BlueTeam.News v1.0.0
BlueTeam.News is a self-hosted threat-intelligence desk for cyber defense teams. It turns open threat reporting into an operations wall, a filterable evidence-ranked wire, and an optional AI-assisted daily briefing.
Explore the release page · Read the documentation
Included in 1.0.0
- The Wall — an unattended, status-aware operations display.
- The Wire — searchable, filterable threat signals with visible score evidence, KEV, CVSS, EPSS, attribution, and alert context.
- The Briefing — optional Anthropic-powered daily synthesis with BLUF, calibrated judgments, actions, source links, local history, and export.
- 41 configured public threat feeds, local SQLite state, and Markdown briefing archives.
- Cross-platform CI on Node 22 and 24 for Linux, Windows, and macOS.
- Release hardening for SSRF, untrusted content, authentication, rate limits, secret handling, storage bounds, and last-good data behavior.
Get started
git clone https://github.com/ryanshrier/blueteam.git
cd blueteam
npm install
npm startNode.js 22 or later is required. The Wall and Wire work without API keys. The optional Briefing requires an Anthropic API key.
Project policy
BlueTeam.News is MIT licensed and maintainer-led. Forks and self-hosted modifications are welcome. Unsolicited pull requests and feature requests are not accepted. The project is provided as-is, with no support, response-time, maintenance, roadmap, or update guarantee.
Security vulnerabilities should be reported privately through GitHub Private Vulnerability Reporting. For operational details, see SECURITY.md and SUPPORT.md.
Full details: CHANGELOG.md
