v1.1.1
Summary
Patch release: privacy and cloud data-handling disclosures for the public Groq-based Streamlit demo — clarifying where analyst questions and retrieved MITRE/KEV context are sent (Groq for generation, HuggingFace for query embeddings) and recommending synthetic or general threat-intel questions on the live app.
Live demo: https://threat-intelligence-rag-assistant.streamlit.app/
What's new
Privacy & data transparency
- README Privacy & data handling section under Safety (data flow table: LLM, embeddings, retrieved chunks, session memory)
- Short privacy callout at top of README and under Live Demo
- Streamlit sidebar Privacy & data expander (Groq + HuggingFace warning on cloud; Ollama/local note when self-hosted)
- docs/architecture.md — privacy cross-link in Security and safety section
- Guidance: no classified data, credentials, or live incident details on the public demo; use Ollama locally (or Docker with local profile) for sensitive environments
README polish
- Docker and RAG (Grounded Citations) badges at the top of the README (alongside Release, CI, License, Streamlit)
Quick start
Unchanged from v1.1.0 — see README Quick Start.
git clone https://github.com/rvong65/threat-intelligence-assistant.git
cd threat-intelligence-assistant
python -m venv .venv
source .venv/bin/activate # Windows: .venv\Scripts\activate
pip install -r requirements.txt
copy .env.example .env
streamlit run app.pyDocker:
git clone https://github.com/rvong65/threat-intelligence-assistant.git
cd threat-intelligence-assistant
docker compose up --build
# open http://localhost:8501