Home MS-ISACMS-ISAC Services

MS-ISAC Services

Membership Overview

For more than two decades, the Multi-State Information Sharing and Analysis Center® (MS-ISAC®) has provided foundational cybersecurity services to U.S. State, Local, Tribal, and Territorial (SLTT) governments. These services were historically funded through a Cooperative Agreement (CA) with the Department of Homeland Security (DHS), supported by Congressional appropriations. With DHS’s decision to end its support for the SLTT community through the MS-ISAC, SLTT leaders have taken proactive steps to ensure the continuity and resilience of these critical services. Beginning October 1, 2025, the MS-ISAC transitioned to a fee-based membership model — created for SLTTs, by SLTTs — to preserve and strengthen the cybersecurity collaboration that has protected communities nationwide for over 20 years.

The MS-ISAC Fee-Based Membership model ensures continuity of critical cybersecurity services your organization depends on, regardless of federal funding fluctuations, providing membership tiers designed to fit your size, budget, and unique needs.

As an SLTT organization, you are on the frontline of defense against cyber threats, and the MS-ISAC equips your organization with a robust cyber defense ecosystem to stay protected that cannot be replicated by commercial vendors or other government programs.

Now through December 31, save 20% on your MS-ISAC membership.
Gain access to essential cyber defense built by and for SLTTs.

If your membership has expired, log in to the CIS Portal to review renewal options and reactivate your access and save.

RE-ENROLL NOW

New to the MS-ISAC? Now’s the perfect time to become a member and unlock SLTT-focused cybersecurity services, expert resources, and real-time collaboration—all at a reduced rate.

Join Now

For California, the Malicious Domain Blocking and Reporting (MDBR) service has been effective as an additional source of threat intelligence. This capability adds an additional element of automation in our security operations processes and playbooks, resulting in greater efficiencies. The preventive blocking and reporting provides metrics on true positive and high-fidelity events, allowing our internal teams to focus on more sophisticated attacks.”

Chief Information Security Officer

State of California

Threat Intelligence Distribution

SLTT Specific Threat Intelligence Analysis Products and Reporting
MS-ISAC Threat Intelligence Platform STIX/TAXII and MISP Access
Virtual Threat Intelligence Briefings (SLTT threat brief)

Member Collaboration and Engagement

Exclusive access to a collaborative peer community
1:1 service consultations with CIS cybersecurity experts
MS-ISAC Annual Membership Meeting
Monthly membership calls
Best practice webinars led by experienced peers and top experts
SLTT mentorship program

Incident Response & Forensic Services

MS-ISAC Incident Response & Forensic Services (as resources allow)

Security Operations Center (SOC)*

24x7x365 SOC Access SOC Alerts, Advisories, Weekly Malicious IP/Domain List
Cyber Early Warning Service
- Targeted Vulnerability Notifications
- Initial Access Broker (IAB) Monitoring
- Breached Credential Monitoring
- IP and Domain Monitoring