Introduction

MISP Intelligence Sharing Platform

Author

The MISP Project & Contributors

Published

September 15, 2026

This guide introduces MISP, the MISP Intelligence Sharing Platform — an open source platform for sharing threat intelligence. It is intended for ICT professionals such as security analysts, incident responders, and malware reverse engineers who share threat intelligence with MISP or integrate MISP into other security monitoring tools. The guide covers day-to-day use of the MISP graphical user interface together with its automated interfaces (API) so that teams can integrate MISP into their security environment and operate one or more MISP instances. It is maintained against the current MISP 2.5.x release series; where behaviour differs from earlier versions this is called out in the relevant chapter.

Acknowledgement

The MISP user guide is a collaborative effort involving contributors to MISP, including:

Belgian Ministry of Defence (CERT)
CIRCL Computer Incident Response Center Luxembourg
Iklody IT Solutions
NATO NCIRC
Cthulhu Solutions
CERT-EU

and many other contributors, especially those who participated in the MISP hackathons.

Contributing

We welcome contributions to the MISP book. If you want to contribute, see our contributing guide.

Format

The MISP book is available in HTML, PDF, and ePub.

License

The MISP user guide is dual-licensed under GNU Affero General Public License version 3 and CC-BY-SA 4.0 international.