MISP vs OpenNMS
MISP
misp-project.orgOpenNMS
opennms.comSide by side
| Figure | MISP | OpenNMS |
|---|---|---|
| Price from | €0.61/mo | $500/mo |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | Yes | — |
| Web | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 7 | 6 |
| Spec score · Alert Management Software | 9.0 (#2) | 8.3 (#10) |
| Purpose | MISP is an open source platform for collecting, storing, distributing, and sharing cybersecurity indicators and threat information for incident and malware analysis. | OpenNMS is an open-source network monitoring platform for fault, performance, traffic monitoring, and alarm generation across local and distributed networks. |
| Security | MISP supports signing and encrypting notifications with GnuPG or S/MIME, and signing and validating shared information. | The company says its security program aligns with ISO 27001/27002, CCPA, and GDPR frameworks, and major Meridian versions receive third-party penetration testing and remediation before release. |
| Support | Core issues are tracked on GitHub and community support is available through MISP Gitter channels. | Meridian subscriptions include support options and severity-based SLAs; the listed standard coverage is 7 a.m. to 7 p.m. ET Monday through Friday, with 24/7 emergency support as an add-on. |
| Support limits | The yearly support contract covers five prioritized issues, configuration requests, or fast-tracked bug fixes during business hours; new custom features are usually project-based. | OpenNMS support plans do not cover Linux, PostgreSQL, Grafana, Cassandra, Kafka, or Elasticsearch as third-party products. |
Plans
MISP
- MISP coreFree
- MISP softwareFree
- Yearly support contract€7.31 a year
- Sustainability support€10.97 a year
- Support contract with sustainability support€18.28 a year
- Closed training in LuxembourgPrice not published
- On-site closed trainingPrice not published
OpenNMS
- HorizonFree
- Basic$6,000 a year
- Standard$12,000 a year
- Essential$49,000 a year
- Premier$66,000 a year
- Premier+Priced on request
In their own words
MISP
MISP is an open source platform for collecting, storing, distributing, and sharing cybersecurity indicators and threat information for incident and malware analysis. It is designed for incident analysts, security and ICT professionals, and malware reversers. Analysts can correlate information using fuzzy hashes and CIDR overlaps, then add comments, sightings, opinions, proposals, or counter-analysis. Distribution levels and custom sharing groups control access down to individual attributes, and instances can synchronize intelligence in real time. MISP supports signing and encrypting notifications with GnuPG or S/MIME, as well as signing and validating shared information. Automation options include an OpenAPI-described REST API, PyMISP, Python enrichment modules, and ZMQ or Kafka streaming. Import and export formats include STIX 1 and 2, OpenIOC, CSV, Suricata, Snort, and Zeek. MISP can run on-premise, in the cloud, or as SaaS, and the project recommends Ubuntu 24.04 or misp-docker for deployment. The software costs nothing under AGPL. Paid yearly support, sustainability support, and training options are also listed.
OpenNMS
OpenNMS is an open-source platform for monitoring faults, performance, traffic, and alarms across local and distributed networks. Horizon is the free community distribution with the newest features; Meridian is the stable subscription version. Data collection supports SNMP, JSON, WinRM, XML, SQL, JMX, SFTP, FTP, JDBC, HTTP, HTTPS, VMware, WS-Management, and Prometheus. Traffic monitoring handles NetFlow v.5/9, IPFIX, and sFlow, with stated capacity above 300,000 flows per second. Minions extend monitoring to remote devices and services, including locations behind firewalls or NAT through ActiveMQ or Apache Kafka. Integrations include email, Slack, Mattermost, scripts or webhooks, Jira, Remedy, TSRM, Grafana, and a REST API. Grafana views can show alarms, outages, KPIs, NetFlow, and data from multiple instances. The software supports API, Linux, self-hosted, and web deployments. Horizon is free; Meridian plans range from $6,000 a year to $66,000 a year, with larger deployments priced on request.