MISP
An open-source threat intelligence management platform that enables organizations to collect, correlate, and share security indicators and threat information
- Also known as
- misp
Available worldwide · Popular in: US, EU, GB
What is MISP?
A collaborative tool for security teams to gather structured threat intelligence, analyze relationships and patterns across indicators, and distribute insights to trusted partners and security tools. It supports real-time synchronization across multiple MISP instances and integrates with broader security infrastructure through APIs and industry standard formats.
MISP pricing
We don't have MISP's full plan breakdown yet (its pricing page resisted automated reading). Here's what we could confirm. Always check live pricing for exact numbers.
Free and open source
What MISP does
The capabilities that matter for threat intelligence, normalised so it lines up with every alternative. “-” means we haven't confirmed it, not that it's missing.
- Deployment model
- Self hosted platform
- Proprietary ioc feeds
- -
- Stix taxii protocol support
- -
- Dark web forum monitoring
- -
- Brand impersonation protection
- -
- Vulnerability cve intelligence
- -
- Malware sandbox analysis
- -
- SIEM XDR enrichment API
- ✓
- Automated firewall rule sync
- -
- Mitre attck framework mapping
- ✓
- SOC2 type ii
- -
- ISO 27001
- -
- Pricing model
- Open source
Platform & deployment
Independently observed- CLI
- Web
- Cloud / SaaS
- Hybrid
- On-premise
- Self-hosted
Integrations (13)
Independently observed- Wazuh
- Slack
- PagerDuty
- VirusTotal
- Shuffle
- Maltiverse
- STIX
- OpenIOC
- Suricata
- Snort
- Zeek
- RPZ→•
- MITRE ATT&CK⇄•
MISP FAQ
Common questions about MISP, answered from independent, dated evidence.
What is MISP?
A software solution that enables security teams to collect, store, distribute, and analyze cyber threat indicators, malware information, and incident data in structured formats, with built-in correlation, automated exports, and real-time synchronization across organizations. It is indexed under Threat Intelligence.
Source: https://www.misp-project.org
Is MISP free to use?
MISP is open source, so it can be self-hosted and used at no licence cost. Pricing changes often, so verify at source before relying on it.
Source: https://www.misp-project.org
What platforms does MISP support?
MISP supports the web and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.
Source: https://www.misp-project.org
Can MISP be self-hosted?
Yes. MISP can be deployed cloud / SaaS, on-premise and self-hosted, so it does not have to run on the vendor's infrastructure.
Source: https://www.misp-project.org
What does MISP integrate with?
We have confirmed 11 integrations for MISP, including Wazuh, Slack, PagerDuty, VirusTotal, Shuffle, Maltiverse, STIX and OpenIOC, plus 3 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.
Source: https://www.misp-project.org
What security certifications does MISP have?
We have independently confirmed GDPR for MISP. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as MISP not holding them. Always confirm compliance directly before you rely on it.
Where is MISP available?
MISP is available worldwide. Its primary markets are the United States, the EU and the United Kingdom.
Source: https://www.misp-project.org
MISP alternatives
Other threat intelligence we track, ranked by the same independent score.
Compare MISP
Side by side against other threat intelligence, attribute by attribute, with a source on every value.
The vioscaleAI score: one lens on the evidence
Not user reviews and not a paid placement: a confidence-weighted blend of the independent signals below (adoption, activity, security posture, and more), which you can sort and re-weight yourself. Vendors can correct their listing but can never move their rank, and stars are weighted low as a vanity metric. It is one way to read the evidence for MISP, not the verdict.
| Signal | Score | Weight | Contribution | Evidence |
|---|---|---|---|---|
| Capabilities | 46 | 0.06 | 2.9 | ✓ |
| Integrations | 26 | 0.06 | 1.6 | ✓ |
| Stars | 50 | 0.03 | 1.3 | ✓ |
| Dependent projects | 0 | 0.06 | 0.0 | - |
| Development activity | 0 | 0.09 | 0.0 | ✓ |
| Release cadence | 0 | 0.05 | 0.0 | - |
| Security posture | 10 | 0.21 | 0.0 | - |
| Package downloads | 0 | 0.14 | 0.0 | - |
| Security score | 0 | 0.04 | 0.0 | - |
| Developer Q&A activity | 0 | 0.06 | 0.0 | - |
Computed . Re-weight it by intent, or see the full method.
All data & sourcesshow ↓
Every value we hold, with its source, retrieval date, and confidence. This is the evidence behind the score: don't trust it, verify it.
Activity
| Attribute | Value | Evidence |
|---|---|---|
| Commits last 30d | 0 | mediumsource · 2026-10-05 · 65% |
Adoption
| Attribute | Value | Evidence |
|---|---|---|
| Github stars | 440 | highsource · 2026-10-05 · 90% |
Content
| Attribute | Value | Evidence |
|---|---|---|
| Faq | 7 items | mediumsource · 2026-09-10 · 64% |
Features
| Attribute | Value | Evidence |
|---|---|---|
| Capabilities | Pricing model: open_source · Deployment model: self_hosted_platform · Siem xdr enrichment api: Yes · Mitre attck framework mapping: Yes | mediumsource · 2026-10-05 · 60% |
Integrations
| Attribute | Value | Evidence |
|---|---|---|
| Count | 7 | mediumsource · 2026-10-05 · 60% |
Language
| Attribute | Value | Evidence |
|---|---|---|
| Primary | TeX | highsource · 2026-10-05 · 90% |
Market
| Attribute | Value | Evidence |
|---|---|---|
| Availability | PrimaryMarkets: … · AvailabilityScope: global · AvailableCountries: … · NotAvailableCountries: … | highsource · 2026-08-19 · 75% |
Pricing
Security
Is MISP the right choice for you?
Tell us the job, the constraints and what you weigh most, and we will rank MISP against the rest of the threat intelligence we index, using the same dated evidence weighted your way.
Free to run, no account needed to start. How the evaluation works
Is this your product?
This profile was built from public sources without asking you. You can take the badge below and use it anywhere, and you can claim the profile to correct anything we got wrong. Both are free, and neither moves MISP up or down: nobody can buy rank here, including you.
Take the badge
Live, always current, and free to use on your own site. It shows MISP's independent score and links back to this profile.
<a href="https://www.vioscale.ai/software/misp" target="_blank" rel="noopener">
<img src="https://www.vioscale.ai/badge/software/misp.svg" alt="MISP, verified on vioscaleAI" width="330" height="76" loading="lazy" />
</a>Markdown, for a README →
[](https://www.vioscale.ai/software/misp)Claim the profile
Verify you control the domain, then point us at the pages that state the facts about MISP and add your own description and media. Free, and it does not change the score.
- Correct anything wrong, with evidence
- Point our crawler at the pages that matter
- Write your own description and add media
Not the owner? How vendor profiles work