
Language
PHP, Javascript, Python, CSS, Shell, Perl
Tool Type
API
License
GNU Affero General Public License 3
Version
2.5.16
MISP Project

MISP Project is a threat intelligence platform designed to share, store and correlate Indicators of Compromise (IoC) of targeted attacks, threat intelligence, financial fraud information, vulnerabilities and even counter-terrorism information. Facilitates cybersecurity collaboration and malware analysis. Used by multiple organizations, MISP Project allows you to detect and prevent attacks, fraud or threats against ICT infrastructures, organizations or people. Additionally, it helps share and collaborate on cybersecurity indicators, improving incident response and strengthening overall security.
The MISP tool solves the problem of cybersecurity management and collaboration by allowing organizations to share, store and correlate Indicators of Compromise (IoCs) of targeted attacks, threat intelligence, financial fraud and vulnerabilities, facilitating the detection and prevention of attacks and threats against ICT infrastructures, organizations and people.
The MISP tool allows for the sharing, storage, and correlation of Indicators of Compromise related to targeted attacks, threat intelligence, financial fraud, vulnerability information, and counterterrorism. It facilitates collaboration on malware and cybersecurity analysis, helping to detect and prevent attacks and threats against ICT infrastructure, organizations, or individuals.
MISP converts its native schema to STIX 2.x and uses TAXII 2.1 to exchange indicators of compromise. This compatibility with OASIS standards ensures that heterogeneous platforms share intelligence without semantic loss, strengthening cooperation between CSIRTs and reducing reliance on proprietary cybersecurity formats.

Connect with the Development Code team and discover how our carefully curated open source tools can support your institution in Latin America and the Caribbean. Contact us to explore solutions, resolve implementation issues, share reuse successes or present a new tool. Write to [email protected]

Screenshot of the MISP environment displaying linked events with indicators of compromise, the TLP (Traffic Light Protocol)

Screenshot of a MISP event detailing the evolution of the Octopus-Rex botnet.

MISP dashboard showing analysis of malicious activities, analytic confidence distributions, event correlation graphs, and authentication failure data.
Visit the first Security and Justice Evidence Bank available in Spanish and Portuguese, with systematized evidence of nearly 100 types of solutions and 700 cases evaluated to prevent crime and violence.
