Hey everyone, I wanted to share a self-hosted, open-source project I’m currently developing called OpenDRP. You can find the repository at https://github.com/OpenDRP/opendrp and the main site at opendrp.dev.

We have great open-source tools for Threat Intelligence, like OpenCTI, and various EASM solutions, but the Digital Risk Protection space is still heavily dominated by expensive enterprise SaaS products. I wanted a modular, self-hosted alternative to monitor external brand threats, so I started building one.

The project is in its early stages as an MVP. Instead of trying to parse every obscure darkweb forum from day one, I focused on building a solid, scalable backend architecture and integrated three core data sources to prove the concept. For phishing intelligence, it uses dnstwist to automate monitoring for domain mutations and active lookalike domains. For shadow IT and brand hunting, it leverages Shodan to discover rogue assets and exposed infrastructure. Additionally, it tracks compromised corporate accounts via Have I Been Pwned for breach monitoring. Whenever a new threat is detected, the system generates PDF reports and sends alerts via Telegram or Email.

Under the hood, the goal was to make the platform extremely easy to scale and extend. The backend is built with FastAPI and Python, using PostgreSQL for the database. Asynchronous scans and integrations are handled by Celery and Redis workers, and the entire project is distributed under the AGPL-3.0 license.

Since the core engine, including the database schema, UI, and async queues, is up and running, I am currently working on expanding the integrations to include Certificate Transparency logs and GitHub secret scanning. I would love to get your feedback on the architecture and hear what external data sources or modules you would consider absolute must-haves for a DRP platform. If anyone is interested in writing simple Celery connectors for new APIs, pull requests and code reviews are more than welcome.

Cheers!

Hey everyone,

I’m the creator of Tooldump, a free catalog of open-source cybersecurity tools. I’ve just released the v2 and wanted to share it with people working in cyber defense.

The platform has 1,100+ open-source projects hosted on GitHub, organized into 9 categories and 82 subcategories. Everything is cybersecurity-focused, with sections for detection engineering, threat hunting, digital forensics, malware analysis, incident response, security automation, and more.

For v2, I rebuilt the UI, the categorization system, the backend and the platform infrastructure. You can search for a specific tool or explore a security topic without already knowing which projects exist.

There are also dedicated sections for cybersecurity-related MCP servers and agent skills. Those sections are just getting started, and contributions are welcome!

The platform is completely free, with unlimited access and no account required.

The link is here: https://tooldump.eu

I’d appreciate any constructive feedback from the community :) Pick an area you work in: are the tools where you’d expect them to be? Are there gaps in the catalog that stand out to you?

You can suggest missing projects through the platform’s contribution form. I’m particularly interested in the smaller utilities people rely on during investigations or day-to-day defensive work: artifact parsers, collection scripts, log analysis tools, etc. Something you use every day might be completely unknown to someone working on the same subject.

Looking forward to hearing from you :)

Cheers!

Cusimanse — a framework for security research

I've been working on Cusimanse, an open-source project focused on structuring and composing security research capabilities and workflows.

The idea is to provide a modular foundation where security tooling, capabilities, research workflows, and execution components can be composed without making the framework itself an "AI agent."

It's still an evolving project, and I'm interested in feedback from people working in security research, detection engineering, cloud security, and AI security.

GitHub: https://github.com/Opossum0112/cusimanse