Reyhford Threat Intelligence API

Global ICS/OT threat intelligence feed via TAXII 2.1. Real-time indicators from distributed honeypot network across SEA and beyond.

REST paths (/v1/indicators/) are generated from buf/proto via google.api.http annotations. TAXII paths (/taxii2/) are maintained here — taxii-server maps internal ThreatIndicator to STIX 2.1 at runtime (Anti-Corruption Layer).