Pulsedive
Operator: Pulsedive LLC, United States
Threat data for domains, IP addresses and URLs, with sources, risk indicators, history and an API.
Technical Infrastructure
Product
Pulsedive Community with the Pro upgrade; commercial APIs and feed plans are listed separately.
Availability and source date
Active
As of: 16 October 2026.
No functionality test has been performed.
Use in OSINT research
Matches known domains, IP addresses and URLs to existing threat reports. Active scans contact the target; stored risk scores remain the provider's assessment.
Queries
| Input | Result | Result type |
|---|---|---|
| Domain / website + IP address + URL | Stored threat associations, sources, technical properties and historical observations. | Retrieved |
| Domain / website + IP address + URL | Current DNS, WHOIS, HTTP and TLS information through passive or active analysis, according to the provider. | Technical check according to provider |
| Domain / website + IP address + URL | Automatic or editorially overridden risk classification with explanations. | Derived |
| Keyword / free text | For the name of malware, a threat group or a campaign: threat description and associated indicators. | Retrieved |
Features
- Collects information from external sources, community reports and its own research.
- Links domains, IP addresses and URLs to known threats.
- Shows technical properties and observation times.
- Assesses risks with explained scores.
- Filters and exports research results.
- Imports selected indicators from web pages through a browser extension.
Categories
- Technical Infrastructure
- Threat intelligence
Coverage
Dataset
Shared dataset from scans, external sources, community reports and its own research. Enterprise instances use a separate dataset.
Access
Requirements
View stored indicators and threats without an account. A free account provides additional features; Pro provides higher limits and historical screenshots. Browser extension for Chrome and Firefox.
Export
Explore export with an account. API output as JSON; larger data exports as CSV or STIX/TAXII 2.1 depending on the plan. The browser extension exports detected indicators as CSV.
Provider
Pulsedive LLC
Country of establishment
United States
Interfaces
API
Available. REST API for indicators, threats, sources and analysis. Free and Pro access is non-commercial; the commercial Team API is separate.
MCP
Limited availability. The documentation MCP answers questions about the API. Live queries for indicators are not documented.
AI agents
Limited availability. Claude, Cursor and VS Code can read the documentation through MCP. Live data requires a separate API integration.
Usage note
The free API and Pro's API/feed services are intended for non-commercial use; commercial use requires an appropriate Team or Business plan.
Legal note
Limitations
- Active scans contact the infrastructure being examined directly.
- Source reports and risk scores are indications and can be changed manually.
- The offered MCP access reads documentation and does not replace an API for live data.
Guides and practical reports
Official · Pulsedive: API quickstart
Pulsedive · EN
Explains API keys, indicator queries, search and the difference between passive and active analysis.