MISP alternatives
6 tools in the catalogue cover the same ground as MISP and can replace it depending on the need. Each one is reachable, re-checked daily, and listed with its pricing.
- GreyNoisefreemiumThreat intelligence platform that classifies IP addresses scanning the internet as malicious, benign, or noise using a global sensor network. 50 free daily API calls.
- AbuseIPDBfreemiumCommunity-powered IP reputation database with 3M+ malicious IP reports. Check any IP for abuse history, report malicious activity, and integrate via API for real-time threat blocking.
- OTX AlienVaultfreeOpen Threat eXchange — world's largest open threat intelligence community with 100k+ participants sharing 20M+ threat indicators. Search IPs, domains, hashes, CVEs and subscribe to threat pulses.
- abuse.ch HuntingfreeCross-search over the abuse.ch feeds: malicious URLs, samples, botnet command servers and SSL fingerprints, from one of the most cited non-profit sources.
- BI.ZONE Threat IntelligencefreemiumThreat portal with strong coverage of groups active in the post-Soviet space, an area where Western sources are thin.
- Feodo TrackerfreeTracks command-and-control servers of banking trojans such as Emotet, Dridex and TrickBot.
MISP
Threat Intelligence
Open platform for sharing threat indicators between organisations, with correlation and standardised export formats.
RECOMMENDED USE
Pooling indicators instead of rebuilding them each time
Information
Video tutorials
Learn to use MISP
Suggested workflow
Chain these tools in order for a complete investigation
Similar tools
These tools can also help you
ThreatFox (abuse.ch)
Threat IntelligenceFree threat intelligence platform by abuse.ch for sharing indicators of compromise (IOCs) — IPs, domains, URLs, hashes — with community attribution and MITRE ATT&CK mapping.
Maltiverse
Threat IntelligenceIoC aggregation platform: correlates threat indicators from 100+ feeds. Free API access.
OTX AlienVault
Threat IntelligenceOpen Threat eXchange — world's largest open threat intelligence community with 100k+ participants sharing 20M+ threat indicators. Search IPs, domains, hashes, CVEs and subscribe to threat pulses.
MISP Galaxy
Threat IntelligenceOpen, machine-readable knowledge base of threat actors, tools and techniques, used to share intelligence between organisations in a common vocabulary.
User reviews
Be the first to leave a review