PyPI · npm
OpenCTI-Platform/opencti
Open Cyber Threat Intelligence Platform
Custom licenseAug 28, 2026 · metrics 2.10.0
All tags
Catalogue tag
#threat-intelligence
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
29 records
Packagist · PyPI
MISP/MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
AGPL-3.0Aug 28, 2026 · metrics 2.10.0
PyPI
blacklanternsecurity/bbot
The recursive internet scanner for hackers. 🧡
AGPL-3.0Sep 17, 2026 · metrics 2.10.0
PyPI
kaifcodec/user-scanner
🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 550+ actively maintained scan vectors (175+ email / 375+ username) for security research, investigations, and digital footprinting.
MITSep 9, 2026 · metrics 2.10.0
PyPI
MISP/misp-modules
Modules for expansion services, enrichment, import and export in MISP and other tools.
AGPL-3.0Sep 14, 2026 · metrics 2.10.0
Go · npm
beenuar/AiSOC
Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable.
MITSep 5, 2026 · metrics 2.10.0
Go · Maven · npm
utmstack/UTMStack
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
AGPL-3.0Sep 14, 2026 · metrics 2.10.0
Go
tbckr/trident
CLI tool for OSINT investigations
GPL-3.0Sep 17, 2026 · metrics 2.10.0
npm · PyPI
DNSZLSK/muad-dib
Real-time npm/PyPI supply-chain threat detection. Behavioral chain analysis, AST scanning, IOC feeds, and compound scoring engine.
AGPL-3.0Oct 20, 2026 · metrics 2.10.0
crates.io
gen0sec/synapse
Active NDR solution with eBPF-powered active fingerprint blocking, firewall and proxy. Protect your system -- east-west and north-south.
Custom licenseAug 4, 2026 · metrics 2.10.0
Go
wolffcatskyy/crowdsec-unifi-bouncer
Install and persist the official CrowdSec firewall bouncer on UniFi OS devices (UDM, UDM SE, UDR) with automatic recovery from firmware updates
MITOct 20, 2026 · metrics 2.10.0
PyPI
depalmar/ai_for_the_win
Build AI-powered security tools. 50+ hands-on labs covering ML, LLMs, RAG, threat detection, DFIR, and red teaming. Includes Colab notebooks, Docker environment, and CTF challenges.
Custom licenseSep 16, 2026 · metrics 2.10.0
PyPI
GreyNoise-Intelligence/pygreynoise
Python3 library and command line for GreyNoise
MITSep 10, 2026 · metrics 2.10.0
PyPI
OpenOSINT/OpenOSINT
AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized security research only.
MITSep 18, 2026 · metrics 2.10.0
npm
panguard-ai/panguard-ai
Open-source security platform for AI agents -- audits skills before install, monitors 24/7, shares threat intelligence across all users. | AI Agent 開源安全平台 -- 安裝前審計 skill、24/7 即時監控、社群共享威脅情報。
MITSep 5, 2026 · metrics 2.10.0
Go
jonhadfield/ip-fetcher
Go library and CLI to fetch public IP ranges from cloud platforms, CDNs, crawler bots, monitoring probes and threat intelligence feeds
MITSep 12, 2026 · metrics 2.10.0
PyPI
anyrun/anyrun-sdk
Simplify integration with ANY.RUN REST API services
Apache-2.0Oct 20, 2026 · metrics 2.10.0
crates.io · npm
backbay-labs/clawdstrike
Agentic AI EDR for developer workstations and autonomous agent swarms. Build Swarm Detection & Response platforms with Clawdstrike.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
—
mukul975/Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
ninoseki/ioc-extractor
An npm package for extracting common IoC (Indicator of Compromise) from a block of text
MITSep 23, 2026 · metrics 2.10.0
npm
whisper-sec/whisper-graph-mcp
Open-source MCP server for WhisperGraph — query the internet's infrastructure & threat-intel graph (DNS, BGP, GeoIP, WHOIS) via Cypher.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
osintph/falconeye
Free self-hosted OSINT investigator's toolkit. Sixteen investigation tools in one interface: crypto tracing, phishing fingerprinting, domain intel, Telegram OSINT, IP reputation, email header forensics with LLM scam detection, username enumeration, HIBP breach checks, ransomware victim tracking. AGPL-3.0.
AGPL-3.0Sep 17, 2026 · metrics 2.10.0
Go
r-smith/deceptifeed
Honeypot servers with an integrated threat feed
MITSep 12, 2026 · metrics 2.10.0
PyPI
eremit4/favihunter
Discover and monitor internet assets using favicon hashes across search engines.
MITSep 19, 2026 · metrics 2.10.0
npm
OjasKord/url-safety-validator-mcp
AI-powered URL safety validator MCP server. SAFE/SUSPICIOUS/DANGEROUS verdict for agents.
MITSep 11, 2026 · metrics 2.10.0
Go
rix4uni/gf
A wrapper around grep, to help you grep for things
MITSep 8, 2026 · metrics 2.10.0
Go
syswraith/heimdall
Fast, concurrent username OSINT tool in Go — checks presence across sites via HTTP, JSON, headless browser, and OpenGraph parsing, with SQLite caching and YAML-driven site configs.
AGPL-3.0Sep 13, 2026 · metrics 2.10.0
—
mthcht/ThreatHunting-Keywords
Awesome list of keywords and artifacts for Threat Hunting sessions
No licenseSep 16, 2026 · metrics 2.10.0
npm
dataengineeringformachinelearning/dataengineeringformachinelearning
Data Engineering for Machine Learning — Data, AI, ML, and Cybersecurity community
Apache-2.0Sep 12, 2026 · metrics 2.10.0