# Threatmarket — Threat Intel Data Marketplace

Public catalog + paid archive of REAL threat intelligence harvested by the
fleet. Metadata is public; payloads are paid — sats/BTC via BTCPay, download
as auto-zipped intel packs.

## Pipeline
Fleet tools (OSINT Terminal's 454 tools, Lynx, Argus, research engine, market
crawls) continuously enumerate real data — subdomains, exposed services, cert
transparency, breach indicators, newly-registered domains. An auto-pipeline
(2×/day) packages a fresh intel pack from a random website/company into
structured JSON/CSV. Only real findings, never made-up data.

`app.py` marketplace API · `cover_gen.py` pack covers · `SITE_SPEC.md` spec ·
`deploy/` CT deployment · `archive/` generated packs (gitignored)