compare
MISP vs OpenCTI
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | MISP | OpenCTI |
|---|---|---|
| Language | PHP | TypeScript |
| Licence | AGPL-3.0 | Other |
| Stars | 6.6k | 10k |
| Latest | v2.5.50 | 7.261016.0 |
| Last push | 2026-10-19 | 2026-10-18 |
| Release cadence | about 9 days between releases | about 4 days between releases |
| Active contributors | 15+ commit authors on the default branch in the last 90 days | 38+ commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace Anomali ThreatStream. Alternatives to Anomali ThreatStream →
PartialMISPCollects, correlates and shares indicators and events between organizations; the intelligence feeds are up to you.
PartialOpenCTIIngests, links and shares intelligence from many feeds in STIX format, self-hosted.
MISP
- v2.5.502026-10-10MISP 2.5.50 Released - Security hardening, Overmind improvements, and streamlined workflows
- v2.5.482026-09-29MISP 2.5.48 - AImageddon security roundup release
- v2.4.2212026-09-17MISP 2.4.221 security backport release
- v2.5.472026-09-17MISP 2.5.47 released - a major security hardening round, the new database migration system with PostgreSQL support, AI-assisted analysis and Overmind moving forward
- v2.5.462026-09-10MISP 2.5.46 released - security hardening, major performance gains, knowledge-base updates and Overmind moving forward
OpenCTI
- 7.261016.02026-10-16Version 7.261016.0
- 7.261014.02026-10-14Version 7.261014.0
- 7.261008.02026-10-09Version 7.261008.0
- 7.260309.0-lts.82026-10-07Version 7.260309.0-lts.8
- 7.261002.02026-10-02Version 7.261002.0
MISP
✓ signed The latest release, v2.5.50, carries a signature GitHub verified.
Loading the security report
OpenCTI
✓ signed The latest release, 7.261016.0, carries a signature GitHub verified.
Loading the security report