Hi Product Hunt! I built Tifon because people who defend a company start every morning with hundreds of security news items spread over dozens of sites, many repeating the same incident under different titles. Tifon reads them and hands over one report per incident.

How it works:

• It reads 69 RSS/Atom feeds straight from the sources (research labs, government advisories, the security press). No third-party news API.

• An LLM turns each article into a structured report: summary, CVEs, IOCs, ATT&CK techniques, affected products, threat actors, victim sectors and criticality. Fields the article doesn't state stay empty.

• Articles about the same incident join one case with a timeline of sources, and every night the cases that turn out to be the same story are merged.

• When a CVE has a public exploit in Exploit-DB, the case shows it with an explanation.

Without an account you can browse the feed, search with Elasticsearch syntax (try criticity:critical or cves:CVE-2026-*), open the dashboard and use the read-only JSON API at tifon.dev/api/news.

With a free account: alerts on Slack, Discord or Telegram filtered by your stack (an AI check only sends what it rates above 70% relevance and learns from your votes), monitoring of lookalike domains of your brand, and a daily GitHub search for leaked keys and code tied to it.

Heads-up: the interface is in Portuguese (Tifon is built in Brazil); each report can be read in English or Portuguese with the switch at the top.

I'd love your feedback on the case grouping and on what you would want from the alerts.