You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
iglocska 52e8a5c6a6
new: [enumerations] added enumerations system
3 days ago
.github/workflows chg: minor improv 1 year ago
INSTALL Merge branch 'chg-sync-improvements' into develop-unstable 4 months ago
bin chg: [restructure] the application 3 years ago
config new: [enumerations] schema update added 3 days ago
debian chg: migrate mysql.sql initial schema to a phinx migration 1 year ago
design_docs chg: [doc:diagrams] Added pdf and png diagrams 2 years ago
docker chg: migrate mysql.sql initial schema to a phinx migration 1 year ago
documentation fix: [doc] Typo in text 1 year ago
libraries/default chg: [inboxProcessor:dataChange] Further improved UI and readability 3 months ago
logs Create logs dir 2 years ago
plugins chg: [herlper:bootstrap] Major refactor of the BootstrapHelper to make it more modular + added documentation 6 months ago
resources chg: [restructure] the application 3 years ago
src new: [enumerations] added enumerations system 3 days ago
templates new: [enumerations] added enumerations system 3 days ago
tests fix: fix broken test after wiremock-php/wiremock-php upgrade to v2.33 1 year ago
webroot chg: [UI:saas] Clean-up css files and improved sidebar behavior and rendering for all themes 2 months ago
.gitchangelog.rc new: [doc] gitchangelog.rc added 5 months ago
.gitignore Merge branch 'develop' of into refactor-metatemplates 1 year ago
LICENSE Initial commit 3 years ago chg: small changes to the readme 2 years ago
composer.json chg: php version requirement bumped 6 months ago
index.php chg: [restructure] the application 3 years ago
phpunit.xml.dist add: wiremock tests and boilerplate, update test readme, extend openapi spec 1 year ago


Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other security tools (such as MISP).


  • Advanced repository to manage individuals and organisations;
  • Key store for public encryption and signing cryptographic keys (e.g. PGP);
  • Distributed synchronisation model where multiple Cerebrate instances can be interconnected amongst organisations and/or departments;
  • Management of individuals and their affiliations to each organisations;
  • Advanced API and CLI to integrate with existing tools (e.g. importing existing directory information);
  • Dynamic model for creating new organisational structures;
  • Support existing organisational structures such as directory, EU CSIRTs network;
  • Local tooling interconnection to easily connect existing tools with their native protocols;

Cerebrate is developed in the scope of the MeliCERTes v2 project.



List of individuals along with their affiliations

List of individuals

Adding organisations

Adding an organisation

Everything is available via the API, here an example of a search query for all international organisations in the DB.

API query

Managing public keys and assigning them to users both for communication and validating signed information shared in the community

Encryption key management

Dynamic model for creating new organisation structre

Meta Field Templates

Requirements and installation

The platform is built on CakePHP 4 along with Bootstrap 4 and shares parts of the code-base with MISP.

The installation is documented at the following location INSTALL/ For upgrades, look at INSTALL/

Hardware requirements:

A webserver with 4GB of memory and a single CPU core should be plenty for the current scope of Cerebrate. This might increase over the time with additional features being added, but the goal is to keep Cerebrate as lean as possible. Expect to have at least 40GB of disk space, depending on your log rotation strategy you might want to go higher.

For installation via docker, refer to the cerebrate-docker repo.


    The software is released under the AGPLv3.

    Copyright (C) 2019, 2021  Andras Iklody
    Copyright (C) 2020-2021 Sami Mokaddem
    Copyright (C) CIRCL - Computer Incident Response Center Luxembourg