MISP

Open source

An open-source threat intelligence sharing platform for collecting, correlating, and distributing indicators.

by MISP ProjectOfficial site ↗Source code ↗

Pricing: free
Free tier: true
License: open-source
Open source: Yes

Editorial review

MISP has not yet been editorially reviewed. User reviews and published field data below are unaffected — we say so rather than implying an editorial verdict.

Facts & attributes

Every value carries its evidence state. “—” means unknown — never a silent default (P-02).

Identity · Taxonomy

Documentation(HTTPS URL): https://www.circl.lu/doc/misp/Verified
Tags(open-source;cloud-native): threat-intelligence, threat-sharing, open-source, ioc, ctiVerification pending

Platform · Deployment

Delivery model(SaaS;self-hosted;desktop;mobile;embedded;managed-cloud;appliance): self-hostedVerification pending

Pricing · Licensing

Free plan(true/false): trueVerification pending
License model(proprietary;open-source;source-available;dual-license): open-sourceVerification pending
Pricing model(free;subscription;usage;seat;asset;transaction;revenue-share;perpetual;custom): freeVerified
Source repository(HTTPS URL): https://github.com/MISP/MISPVerified
SPDX license IDs(Apache-2.0;MIT): AGPL-3.0-or-later, CC0-1.0, BSD-2-ClauseVerification pending

Features · Product · Fit

Core capabilities(authoring;automation;analytics): structured storing of indicators of compromise (IOCs), automated exports for IDS or SIEM in STIX or OpenIOC, synchronization between MISP communities, interactive dashboards, correlation views and contextual graphs, community-maintained galaxies and taxonomies including ATT&CK and TLP, AI-assisted collaborative analysisVerification pending

Api · Integrations · Ecosystem

API available(true/false): trueVerification pending

Support · Docs · Services

Support channels(email;ticket;chat;phone;community): community, professional servicesVerified

Audience · Use · Case

Best for(Neutral editorial summary): CSIRTs, CERTs and security teams sharing and correlating threat indicators with trusted communities and partners.Verification pending
Company-size fit(individual;SMB;mid-market;enterprise): SMB, mid-market, enterpriseVerification pending
Primary use cases(build;monitor;automate): sharing cyber security indicators and threats, cyber security incidents analysis, malware analysisVerified
Skill level(beginner;intermediate;advanced;specialist): specialistVerification pending

Lifecycle · Versioning

Current version(1.12.3): 2.5.47Verified
Maintenance status(active;maintenance;deprecated;EOL;archived): activeVerified

Vendor · Maintainer

Founded year(2012): 2011Verified
Vendor type(commercial;foundation;community;government;consortium;individual): communityVerified

User reviews

Review policy

No published reviews yet.