GOSINT
Open Source Threat Intelligence Gathering and Processing Framework
Open Source Threat Intelligence Gathering and Processing Framework
Checked October 2026.
The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs). GOSINT allows a security analyst to collect and standardize structured and unstructured threat intelligence. Applying threat intelligence to security operations enriches alert data with additional confidence, context, and co-occurrence.
This means that you apply research from third parties to security event data to identify similar, or identical, indicators of malicious behavior. The framework is written in Go with a JavaScript frontend.
Installation: Please find the installation procedure at http://gosint.readthedocs.io/en/latest/installation.html. There are three ways to get up and running: Bash install script, Docker, Manual installation.
Updates: Updating is simple and encouraged as bugs are reported and fixed or new features are added. To update your instance of GOSINT, pull the latest version of GOSINT from the repository and re-run the build command to compile the updated binary: godep go build -o gosint.
Configuration: GOSINT needs some quick initial configuration to start making use of it.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about GOSINT: features, pricing and alternatives.
GOSINT is a product in the Threat Intel Platforms category. It covers Cyber Threat Intelligence.
GOSINT is free. Download and setup instructions are at https://github.com/ciscocsirt/gosint/.
Alternatives to GOSINT listed on CybersecTools:
Compare all GOSINT alternatives at https://cybersectools.com/alternatives/gosint
GOSINT is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
OSINT platform for blockchain investigation, crypto fraud analysis
AI-driven platform that operationalizes threat intel into risk-prioritized actions
Threat intelligence platform combining Google, Mandiant, and VirusTotal data
Real-time threat intel platform detecting malicious scanning & exploitation
Detects compromised assets via outbound traffic to GreyNoise sensors & malicious IPs
Enterprise threat intelligence platform for proactive threat detection
On our shortlist?
GOSINT is not a pick on the current Best Threat Intelligence Platform Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,033 products.
Connect your AI
