Tools · siem soar threat intel

Companies using MISP_

As of 4 November 2026, 81 companies name MISP in their own job postings; it leaves no trace on websites or in DNS.

As of 4 November 2026 · refreshed daily · counts move as websites, DNS and career sites are re-read.

Largest market
–
Companies with 51+ staff
–
Top industry
–
Team that names it most
IT operations & business systems · 131 postings
Hiring on it, last 30 days
78 companies
Most often alongside
MITRE ATT&CK · 78 companies
81companies show MISP, all sources
0on their website or in DNS records
81name it in their own job postings
161postings naming MISP, last 90 days
02 — Two ways we see a tool

Where MISP shows up

Each population is counted on its own. We never add them up without saying so, because they answer different questions.

Website and DNS footprint0

Companies whose own pages load MISP's scripts or embeds, or whose domain's mail and hosting records (SPF, DKIM, MX, CNAME) point at MISP. From our crawl of 41.5M company websites and the DNS sweep behind it. Reach: the tool is in the building.

Job postings81

Companies whose own postings say the team works in MISP. Read hourly from ~70 applicant tracking systems, with the function, a quote and a date. Intent: the team that runs it is hiring.

Both0

Companies in the footprint whose postings also name MISP. The rest of the posting population (81) runs MISP without a public trace on the site or in DNS, which is where job data earns its place.

03 — Who uses it

Companies on MISP

Companies with 51+ employees and at least medium-confidence evidence in their own postings; job boards and portals left out.

Ministère de l'Économie, des Finances et de la Souveraineté industrielle, énergétique et numériqueGovernment agencies & ministries · Paris 12, France10,001+ employeesNXP SemiconductorsSemiconductor manufacturers · Eindhoven, Netherlands10,001+ employeesInternational Rescue CommitteeInternational relief charities · United Kingdom10,001+ employeesRandstad DigitalDigital transformation consulting · Issy-les-Moulineaux, France10,001+ employeesEnoviseManaged cybersecurity services · Chiswick, United Kingdom51-200 employeesPKO Bank PolskiRetail & commercial banks · Warszawa, Poland10,001+ employeesBanorteRetail & commercial banks · Mexico10,001+ employeesQ-Tech CorporationOther electronics & electrical manufacturing · United States51-200 employeesStormshieldManaged cybersecurity services · Lyon, France201-500 employeesNexTech Solutions, LLCDefence systems manufacturers · Huntsville, United States51-200 employeesSentinelOneManaged cybersecurity services · Mountain View, United States1001-5000 employeesHERE TechnologiesFleet & route management software · Chicago, United States5001-10000 employeesPottery BarnFurniture webshops · United States10,001+ employeesConsort GroupIT services & consulting · Dublin 2, France1001-5000 employeesGlobalsManaged cybersecurity services · United States51-200 employeesGSMAIndustry & employer associations · London, United Kingdom501-1000 employeesGeneral MotorsPassenger car & light truck manufacturers · Detroit, United States10,001+ employeesAEROAircraft manufacturers · Odolena Voda, Czechia1001-5000 employeesSITAOther aviation services · United States1001-5000 employeesFTI ConsultingGeneral management consulting · Paris 16, United States5001-10000 employees
81 companies show MISP; 0 of them have over 1,000 employees.

Filter by country, size, team and source, open verified e-mails for the decision makers, or push new matches to your CRM every week.

Free plan: 1,000 records, no card. The first 20 are above; e-mails are verified at the mail server when you open them.

06 — Job-posting evidence

Who runs MISP inside the company

The 81 companies whose postings name MISP: by country, size and the function of the role. The second number in the function table is companies.

Postings by function
postings · companies
IT operations & business systems
131 · 88
Data & AI
5 · 2
public safety and protective services
5 · 3
Legal, compliance & risk
4 · 2
Product, program & project management
4 · 2
Quality, safety & environment
4 · 1
research and science
3 · 2
Software engineering
3 · 2
Sales
2 · 2
Engineering (non-software)
1 · 1
Posting companies by country
companiesshare
United States
4353%
France
911%
United Kingdom
67%
Germany
56%
Luxembourg
22%
Netherlands
22%
Canada
11%
Switzerland
11%
Cyprus
11%
Czechia
11%
Spain
11%
Italy
11%
Posting companies by size
companiesshare
Self-employed
22%
2-10 employees
67%
11-50 employees
2227%
51-200 employees
1114%
201-500 employees
45%
501-1000 employees
56%
1001-5000 employees
1316%
5001-10000 employees
45%
10,001+ employees
1417%
Hiring on it right now
postings
Postings, last 30 days
112
Postings, last 90 days
161
All open postings
188

78 companies opened a role that names MISP in the last 30 days. A hiring team that names its tools is the moment to write to the person who owns the stack.

07 — Named alongside

What MISP teams also ask for

Tools named in the same postings as MISP. Office software is left out.

08 — siem soar threat intel

MISP against the rest of its category

Ranked by companies naming each tool in postings. Whole category →

Cite this

Quote the sentence with the date and the link. The numbers change daily; the link always shows the current ones.

81 companies name MISP in their own job postings; it leaves no trace on websites or in DNS, so the posting layer is the whole picture. (Breaknorm, 4 November 2026, https://breaknorm.co/tools/misp)
How we know

Read from the source, not self-reported

Every number on this page can be traced to a page we crawled or a posting we read. Full methodology →

  • Website codeScripts, tags and embeds found on the company's own pages in our crawl of 41.5M sites. A tool counts once per company.
  • DNS recordsSPF includes, DKIM selectors, MX and CNAME records of the company's domain that point at MISP or another vendor. Swept in cycles; dedicated mail-provider and hosting facets open once coverage passes 80% per country.
  • Job postingsRead hourly from the applicant tracking systems behind company career sites. A tool counts when the employer's own text names it as the team's system; candidate wish-lists and apply boilerplate are excluded. Confidence low, medium or high per company.
  • Sending infrastructureCold-e-mail sending domains are look-alike domains on a provider's infrastructure (DNS records, certificate logs) that redirect to the company. Absence is not evidence: only companies with a found sending domain are counted.
  • CompaniesCountry, size and industry come from the company profile we build from its website; headcount from LinkedIn where known, otherwise estimated. Job boards, portals and aggregators are kept out of lists.
FAQ

MISP data: questions

How many companies use MISP?

81 as of 4 November 2026: 0 carry MISP on their website or in their DNS records and 81 name it in their own job postings; 0 show up in both. We keep the two counts apart because they measure different things.

What does "website or DNS" mean?

Our crawler finds MISP's scripts, embeds and tags on the company's own pages, and our DNS sweep reads the domain's mail and hosting records (SPF includes, DKIM selectors, MX, CNAMEs) that point at MISP. Either one puts the company in the footprint. The sweep is still running, so this number grows week by week.

Why is the job-posting number so much smaller?

A posting only names a tool when the team that will use it is hiring and chooses to say so. That makes it a smaller but stronger signal: it tells you which team runs MISP, with a quote and a date. The footprint tells you reach.

How fresh is this?

Career sites are read hourly, websites are re-crawled on a rolling schedule and DNS is re-swept in cycles. The date at the top is when these counts were computed.

Can I get the list?

Yes. The first 20 are on this page; the full 81 with verified e-mails and a weekly feed of new MISP users is in the product. Counting is free.

Companies and people

Get this list your way

The same data as a search, over MCP and the API, as bulk files, or pushed to you as it changes.

Every company on MISP,
with the person who owns it

Connect the MCP server or the API, filter on MISP, and get 1,000 records free.

  1. 01Sign up, no card
  2. 02Connect Claude, ChatGPT or an API key
  3. 03Ask for your market, 1,000 records free