MISP vs SİBERAT
MISP
misp-project.orgSİBERAT
sobesoftware.comSide by side
| Figure | MISP | SİBERAT |
|---|---|---|
| Price from | €0.61/mo | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | Yes | — |
| Web | Yes | — |
| Linux | Yes | — |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 7 | 0 |
| Spec score · Threat Intelligence Platforms | 9.0 (#1) | 7.0 (#22) |
| Deployment | MISP can run on-premises, in the cloud or as a SaaS deployment. | The stated footprint is two appliances: a sensor at the branch and a brain at the centre. |
| Security | MISP supports signing and encrypting notifications with GnuPG or S/MIME, and signing and validating shared information. | The product page lists end-to-end mTLS, tenant isolation, signed firmware updates with rollback, and leased rather than embedded secrets. |
| Support | Core issues are tracked on GitHub and community support is available through MISP Gitter channels. | The maker says demo, proof-of-concept and architecture-workshop requests reach its technical team within 48 hours. |
| What it does | MISP is an open-source platform for collecting, storing, correlating, analysing and sharing cyber-threat intelligence. | SİBERAT AX is an agentic security operations platform for IT and OT that analyzes network and industrial protocol data at branch appliances and sends decisions and evidence to a central system. |
Plans
MISP
- MISP coreFree
- MISP softwareFree
- Yearly support contract€7.31 a year
- Sustainability support€10.97 a year
- Support contract with sustainability support€18.28 a year
- Closed training in LuxembourgPrice not published
- On-site closed trainingPrice not published
In their own words
MISP
MISP is an open source platform for collecting, storing, distributing, and sharing cybersecurity indicators and threat information for incident and malware analysis. It is designed for incident analysts, security and ICT professionals, and malware reversers. Analysts can correlate information using fuzzy hashes and CIDR overlaps, then add comments, sightings, opinions, proposals, or counter-analysis. Distribution levels and custom sharing groups control access down to individual attributes, and instances can synchronize intelligence in real time. MISP supports signing and encrypting notifications with GnuPG or S/MIME, as well as signing and validating shared information. Automation options include an OpenAPI-described REST API, PyMISP, Python enrichment modules, and ZMQ or Kafka streaming. Import and export formats include STIX 1 and 2, OpenIOC, CSV, Suricata, Snort, and Zeek. MISP can run on-premise, in the cloud, or as SaaS, and the project recommends Ubuntu 24.04 or misp-docker for deployment. The software costs nothing under AGPL. Paid yearly support, sustainability support, and training options are also listed.