<?xml version="1.0" encoding="UTF-8"?>
<opml version="2.0">
  <head>
    <title>ThreatCluster — Public RSS Feeds</title>
    <ownerName>ThreatCluster</ownerName>
    <ownerEmail>hello@threatcluster.io</ownerEmail>
    <docs>http://opml.org/spec2.opml</docs>
  </head>
  <body>
    <outline text="ThreatCluster" title="ThreatCluster">
      <outline type="rss" version="RSS2"
               text="ThreatCluster — Threat Feed"
               title="ThreatCluster — Threat Feed"
               description="Top trending threat clusters (last 7 days, 50 items, hourly refresh)."
               xmlUrl="https://threatcluster.io/feed.xml"
               htmlUrl="https://threatcluster.io/"/>
      <outline type="rss" version="RSS2"
               text="ThreatCluster — Vulnerability Feed"
               title="ThreatCluster — Vulnerability Feed"
               description="Latest CVEs from the last 7 days (50 items, hourly refresh) with KEV + PoC indicators."
               xmlUrl="https://threatcluster.io/vulnerabilities/feed.xml"
               htmlUrl="https://threatcluster.io/vulnerabilities"/>
      <outline type="rss" version="RSS2"
               text="ThreatCluster — Exploits Feed"
               title="ThreatCluster — Exploits Feed"
               description="CVEs with public proof-of-concept exploit code (last 30 days, 50 items, sorted by exploit availability)."
               xmlUrl="https://threatcluster.io/exploits/feed.xml"
               htmlUrl="https://threatcluster.io/exploits"/>
      <outline type="rss" version="RSS2"
               text="ThreatCluster — Dark Web Victims Feed"
               title="ThreatCluster — Dark Web Victims Feed"
               description="Newly observed victims on ransomware leak sites (last 14 days, 50 items, hourly refresh)."
               xmlUrl="https://threatcluster.io/dark-web/feed.xml"
               htmlUrl="https://threatcluster.io/dark-web"/>
    </outline>
  </body>
</opml>
