脈拍 · みゃくはく · myakuhaku

ninjaPULSE

A tier-1 SIEM ingestor built on a Sunday. Open social TI firehose. Free corroboration scoring. Daily LLM briefing that reads like an analyst wrote it.

Seven feeds: Bluesky, four Mastodon instances, GitHub, Hacker News, abuse.ch (URLhaus + Feodo), CISA KEV. IOC extraction by regex (CVE / IPv4 / domain / URL / SHA-256 / JA4 / CIDR / ASN). Threat actor + malware named-entity recognition via Claude Haiku, gated by daily budget. Per-claim “so-what” summaries cached forever by content hash. Corroboration score across source families. Semantic search over 3,500 docs. STIX 2.1 export. All open source.

Built in 36 hours across two Sundays. ~$0.30/day in LLM tokens. Indexes the cyber social firehose so you don’t have to read it.
part of the ninja.ing ecosystem·source on github·last shipped 27 May 2026