SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
- footprinting
- osint
- threatintel
- python
47,133 repositories indexed
1–15 of 15 · Most stars
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
ThePhish: an automated phishing email analysis tool
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
OASIS TC Open Repository: Python APIs for STIX 2
A modular Python application to collect intelligence for malicious hosts.
Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.
Sandia Cyber Omni Tracker (SCOT)
Protect your SIP Servers from bad actors at https://sentrypeer.org
Open Source Threat Intelligence Platform
A modular Python application to pull intelligence about malicious files
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.