About threat.gg
// Mission
Threat intelligence shouldn't require a six-figure budget and a team of specialists. threat.gg makes it accessible to everyone — from independent researchers and students to enterprise security teams. Deploy honeypots in minutes, not months.
// The Platform
threat.gg monitors 10+ protocols — SSH, PostgreSQL, MySQL, FTP, HTTP, Elasticsearch, Kubernetes API, LDAP, Telnet, SMB, and more. Every attack is captured, geolocated, and made available in real time through a live dashboard, REST API, and MCP integration for AI-powered analysis.
Our lightweight agent runs on any Linux server and emulates high-fidelity services. Attackers interact with what looks like real infrastructure while every credential, command, and payload is logged and forwarded to the threat.gg platform.
// Tech Stack
The platform is built with Go for the backend and agent, Angular for the dashboard, and gRPC for agent-server communication. Data is stored in PostgreSQL with Redis powering the real-time event pipeline. The marketing site you're reading is built with Astro.
// Contact
email: [email protected]
github: joshrendek/threat_gg