs is provided to each user of the group.

  A separate quota for creating saved search requests is provided for the Saved Searches service.

  After the commercial license expires, you cannot create lookup requests, saved search requests, or tracking rules. Also, no new research graphs can be saved. The created saved search requests remain available, but no updates are received until you renew the license.

  Kaspersky Threat Intelligence Portal offers integration with the external Kaspersky Transforms for Maltego service. A separate quota is provided for Maltego lookup requests: access to this service is provided only via the API. General information about an object and its zone are provided in the response. After the commercial license expires, you cannot create requests to Kaspersky Threat Lookup using Maltego.

  Daily quota usage
  If a user repeats a threat lookup request on the same day, the Threat Lookup daily quota for your group is not reduced.
  Running a threat lookup request for a hash does not reduce the Threat Lookup daily quota for your group if the completed execution task for this hash is in Kaspersky Sandbox.

The number of service users for your company and other limited terms and conditions including quotas are specified in your contract with Kaspersky. You may find information about the license on the Licenses page.

We recommend renewing the license before it expires.

For APT C&C Tracking Service

• Trial: Provides limited access to the APT C&C Tracking Service. The trial license has a limited term and the following restrictions:
  • The feeds are only available for the country selected by a Kaspersky employee when the contract was entered into.
  • A trial license is usually only short term. Upon expiry, the service becomes unavailable to the user. To continue using the APT C&C Tracking Service, you need to purchase a commercial license.
• Commercial: This license is provided when you purchase Kaspersky Threat Intelligence Portal services and has a limited term. The number of service users for your company and other quotas are specified in your contract with Kaspersky. After the commercial license expires, the service becomes unavailable to the user.

For Digital Footprint Intelligence Service

• Demo: Allows you to try out the Digital Footprint Intelligence Service.

  The demo license has a limited term and the following restrictions:

  • Only an anonymized demo report is available to view and download.
  • Only a limited list of anonymized threat notifications is available for viewing.
  • Other functions are available only for demo data.
• Commercial: This license is provided when you purchase Kaspersky Threat Intelligence Portal services and has a limited term. The number of service users for your company and other limited terms and conditions including quotas are specified in your contract with Kaspersky.

  If you do not renew your commercial license, you can still access data received during the license period. You can search for reports and notifications, filter and export notifications. However, no new reports and notifications will be provided until you renew your license

Dark Web / Surface Web

• Commercial: A license that is provided when you purchase Kaspersky Threat Intelligence Portal services. The commercial license has a limited term and provides daily quotas or quotas for the entire period. The number of service users for your company and other limited terms and conditions including quotas are specified in your contract with Kaspersky.

  If you do not renew your commercial license, you can still access data received during the license period. However, no new data will be provided until you renew your license. Also, no Dark Web / Surface Web updates for the created saved search requests are received. Note that, if the Threat Lookup license remains valid, you can still create and save new search requests for which the updates are based on the Lookup data.

Cloud Threat Attribution Engine

• Trial: Provides limited access to the Cloud Threat Attribution Engine. The trial license has a limited term.
• Commercial: A license that is provided when you purchase Kaspersky Threat Intelligence Portal services. The commercial license has a limited term and provides daily quotas or quotas for the entire period. The number of service users for your company and other limited terms and conditions including quotas are specified in your contract with Kaspersky.

  After the commercial license expires, you can still access data received during the license period. However, you cannot analyze the uploaded files and no new data will be provided until you renew your license.

  We recommend renewing the license before it expires.

Page top