reddit · SideProject · 11-02 14:50 43 分 ← 返回列表

I built a free IOC analysis tool because investigating threats across multiple platforms gets tedious — looking for honest feedback

Hi everyone! I've been building OSINTO ( osinto . io ), a small independent project focused on making IOC investigations less fragmented. When investigating a suspicious IP, domain, URL, or file hash, I often find that the information I need is spread across different tools. You check one source for reputation, another for abuse reports, another for threat intelligence, and then try to piece everything together. I wanted to make that workflow a little easier. OSINTO brings results

五维评分

付费意愿

需求真实度

个人可落地

竞争空间

新鲜度

AI 分析

痛点：安全分析人员调查 IP/域名/URL/文件哈希时,情报分散在多个平台,需要反复切换、手动拼凑结果,效率低。

目标用户：SOC 分析师、威胁狩猎/事件响应人员、CTI 情报分析师,以及中小团队里没有商业威胁情报平台预算的安全工程师。

证据：When investigating a suspicious IP, domain, URL, or file hash, I often find that the information I need is spread across different tools. ... What would make it genuinely valuable rather than just another dashboard? ... OSINTO is free to use at the moment

变现：免费聚合层引流 + 付费订阅(批量查询、API 访问、告警订阅、历史记录保存、团队协作与报告导出);或对商业威胁情报源做联盟返佣。

MVP：2 周内用 Next.js + 若干免费/低价威胁情报 API(VirusTotal、AbuseIPDB、AlienVault OTX、URLScan、MalwareBazaar)做一个统一查询页:输入 IOC 并行拉取各源结果、归一化成风险评分卡片、一键导出 Markdown/JSON 调查报告;不做账号系统,先做查询历史本地存储。

竞品：VirusTotal、AbuseIPDB、AlienVault OTX、Shodan、ThreatFox / abuse.ch、MISP、Intezer、Recorded Future、GreyNoise

摘要：作者因调查 IOC 时情报分散在多平台而自建了免费聚合工具 OSINTO,把多源情报汇总到一个界面,面向 SOC/威胁狩猎/CTI 人员征求反馈。帖子是自发布求意见,没有他人附和,也没有任何付费意愿或收入数据,且该赛道已被 VirusTotal、AbuseIPDB、OTX、GreyNoise 等成熟免费/商业产品占据。技术上独立开发者可低成本复刻,但变现需在批量查询、API、团队协作等专业工作流上做出差异化。