Introduction

MISP Intelligence Sharing Platform

Author

The MISP Project & Contributors

Published

November 8, 2026

MISP 3.0 · User documentation

This guide introduces MISP, the MISP Intelligence Sharing Platform — an open source platform for sharing threat intelligence.

It is intended for ICT professionals such as security analysts, incident responders, and malware reverse engineers who share threat intelligence with MISP or integrate MISP into other security monitoring tools. The guide covers day-to-day use of the MISP graphical user interface together with its automated interfaces (API) so that teams can integrate MISP into their security environment and operate one or more MISP instances. This guide documents MISP 3.0; version-specific examples identify the branch or source revision they use.

Set up MISP Install and configure your own instance.

Start sharing Create your first event and add threat intelligence.

Automate your workflow Connect your tools with the MISP API.

To help improve this guide, see How to Contribute at the end of the book, followed by the Acknowledgements.