MISP's long-term viability is supported by a diversified funding model. The project combines public, international, and private sources so that continued development does not depend on a single funder or company.
MISP development, maintenance, community support, and related activities are supported through a changing combination of:
- CIRCL national funding, which supports CIRCL's public-interest mission and its long-standing work on MISP;
- European Union project co-funding for eligible research, development, deployment, interoperability, and community activities;
- international co-funding through collaborations with public-interest and partner organisations in multiple countries; and
- private partnership funding, including MISP Professional Services, which enables organisations to obtain professional support and expertise while contributing to the sustainability of the wider project.
The exact mix can vary between funding periods and projects. Diversification reduces reliance on any one stream and helps sustain the core software, security maintenance, standards work, documentation, training, and community infrastructure over the long term.
Funding does not confer ownership of the MISP community codebase, privileged licensing rights, or unilateral control over project decisions. Funded work is subject to the same public governance, contribution, review, and licensing rules as other work in this repository. Project priorities continue to account for the needs of the broader MISP user and contributor communities.
MISP does not require copyright assignment or a Contributor License Agreement. Contributors retain copyright in their contributions and license them under the GNU Affero General Public License version 3, as described in the CLA-free contribution model. This shared authorship prevents a funder, service provider, or private company from unilaterally converting the complete community codebase into proprietary software.
Commercial services and partnerships complement rather than replace the freely available project. The source code remains available under AGPL-3.0 regardless of which funding stream supported a particular contribution. This separation between funding and ownership is central to MISP's stability, independence, and long-term open-source mission.
For more information about MISP and its ecosystem, visit the MISP project website or CIRCL.