{
  "about": "Security and threat-intelligence feed directory from threatfilter.dev",
  "documentation": "https://threatfilter.dev/sources/",
  "opml": "https://threatfilter.dev/feeds.opml",
  "license": "Feed URLs are public endpoints published by their respective vendors.",
  "count": 52,
  "categories": [
    {
      "id": "cert",
      "label": "CERTs & Government Advisories",
      "count": 12,
      "opml": "https://threatfilter.dev/feeds/cert.opml"
    },
    {
      "id": "devops",
      "label": "DevOps & CI/CD",
      "count": 1,
      "opml": "https://threatfilter.dev/feeds/devops.opml"
    },
    {
      "id": "edr",
      "label": "Endpoint & EDR Vendors",
      "count": 3,
      "opml": "https://threatfilter.dev/feeds/edr.opml"
    },
    {
      "id": "email",
      "label": "Email Security",
      "count": 1,
      "opml": "https://threatfilter.dev/feeds/email.opml"
    },
    {
      "id": "firewall",
      "label": "Firewall & Network Vendors",
      "count": 4,
      "opml": "https://threatfilter.dev/feeds/firewall.opml"
    },
    {
      "id": "news",
      "label": "Security News",
      "count": 19,
      "opml": "https://threatfilter.dev/feeds/news.opml"
    },
    {
      "id": "os",
      "label": "Operating System Vendors",
      "count": 3,
      "opml": "https://threatfilter.dev/feeds/os.opml"
    },
    {
      "id": "pam",
      "label": "Privileged Access",
      "count": 1,
      "opml": "https://threatfilter.dev/feeds/pam.opml"
    },
    {
      "id": "siem",
      "label": "SIEM & Logging",
      "count": 2,
      "opml": "https://threatfilter.dev/feeds/siem.opml"
    },
    {
      "id": "vuln-mgmt",
      "label": "Vulnerability Management",
      "count": 6,
      "opml": "https://threatfilter.dev/feeds/vuln-mgmt.opml"
    }
  ],
  "feeds": [
    {
      "id": "apple-security",
      "name": "Apple Security / Releases",
      "url": "https://developer.apple.com/news/releases/rss/releases.rss",
      "format": "rss",
      "category": "os",
      "category_label": "Operating System Vendors"
    },
    {
      "id": "bleepingcomputer",
      "name": "BleepingComputer",
      "url": "https://www.bleepingcomputer.com/feed/",
      "format": "rss",
      "category": "news",
      "category_label": "Security News"
    },
    {
      "id": "cert-eu",
      "name": "CERT-EU Security Advisories",
      "url": "https://cert.europa.eu/publications/security-advisories-rss",
      "format": "rss",
      "category": "cert",
      "category_label": "CERTs & Government Advisories"
    },
    {
      "id": "cert-fr-alerte",
      "name": "CERT-FR Alertes",
      "url": "https://www.cert.ssi.gouv.fr/alerte/feed/",
      "format": "rss",
      "category": "cert",
      "category_label": "CERTs & Government Advisories"
    },
    {
      "id": "cert-fr-avis",
      "name": "CERT-FR Avis de sécurité",
      "url": "https://www.cert.ssi.gouv.fr/avis/feed/",
      "format": "rss",
      "category": "cert",
      "category_label": "CERTs & Government Advisories"
    },
    {
      "id": "checkpoint",
      "name": "Check Point Research",
      "url": "https://research.checkpoint.com/feed/",
      "format": "rss",
      "category": "firewall",
      "category_label": "Firewall & Network Vendors"
    },
    {
      "id": "cisa-blog",
      "name": "CISA Blog",
      "url": "https://www.cisa.gov/blog.xml",
      "format": "rss",
      "category": "cert",
      "category_label": "CERTs & Government Advisories"
    },
    {
      "id": "us-cert-ces",
      "name": "CISA Current Activity (US-CERT)",
      "url": "https://us-cert.cisa.gov/ncas/current-activity.xml",
      "format": "rss",
      "category": "cert",
      "category_label": "CERTs & Government Advisories"
    },
    {
      "id": "cisa-alerts",
      "name": "CISA Cybersecurity Advisories",
      "url": "https://www.cisa.gov/cybersecurity-advisories/all.xml",
      "format": "rss",
      "category": "cert",
      "category_label": "CERTs & Government Advisories"
    },
    {
      "id": "cisa-kev",
      "name": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
      "format": "json",
      "category": "cert",
      "category_label": "CERTs & Government Advisories"
    },
    {
      "id": "cisa-news",
      "name": "CISA News",
      "url": "https://www.cisa.gov/news.xml",
      "format": "rss",
      "category": "cert",
      "category_label": "CERTs & Government Advisories"
    },
    {
      "id": "cisco-psirt",
      "name": "Cisco PSIRT",
      "url": "https://sec.cloudapps.cisco.com/security/center/psirtrss20/CiscoSecurityAdvisory.xml",
      "format": "rss",
      "category": "firewall",
      "category_label": "Firewall & Network Vendors"
    },
    {
      "id": "talos-intel",
      "name": "Cisco Talos Intelligence",
      "url": "https://blog.talosintelligence.com/rss/",
      "format": "rss",
      "category": "news",
      "category_label": "Security News"
    },
    {
      "id": "crowdstrike-blog",
      "name": "CrowdStrike Blog",
      "url": "https://www.crowdstrike.com/blog/feed/",
      "format": "rss",
      "category": "edr",
      "category_label": "Endpoint & EDR Vendors"
    },
    {
      "id": "cyberark-blog",
      "name": "CyberArk Blog",
      "url": "https://www.cyberark.com/feed/",
      "format": "rss",
      "category": "pam",
      "category_label": "Privileged Access"
    },
    {
      "id": "darkreading",
      "name": "Dark Reading",
      "url": "https://www.darkreading.com/rss.xml",
      "format": "rss",
      "category": "news",
      "category_label": "Security News"
    },
    {
      "id": "elastic-security-labs",
      "name": "Elastic Security Labs",
      "url": "https://www.elastic.co/security-labs/rss/feed.xml",
      "format": "rss",
      "category": "siem",
      "category_label": "SIEM & Logging"
    },
    {
      "id": "welivesecurity",
      "name": "ESET WeLiveSecurity",
      "url": "https://www.welivesecurity.com/en/rss/feed/",
      "format": "rss",
      "category": "news",
      "category_label": "Security News"
    },
    {
      "id": "fortinet-psirt",
      "name": "Fortinet PSIRT",
      "url": "https://www.fortiguard.com/rss/ir.xml",
      "format": "rss",
      "category": "firewall",
      "category_label": "Firewall & Network Vendors"
    },
    {
      "id": "gitlab-security",
      "name": "GitLab Security Releases",
      "url": "https://about.gitlab.com/security-releases.xml",
      "format": "atom",
      "category": "devops",
      "category_label": "DevOps & CI/CD"
    },
    {
      "id": "project-zero",
      "name": "Google Project Zero",
      "url": "https://googleprojectzero.blogspot.com/feeds/posts/default",
      "format": "atom",
      "category": "vuln-mgmt",
      "category_label": "Vulnerability Management"
    },
    {
      "id": "google-tag",
      "name": "Google Threat Analysis Group",
      "url": "https://security.googleblog.com/feeds/posts/default",
      "format": "atom",
      "category": "news",
      "category_label": "Security News"
    },
    {
      "id": "greynoise-blog",
      "name": "GreyNoise Labs",
      "url": "https://www.greynoise.io/blog/rss.xml",
      "format": "rss",
      "category": "news",
      "category_label": "Security News"
    },
    {
      "id": "group-ib-blog",
      "name": "Group-IB Blog",
      "url": "https://www.group-ib.com/blog/rss.xml",
      "format": "rss",
      "category": "news",
      "category_label": "Security News"
    },
    {
      "id": "huntress-blog",
      "name": "Huntress Blog",
      "url": "https://www.huntress.com/blog/rss.xml",
      "format": "rss",
      "category": "edr",
      "category_label": "Endpoint & EDR Vendors"
    },
    {
      "id": "jpcert",
      "name": "JPCERT/CC",
      "url": "https://www.jpcert.or.jp/english/rss/jpcert-en.rdf",
      "format": "rss",
      "category": "cert",
      "category_label": "CERTs & Government Advisories"
    },
    {
      "id": "krebs-on-security",
      "name": "Krebs on Security",
      "url": "https://krebsonsecurity.com/feed/",
      "format": "rss",
      "category": "news",
      "category_label": "Security News"
    },
    {
      "id": "malwarebytes-labs",
      "name": "Malwarebytes Labs",
      "url": "https://www.malwarebytes.com/blog/feed/index.xml",
      "format": "rss",
      "category": "news",
      "category_label": "Security News"
    },
    {
      "id": "mandiant-blog",
      "name": "Mandiant Blog",
      "url": "https://cloudblog.withgoogle.com/topics/threat-intelligence/rss/",
      "format": "rss",
      "category": "news",
      "category_label": "Security News"
    },
    {
      "id": "microsoft-msrc",
      "name": "Microsoft MSRC",
      "url": "https://api.msrc.microsoft.com/update-guide/rss",
      "format": "rss",
      "category": "os",
      "category_label": "Operating System Vendors"
    },
    {
      "id": "microsoft-security-blog",
      "name": "Microsoft Security Blog",
      "url": "https://www.microsoft.com/en-us/security/blog/feed/",
      "format": "rss",
      "category": "os",
      "category_label": "Operating System Vendors"
    },
    {
      "id": "ncsc-uk",
      "name": "NCSC UK",
      "url": "https://www.ncsc.gov.uk/api/1/services/v1/report-rss-feed.xml",
      "format": "rss",
      "category": "cert",
      "category_label": "CERTs & Government Advisories"
    },
    {
      "id": "ncsc-uk-news",
      "name": "NCSC UK News",
      "url": "https://www.ncsc.gov.uk/api/1/services/v1/news-rss-feed.xml",
      "format": "rss",
      "category": "cert",
      "category_label": "CERTs & Government Advisories"
    },
    {
      "id": "nvd-cve",
      "name": "NVD CVE 2.0 API",
      "url": "https://services.nvd.nist.gov/rest/json/cves/2.0",
      "format": "json",
      "category": "cert",
      "category_label": "CERTs & Government Advisories"
    },
    {
      "id": "palo-alto-psirt",
      "name": "Palo Alto Networks PSIRT",
      "url": "https://security.paloaltonetworks.com/rss.xml",
      "format": "rss",
      "category": "firewall",
      "category_label": "Firewall & Network Vendors"
    },
    {
      "id": "unit42",
      "name": "Palo Alto Unit 42",
      "url": "https://unit42.paloaltonetworks.com/feed/",
      "format": "rss",
      "category": "news",
      "category_label": "Security News"
    },
    {
      "id": "proofpoint-blog",
      "name": "Proofpoint Threat Insight",
      "url": "https://www.proofpoint.com/us/rss.xml",
      "format": "rss",
      "category": "email",
      "category_label": "Email Security"
    },
    {
      "id": "qualys-blog",
      "name": "Qualys Security Blog",
      "url": "https://blog.qualys.com/feed",
      "format": "rss",
      "category": "vuln-mgmt",
      "category_label": "Vulnerability Management"
    },
    {
      "id": "rapid7-blog",
      "name": "Rapid7 Blog",
      "url": "https://www.rapid7.com/blog/rss/",
      "format": "rss",
      "category": "vuln-mgmt",
      "category_label": "Vulnerability Management"
    },
    {
      "id": "sans-isc",
      "name": "SANS Internet Storm Center",
      "url": "https://isc.sans.edu/rssfeed_full.xml",
      "format": "rss",
      "category": "news",
      "category_label": "Security News"
    },
    {
      "id": "schneier",
      "name": "Schneier on Security",
      "url": "https://www.schneier.com/feed/atom/",
      "format": "atom",
      "category": "news",
      "category_label": "Security News"
    },
    {
      "id": "securelist",
      "name": "Securelist (Kaspersky)",
      "url": "https://securelist.com/feed/",
      "format": "rss",
      "category": "news",
      "category_label": "Security News"
    },
    {
      "id": "securityweek",
      "name": "SecurityWeek",
      "url": "https://www.securityweek.com/feed/",
      "format": "rss",
      "category": "news",
      "category_label": "Security News"
    },
    {
      "id": "sentinelone-labs",
      "name": "SentinelLabs",
      "url": "https://www.sentinelone.com/labs/feed/",
      "format": "rss",
      "category": "edr",
      "category_label": "Endpoint & EDR Vendors"
    },
    {
      "id": "sophos-news",
      "name": "Sophos News — Threat Research",
      "url": "https://news.sophos.com/en-us/category/threat-research/feed/",
      "format": "rss",
      "category": "news",
      "category_label": "Security News"
    },
    {
      "id": "splunk-advisories",
      "name": "Splunk Security Advisories",
      "url": "https://advisory.splunk.com/feed.xml",
      "format": "rss",
      "category": "siem",
      "category_label": "SIEM & Logging"
    },
    {
      "id": "tenable-advisories",
      "name": "Tenable Research",
      "url": "https://www.tenable.com/blog/feed",
      "format": "rss",
      "category": "vuln-mgmt",
      "category_label": "Vulnerability Management"
    },
    {
      "id": "thehackernews",
      "name": "The Hacker News",
      "url": "https://feeds.feedburner.com/TheHackersNews",
      "format": "rss",
      "category": "news",
      "category_label": "Security News"
    },
    {
      "id": "the-record",
      "name": "The Record by Recorded Future",
      "url": "https://therecord.media/feed/",
      "format": "rss",
      "category": "news",
      "category_label": "Security News"
    },
    {
      "id": "trendmicro-research",
      "name": "Trend Micro Research",
      "url": "https://feeds.feedburner.com/TrendMicroSimplySecurity",
      "format": "rss",
      "category": "news",
      "category_label": "Security News"
    },
    {
      "id": "zdi-published",
      "name": "Zero Day Initiative — Published Advisories",
      "url": "https://www.zerodayinitiative.com/rss/published/",
      "format": "rss",
      "category": "vuln-mgmt",
      "category_label": "Vulnerability Management"
    },
    {
      "id": "zdi-blog",
      "name": "Zero Day Initiative Blog",
      "url": "https://www.zerodayinitiative.com/blog?format=rss",
      "format": "rss",
      "category": "vuln-mgmt",
      "category_label": "Vulnerability Management"
    }
  ]
}