Alternatives to OpenCTI
A self-hosted open-source platform for storing, organizing and visualizing cyber threat intelligence. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
OpenCTI
A self-hosted open-source platform for storing, organizing and visualizing cyber threat intelligence.
Replacements
Listings that take over the same core job as OpenCTI.
MISP
An open-source threat intelligence platform for sharing, storing and correlating indicators of compromise.
MISP is a self-hosted open-source platform focused on sharing and correlating indicators of compromise between communities, with open taxonomies, galaxies and the PyMISP API.
Similar software
Related functionality, not a direct replacement.
Shuffle
An open-source security orchestration, automation and response (SOAR) platform for building workflows across security tools.
Maltego
Desktop tool for visually mapping relationships in OSINT investigations.
SpiderFoot
Automated open-source intelligence collection with 200 modules.
VirusTotal
Online service that checks a URL or file against many antivirus engines and URL scanners.
YARA
Pattern-matching engine for identifying and classifying malware samples.
DefectDojo
An open source, self-hosted vulnerability management platform that collects and tracks findings from security scanners.
