# ThreatAggregator

ThreatAggregator is a Threat Intel Platforms product. It runs on-premises. Pricing is free.

Aggregates security threats from online sources and outputs to various formats.

## What is ThreatAggregator?

Aggregates security threats from a number of online sources, and outputs to Syslog CEF, Snort Signatures, Iptables rules, hosts.deny, etc. feeds.py contains a dictionary list of various feeds to use.
config.py contains a small list of configuration settings for syslog purposes.
Usage: Simply run threataggregator.py with no arguments.
Application will grab HTTP-based feeds from feeds.py, and send syslog packets to the target specified in config.py.
Standard JSON-formatted output will also be displayed stdout from threataggregator.py.

Tags: Snort, Linux, Cyber Threat Intelligence

## Where it fits in your security program (NIST CSF 2.0)

- [Detect](https://cybersectools.com/guides/building-detect-program-small-team): helps you spot attacks and unusual activity.

## Quick facts

- Category: [Threat Intelligence](https://cybersectools.com/categories/threat-intelligence) · [Threat Intel Platforms](https://cybersectools.com/categories/tip)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 82
- Website: github.com

## Where it ranks

ThreatAggregator is not a pick on the current [Best Threat Intelligence Platform Solutions for Business](https://cybersectools.com/shortlists/best-threat-intelligence-platforms).

## ThreatAggregator FAQ

### What is ThreatAggregator?

ThreatAggregator is a product in the Threat Intel Platforms category. It covers Snort, Linux and Cyber Threat Intelligence.

### What is the pricing for ThreatAggregator?

ThreatAggregator is free. Download and setup instructions are at https://github.com/jpsenior/threataggregator/.

### What are alternatives to ThreatAggregator?

Alternatives to ThreatAggregator listed on CybersecTools:

1. [Hudson Rock Cybercrime Intelligence Tools](https://cybersectools.com/tools/hudson-rock-cybercrime-intelligence-tools) - Cybercrime intelligence tools for searching compromised credentials from infostealers (Free)
2. [Cypho](https://cybersectools.com/tools/cypho) - Continuous threat intelligence and exposure management across dark, deep & clear web. (Commercial)
3. [Q-Feeds Threat Intelligence Platform](https://cybersectools.com/tools/q-feeds-threat-intelligence-platform) - Threat intel portal and curated IOC feeds for firewalls, SIEMs and TIPs (Commercial)
4. [Check Point ThreatCloud AI](https://cybersectools.com/tools/check-point-threatcloud-ai) - AI-powered threat intelligence platform with generative AI capabilities (Commercial)
5. [Resecurity Nex-Gen Cybersecurity Platform](https://cybersectools.com/tools/resecurity-nex-gen-cybersecurity-platform) - Next-gen cybersecurity platform for threat detection & digital risk mgmt. (Commercial)

Compare all ThreatAggregator alternatives at [https://cybersectools.com/alternatives/threataggregator](https://cybersectools.com/alternatives/threataggregator)

### What deployment and organization size does ThreatAggregator fit?

ThreatAggregator is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare ThreatAggregator with similar solutions

- [ThreatAggregator vs Hudson Rock Cybercrime Intelligence Tools](https://cybersectools.com/compare/hudson-rock-cybercrime-intelligence-tools-vs-threataggregator)
- [ThreatAggregator vs Cypho](https://cybersectools.com/compare/cypho-vs-threataggregator)
- [ThreatAggregator vs Q-Feeds Threat Intelligence Platform](https://cybersectools.com/compare/q-feeds-threat-intelligence-platform-vs-threataggregator)

All alternatives to ThreatAggregator: [/alternatives/threataggregator](https://cybersectools.com/alternatives/threataggregator)

---

Source: https://cybersectools.com/tools/threataggregator

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on ThreatAggregator: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md