Draugnet connects to a MISP community and lets anyone submit threat intelligence in multiple formats — no account required. Each submission gets a token you can use to retrieve the report and any updates the community adds to it.
An easy way to report to a CSIRT, a central authority of a sharing community, or a partner — without negotiating access first. It also lets you keep up to date with changes made to your report and can act as a lightweight collaboration tool.
Draugnet supports fully anonymous submissions. The only link it stores is between the MISP event UUID generated from your report and the token handed back to you — no identity, no account, no tracking.
Submit as plain freetext, a MISP JSON document, a MISP object template, a STIX 2.x bundle, or a structured CSV — whichever fits your workflow.
Append new information to an existing report at any time using any submission format.
POST to the same endpoint and include your token as a query parameter
(?token=…) to update rather than create.
format=<fmt> to /retrieve.