
MISP
7.9#1 in threat intelligence platformsFrom €7.31 a yearFree planWebAPILinuxSelf-hosted
Visit
| Fact | MISP | Pulse Intelligence |
|---|---|---|
| API | MISP provides an OpenAPI-described REST API with extensive restSearch capabilities and bundled PyMISP support. | The public API is read-only, supports scoped API keys, and is intended for analyst scripts, SOAR playbooks, internal tools, and integrations. |
| Deployment | MISP can run on-premises, in the cloud or as a SaaS deployment. | The maker documents direct Node deployment and a Docker Compose full-stack deployment, with both the web app and worker kept running. |
| Purpose | MISP is an open source platform for collecting, storing, distributing, and sharing cybersecurity indicators and threat information for incident and malware analysis. | Pulse Intelligence is an open-source, self-hosted threat intelligence workspace for analysts and junior CTI teams. |
| Security | MISP supports signing and encrypting notifications with GnuPG or S/MIME, and signing and validating shared information. | The repository lists Argon2id passwords, database-backed session cookies, hashed API keys, and an admin-only audit log. |
MISP is suited to incident analysts, security and ICT professionals, and malware reversers who need to manage and exchange threat information. Its API, streaming channels, and sharing controls may also fit teams automating intelligence workflows.
Pulse Intelligence suits analysts, junior CTI teams, and SOC teams seeking a self-hosted threat intelligence workspace. It is intended for teams able to operate the required Node.js, PostgreSQL, and Redis-compatible services.