Ransomware pulse
Victim announcements on groups' leak sites are tracked live; a new victim in your sector or country triggers an early warning.
LANDSCAPE Ransomware, underground economy, vulnerabilities, leaks and news
Global Threat Landscape
Ransomware leak sites, stealer log markets, the CVE stream, leak databases and security news are scored against your organisation. When an outside threat meets inside exposure, it becomes a case.
Screenshots are taken from a demo tenant; organisation names and data are entirely fictional.
General threat information is public; the value lies in finding where it touches you. A ransomware group naming a new victim in your sector, a stealer log containing your corporate VPN address, a new exploit for the Jenkins version you run — these are the intersections. The Global Threat Landscape filters five sources through your inventory and your sector.
What it does
Underground economy
Stealer logs and access listings tied to you are listed with price, stealer family and related assets; every listing becomes a case.
Scored news feed
Security news is scored 0–100 against your organisation; sector, country and category trends are compared week over week.
How it works
-
01
Watch outside sources
Leak sites, underground markets, NVD and CISA KEV, leak databases and news sources are watched continuously.
-
02
Intersect with inventory
Records are matched against your domains, technology versions, sector and country.
-
03
Prioritise
Intersecting records are scored; those over the threshold become cases via playbooks.
Sub-modules
RANSOM
Ransomware Telemetry
Announcements on ransomware groups' leak sites stream live; tracked groups, online status, 24-hour / 30-day / 90-day posts, mirrors and …
Live victim posts from le…
MARKET
Underground Economy
Stealer logs and underground market listings assigned to your company, with price, stealer family, data size, country and related subdomains. …
Stealer log and access li…
VULN
Vulnerability Intelligence
The CVE stream is fed by NVD, CISA KEV and exploit signals: a severity split, publications by year, the most …
NVD, CISA KEV and exploit…
LEAKS
Compromised Assets
Leaks are matched against your attack surface assets; employee, customer and unrelated records are separated. Leaks from the same source …
Combolists, stealer logs …
WIRE
Intelligence Wire
Threat news is collected, compiled and scored 0–100 for your organisation. The trend radar compares sector, country and category movement …
A news feed scored for yo…
What you get
- You see a campaign against your sector before you are on the victim list.
- A session cookie put up for sale is revoked before it is used.
- Management gets a weekly, sector-specific threat summary.
Next step
What shows up on your own surface?
In a 30-minute session we run a live scan against your own domains.