MISP
7.9#1 in threat intelligence platformsFrom €7.31 a yearFree planWebAPILinuxSelf-hosted
VisitMISP vs Yeti
What both publish
| Fact | MISP | Yeti |
|---|---|---|
| API | MISP provides an OpenAPI-described REST API with extensive restSearch capabilities and bundled PyMISP support. | Yeti provides a REST API, including endpoints for importing observables from text, files, and URLs. |
| Deployment | MISP can run on-premises, in the cloud or as a SaaS deployment. | The documented supported installation method uses dedicated Docker containers and requires Git, Docker, and the Docker Compose plugin. |
| Purpose | MISP is an open source platform for collecting, storing, distributing, and sharing cybersecurity indicators and threat information for incident and malware analysis. | Yeti describes itself as a Forensics Intelligence platform and pipeline for DFIR teams, intended to bridge CTI and DFIR practitioners. |
MISP plans
- MISP softwareFree
- MISP coreFree
- Yearly support contract€7.31 a year
- Sustainability support€10.97 a year
- Support contract with sustainability support€18.28 a year
- On-site closed training—
Yeti plans
No prices published.
Pick MISP if…
MISP is suited to incident analysts, security and ICT professionals, and malware reversers who need to manage and exchange threat information. Its API, streaming channels, and sharing controls may also fit teams automating intelligence workflows.
Pick Yeti if…
Yeti suits DFIR and CTI teams managing shared threat data, forensic artifacts, and automated analysis. It is aimed at organizations able to operate a Docker-based self-hosted deployment.