Cosive CloudMISP : Enterprise MISP SaaS Threat Intelligence Platform

MISP can be challenging and time-consuming for teams to self-host, configure, harden, maintain, and keep up with the pace of updates.

CloudMISP is a ready-to-use MISP SaaS instance in the cloud, managed, monitored and upgraded for you by our expert CTI engineering team.

With CloudMISP, you'll capture more value from your expensive analysts by freeing them from the burden of maintaining MISP, allowing them to laser-focus on generating valuable threat intelligence.

What you'll get:

• Our CTI engineering team will host, run, and upgrade a managed MISP for you in the cloud.
• You'll typically be up and running with your managed MISP instance within 1 business day of purchasing a license.
• We will deploy your hosted MISP system on a single-tenant, dedicated, self-healing AWS infrastructure in your preferred region.
• We'll analyze, test and apply frequent MISP updates (typically 12 - 20 per year) with minimal downtime.
• We'll analyze each major update, let you know what's new and highlight any potentially breaking changes.
• We'll deploy your custom settings and supporting software.
• We'll take care of monitoring, operational support, and responding to any outages.
• You'll get ongoing guidance and access to Cosive's MISP expertise via a dedicated chat channel and comprehensive user guide.

Included custom integrations:

• SSO Support, including Okta and Azure Active Directory (Entra ID)
• SIEM integrations, including Splunk and Microsoft Azure Sentinel

Our experience:

• The team behind CloudMISP are regarded as some of the world's top experts in CTI and the MISP threat intelligence platform.
• We are frequently invited to speak at major cybersecurity conferences and deliver training workshops on CTI and MISP in partnership with organizations like AusCERT and CIRCL.
• We have previously collaborated with a major federal government to spearhead a national threat intelligence program.
• Our CloudMISP customers include global financial institutions and ASX Top 20 companies.

The Cosive CloudMISP Core includes: - 1 production instance - production support, - MISP upgrades, - maintenance, - unlimited users - 100GB storage

CloudMISP customer testimonial: "Cosive CloudMISP allowed us to deploy a secured MISP instance quickly and without the worry of finding specialist resources to deploy and maintain a new threat intelligence platform. Using CloudMISP supports our CTI capability without the overhead of another product to keep up to date in our patching cycle. The Cosive team are extremely knowledgeable in the area and their support is extraordinary."

• Principal Threat Analyst

Which AWS region do you use for hosting?

• We can host CloudMISP in your preferred AWS region.

Is CloudMISP installed in my organization's own AWS account?

• No - we take care of hosting CloudMISP on your behalf.

Is CloudMISP highly available?

• Yes - we use self-healing infrastructure and blue-green deploys to ensure maximum uptime, even during upgrades and maintenance.

What is your pricing model?

• CloudMISP is available for a fixed yearly fee depending on your needs (please refer to the pricing table). If your requirements fall outside the given plans simply request a private offer under the "Additional pricing options" section. We will do our best to accommodate you with a custom plan that will best suit your needs.

How much do you charge per user?

• CloudMISP is available for a fixed yearly investment with no additional charges on a per user basis.

Can I install my own modules and plugins?

• Yes - we can deploy additional modules and plugins at your request.

IMPORTANT: You acknowledge and agree that all Proprietary Rights in the variations, modifications, additions, alterations and Feedback to the SaaS Service are owned by us, even where suggested or contributed to by you. We may from time to time update the SaaS Service. We endeavor to implement all updates to the SaaS Service in a manner that is minimally disruptive to your business, but (i) you acknowledge that we may implement the relevant update during your regular business operating hours, or at a time that may otherwise be inconvenient to you, and that this may cause interference or interruption with respect to your access to the SaaS Service; and (ii) you authorize us to undertake the implementation of the update and release and hold us harmless in respect of any Loss or inconvenience that you may suffer as a consequence of interference or interruption of your access to the SaaS Service.