MISP vs Yeti

MISP vs Yeti
Fact	MISP	Yeti
Language	PHP	Python
Licence	AGPL-3.0	Apache-2.0
Stars	6.6k	2k
Latest	v2.5.50	2.12.0
Last push	2026-10-19	2026-10-09
Release cadence	about 9 days between releases	about 2 days between releases
Active contributors	15+ commit authors on the default branch in the last 90 days	6 commit authors on the default branch in the last 90 days
Flags	none	none

How they relate

Both replace Anomali ThreatStream. Alternatives to Anomali ThreatStream →
PartialMISPCollects, correlates and shares indicators and events between organizations; the intelligence feeds are up to you.
PartialYetiStores observables and threat entities and links them, with feeds and analytics; smaller than a commercial platform.

v2.5.502026-10-10MISP 2.5.50 Released - Security hardening, Overmind improvements, and streamlined workflows
v2.5.482026-09-29MISP 2.5.48 - AImageddon security roundup release
v2.4.2212026-09-17MISP 2.4.221 security backport release
v2.5.472026-09-17MISP 2.5.47 released - a major security hardening round, the new database migration system with PostgreSQL support, AI-assisted analysis and Overmind moving forward
v2.5.462026-09-10MISP 2.5.46 released - security hardening, major performance gains, knowledge-base updates and Overmind moving forward

2.12.02026-10-02Pairs with yeti-feeds-frontend 2.12.0. prod/docker-compose.yaml drives both from one YETI_IMAGE_TAG, so deploy them tog…
2.11.02026-09-01The chat can now be pointed at a different model, and conversations can be deleted.
2.10.02026-09-01A hit is now {score, matched, object_summary} rather than the whole object with semantic_score and matched_on written i…
2.9.02026-08-28Allow ChromaDB to run as a shared server
2.8.22026-08-28Split ChromaDB index writes to fit the backend batch limit

✓ signed The latest release, v2.5.50, carries a signature GitHub verified.

Loading the security report

✓ signed The latest release, 2.12.0, carries a signature GitHub verified.

Loading the security report