#1Tools for collecting, analyzing, and operationalizing threat feeds, indicators of compromise (IOCs), and attack trends.
Kitploit recommended

Enterprise-grade honeypot system for detecting internal network breaches, external threats, and producing threat intelligence with 90+ service…
agent runtime security - zero trust, zero setup, zero latency agent sandboxing

CVE cache of the official CVE List in CVE JSON 5 format

The Ultimate Information Gathering Toolkit

A curated knowledge base to build, run and mature a SOC (including CSIRT).

The Ultimate Information Gathering Toolkit

Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

Spam filtering and email processing framework with regex rules, statistical analysis, custom Lua plugins, and external blocklists for MTA integration.

Open source vulnerability DB and triage service.

OSINT Tools for the Dark Web

Rapidly Search and Hunt through Windows Forensic Artefacts

Multi-threaded Windows event log forensics timeline generator and threat hunting tool with full Sigma rule support, producing CSV/JSON timelines for…

List of API's for gathering information about phone numbers, addresses, domains etc

Containerized network traffic analysis suite ingesting PCAP, Zeek logs, and Suricata alerts for automated normalization, enrichment, and correlation…

Open Source Cloud Native Application Protection Platform (CNAPP)

Low-resource honeypot that emulates common network services to detect post-breach attacker activity, with extensible protocol modules and…

Open-source security orchestration, automation, and response (SOAR) platform with a visual workflow editor, prebuilt security app integrations, and…