compare

MISP vs OpenCTI

The same facts for both, read from GitHub every night, and the relation a person reviewed.

MISP vs OpenCTI
FactMISPOpenCTI
LanguagePHPTypeScript
LicenceAGPL-3.0Other
Stars6.6k10k
Latestv2.5.507.261016.0
Last push2026-10-192026-10-18
Release cadenceabout 9 days between releasesabout 4 days between releases
Active contributors15+ commit authors on the default branch in the last 90 days38+ commit authors on the default branch in the last 90 days
Flagsnonenone
  • Both replace Anomali ThreatStream. Alternatives to Anomali ThreatStream →

    PartialMISPCollects, correlates and shares indicators and events between organizations; the intelligence feeds are up to you.

    PartialOpenCTIIngests, links and shares intelligence from many feeds in STIX format, self-hosted.