Skip to content

BlueTeam.News v1.0.0

Choose a tag to compare

@ryanshrier ryanshrier released this 13 Jul 15:56

BlueTeam.News is a self-hosted threat-intelligence desk for cyber defense teams. It turns open threat reporting into an operations wall, a filterable evidence-ranked wire, and an optional AI-assisted daily briefing.

Explore the release page · Read the documentation

BlueTeam.News Wall and Wire

Included in 1.0.0

  • The Wall — an unattended, status-aware operations display.
  • The Wire — searchable, filterable threat signals with visible score evidence, KEV, CVSS, EPSS, attribution, and alert context.
  • The Briefing — optional Anthropic-powered daily synthesis with BLUF, calibrated judgments, actions, source links, local history, and export.
  • 41 configured public threat feeds, local SQLite state, and Markdown briefing archives.
  • Cross-platform CI on Node 22 and 24 for Linux, Windows, and macOS.
  • Release hardening for SSRF, untrusted content, authentication, rate limits, secret handling, storage bounds, and last-good data behavior.

Get started

git clone https://github.com/ryanshrier/blueteam.git
cd blueteam
npm install
npm start

Node.js 22 or later is required. The Wall and Wire work without API keys. The optional Briefing requires an Anthropic API key.

Project policy

BlueTeam.News is MIT licensed and maintainer-led. Forks and self-hosted modifications are welcome. Unsolicited pull requests and feature requests are not accepted. The project is provided as-is, with no support, response-time, maintenance, roadmap, or update guarantee.

Security vulnerabilities should be reported privately through GitHub Private Vulnerability Reporting. For operational details, see SECURITY.md and SUPPORT.md.

Full details: CHANGELOG.md