Abstract: Methods, systems, devices and computer program products provide a multi-user collaborative environment for malware and security threat analyses and mitigation. One methodology for collaborative evaluation of cyber security threats includes receiving information associated with a cyber activity that is indicative of a potential cyber attack, and processing the information at a first server of the collaborative cyber analysis system to incorporate share restriction rules that include rules based on specific regulations promulgated by a government or an international organization, rules based on a enterprise policy or rules that are set by a user that are specific to the information. The processed information is then transmitted to a second server of the collaborative cyber analysis system, where the second server is allowed to access at least a portion of the information associated with the cyber activity, the enhanced information, or the cyber security countermeasure subject to the share restriction rules.