Actor profiles
APT groups and dark web actors with aliases, target sectors and countries, motivation, activity and risk score.
DARKWEB Threat actors, dark web posts, briefing room
Dark Web Monitoring
Posts from forums, marketplaces and closed channels are archived, and those targeting you, your sector or your country are separated out. The actor behind them — profile, techniques, history — sits in the same place.
Screenshots are taken from a demo tenant; organisation names and data are entirely fictional.
Dark web sources are unstable: forums close, channels move, listings get deleted. Dark Web Monitoring archives every record with a screenshot the moment it appears; the evidence survives the source. A post alone means little — without knowing whom the group behind it targets, with which techniques and how often, it cannot be prioritised.
What it does
Archived posts
Every post is stored with screenshot, date, group and target country; those aimed at your company, sector and country are counted separately.
Briefing room
The InsightGuard team's internal reports, external reports and reports specific to your company in one library.
How it works
-
01
Collect and archive
Forums, marketplaces, Telegram channels and leak sites are crawled on a cadence; each record is stored with a screenshot.
-
02
Match and curate
Records matching your keyword rules go through analyst review; analyst notes are visible only to authorised roles.
-
03
Link to the actor
The post is linked to a group whose profile and MITRE ATT&CK techniques are known, and becomes a case if needed.
Sub-modules
ACTORS
Threat Actors
Each actor's aliases, target sectors and countries, motivation, activity and risk score; the profile holds an executive summary, MITRE ATT&CK …
APT groups, dark web sour…
POSTS
Dark Web Posts
Dark web events archived under analyst curation: data leaks, access sales, site defacements. Those aimed at your country, sector and …
Archived, curated events
BRIEF
Briefing Room
The InsightGuard team's internal reports, PDF and blog reports synced from external sources, and reports for your company only — …
CTI, APT, ransomware and …
What you get
- You see a leak listing at its source, before it reaches the press.
- Deleted posts stay in the archive with evidence.
- A threat is judged together with the history of the actor behind it.
Next step
What shows up on your own surface?
In a 30-minute session we run a live scan against your own domains.