Threat Bus
A pub-sub broker for threat intelligence data that connects open-source security tools like OpenCTI, MISP, Zeek, and VAST.
What is Threat Bus?
Threat Bus is a pub-sub broker for threat intelligence data that connects open-source security tools. It enables seamless integration between threat intel platforms like OpenCTI or MISP and detection tools like Zeek or VAST, facilitating real-time data sharing and enhancing security operations.
Security engineers, threat intelligence analysts, and developers working with open-source security tools who need to integrate disparate systems for threat detection and analysis.
Developers choose Threat Bus for its plugin-based extensibility, native STIX-2 support, and ability to unify the open-source security ecosystem without vendor lock-in, offering a flexible and community-driven integration layer.
Overview
🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
Use Cases
Best For
- Integrating threat intel platforms like OpenCTI with detection tools like Zeek
- Building a unified security operations center with open-source tools
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
