OSINT Sources for Protective Work

This is a working list of open sources for protective and small-team operations — advance research, pre-travel assessment, and monitoring through an operational window.

A note on the reads below: these are our opinions from actually running these sources, not measured benchmarks. We describe each on four rough dimensions — coverage (how much of what you care about), latency (how fast events show up), noise (how much triage it demands), and setup (effort to useful output). Treat them as a practitioner's starting take, not gospel. Sources change, your region changes, and a source that's noise for one team is signal for another. Calibrate against your own use.

Event and incident feeds

GDELT — the broadest machine-readable event feed there is, built from global news monitoring across languages. Broad coverage, moderate latency, high noise, real setup cost. GDELT is a firehose with a learning curve. Raw, it'll bury you — duplicate events, geocoding errors, relevance scatter. Scoped tightly to a region and window and deduplicated, it surfaces things no single outlet would. Worth it if you'll invest the setup; frustrating as a casual tool.

GDACS — the UN-backed global disaster alert system: earthquakes, floods, cyclones, volcanic activity. Strong for natural events, nothing else. Fast, very low noise, trivial setup. Does one job with almost no false positives. Every team operating internationally should have it wired. It will never tell you about a protest or a closure — not its job.

ACLED — curated political violence and protest event data, analyst-coded. Strong for conflict and unrest. Slow — curated, not live. Low noise, moderate setup. The distinction that matters: ACLED is for understanding a region's pattern before you go — density, actors, trend. It is not for watching your window. Use it in the area study, not the live watch.

Official advisories

U.S. State Department advisories + STEP — country-level guidance; STEP adds embassy alerts for your dates. Every country, slow to move, low noise, easy. The advisory level itself is coarse. The country-page details and the embassy alerts during your window are the value. Read non-U.S. equivalents alongside — the UK FCDO is notably direct — because the deltas between national advisories are themselves informative.

FAA TFRs / NOTAMs — U.S. airspace restrictions and notices. U.S. only, fast, low noise if you filter by area. Niche but sharp: a temporary flight restriction over your operating area is a strong signal about who else will be there.

Local and area sources

Local news (by RSS) — the two or three outlets that actually cover your operating area. Exactly your area — the point. Reasonably fast, low noise once curated. The setup is the work. Per unit of attention, curated local feeds are the strongest source on this list. A city-desk reporter knows about the construction project, the permit fight, and the neighborhood tension long before any global feed. Finding the right locals in an unfamiliar region — especially a non-English one — is the real effort, and it's worth it.

Municipal permit, closure, and transit pages — city road-work calendars, event permits, transit alerts. Your exact routes and venues. Often ahead of events. Low noise, city-dependent setup. The most underrated category. A permit database is the closest open sources get to seeing the environment's plan for your window.

Social platforms

X / local social channels — the fastest-moving layer. Dense where people are, dark where they aren't. Fastest available, extreme noise, high setup to do well. Speed is real; so is the misinformation tax. The working rule: social sources cue — they tell you where to look. Confirmation comes from somewhere else. Treat velocity as a property of the medium, not evidence of truth. Curated lists of verified local accounts, emergency services, and journalists — never open search during an event.

Weather

Model-grade forecast sources (NWS/NOAA domestically; open model APIs elsewhere). Global, low noise, easy. The bar is hourly resolution against your timeline, not a phone widget's daily icon. Weather is the one environmental factor that's genuinely forecastable — it shouldn't be the surprise.

Reading the list as a system

No single source covers a window. The workable stack is layered:

• Before — ACLED, advisories, local-outlet curation. The pattern.
• Ahead — permits, closures, TFRs, weather. The environment's published plan.
• During — local RSS, social lists, GDACS/GDELT. The live layer.

Three or four sources per layer, chosen for your specific ground, beats twenty subscriptions. Attention is the budget, and every source bills against it.

This reflects what we're running as of publication; we'll update it as sources shift.