Download

Get zsazsa from GitHub

zsazsa is open source. There are no binaries; you clone the repository and install it on top of your existing MISP infrastructure.

Clone the repository

The official source lives on GitHub under zsazsa-project/zsazsa. Clone it and let the Docker setup ask how your MISP runs, or install it next to MISP without Docker.

git clone https://github.com/zsazsa-project/zsazsa.git
cd zsazsa
bash docker/setup.sh

Open on GitHub Download ZIP

What you need first

zsazsa sits on top of MISP and does not install it for you. Have these ready:

A MISP server to store CTI program data, and an API key for it
Redis; the one MISP uses is enough
Docker with the compose plugin, or Python 3.10 or later
Optional: misp-scraper, other MISP servers to collect from, and an AI provider

Follow the quickstart →

Licence & support

Open source, community-driven

zsazsa is released under an open-source licence. Bug reports, feature requests and pull requests are welcome on GitHub. Issues and discussions are the best place to get help and to follow the project's direction.

Issues

Report bugs and request features in the GitHub issue tracker.

Open issues →

Source & releases

Browse the code, releases and commit history on GitHub.

View repository →

Licence

See the LICENSE file in the repository for the full terms.

Read the licence →

Built with AI. zsazsa is developed with the support of AI. The code is open source, so you can read exactly what it does before you run it.

Installed it? The setup wizard does the rest.

Set up your organisation, data collection sources, AI, focus points and notifications, then start collecting and producing.

Quickstart Explore features