Directory
Published directory entries matching your search.
Hunt Intelligence is a location-first social media search tool that gathers posts from platforms including Instagram, Facebook, X, Snapchat, YouTube, Flickr and VK around a chosen location. It is aimed at analysts, journalists, investigators and security teams tracking developing events.
Kaspersky map showing real-time cyber threat activity and detected security events worldwide.
Threat intelligence search platform for malware indicators, IPs, domains, URLs, and hashes.
Humorous cyber threat map showing global attack-style visualizations for awareness and demos.
Webscout provides intelligence on IP addresses for defenders of democracies and critical infrastructure. Its platform ingests network and intelligence feeds, adds context, detects threats, and supports investigation and response. It enriches IPs with data on geolocation, network ownership, VPNs, Tor, residential proxies, and provider attribution, delivered by API, bulk feed, or SIEM integration. It also offers honeypots and domain intelligence.
Dark-web intelligence company publishing monitoring, ransomware and underground-ecosystem analysis.
Intelligence analysis covering illicit communities, ransomware groups and underground online activity.
The Network Entity Reputation Database IP search is a CESNET page that searches and lists IP addresses with hostname, ASN, country, events, reputation score, threat category, other properties, time added and last activity. It provides links to services including Shodan, Censys, AbuseIPDB, Talos Intelligence Center, Greynoise Visualizer and DShield. Results shown include DShield reports and OTX pulses.
ZoomEye is a cybersecurity search engine focused on internet asset discovery. It indexes internet-connected devices and supports open-source intelligence (OSINT) and threat intelligence use cases. The platform has offered Black Friday lifetime deals with one-time payments for permanent access, and allows users to create free accounts to get started.
GitHub awesome list collecting OSINT tools, datasets, training links, and research resources.
Cipher387's large OSINT tool collection covering social media, domains, people, maps, and more.
Abusech helps search threat intelligence, IP reputation, domains, and security investigation data.
Abuseipdb helps search threat intelligence, IP reputation, domains, and security investigation data.
Start.me toolbox with anti-money-laundering, sanctions, corporate, and financial investigation resources.
Directory for browsing curated awesome lists, developer resources, and topic collections.
MalwareBazaar is a platform from abuse.ch and Spamhaus for sharing malware samples with the infosec community, antivirus vendors, and threat intelligence providers. Users can upload samples, browse the database, set alerts for newly observed malware, and use APIs to push or pull signals and automate bulk queries. Spamhaus datasets enhanced with MalwareBazaar samples are also available.
Blockaid is a real-time onchain security platform for web3 builders. It offers transaction security, address scanning, token scanning and dApp scanning, and combines its data network with a policy engine so threat verdicts reflect both its intelligence and customer policies. It also lists end user protection, onchain monitoring, crypto fraud prevention and cosigner products for wallets, DeFi operators, exchanges, banks and asset managers.
BlockSec provides blockchain security, monitoring, threat intelligence, or compliance tools.
BrightCloud helps search threat intelligence, IP reputation, domains, and security investigation data.
Censys provides a map of the internet that security teams use to defend attack surfaces and hunt for threats. It offers security operations and exposure management with real-time internet intelligence. Products listed include attack surface management, Censys Search and adversary investigation.
Chainalysis provides blockchain security, monitoring, threat intelligence, or compliance tools.
CRATOR is a proposed dark web crawler described in an arXiv paper. It is designed to extract pages that handle security protocols such as captchas, using seed URL lists, link analysis and scanning to discover content, with user-agent rotation and proxy usage for anonymity. The authors report evaluation using coverage, performance and robustness metrics, and suggest threat intelligence, cybersecurity and online investigation applications.
Digital Attack Map is a live data visualization of DDoS attacks around the globe, presented by Jigsaw. It shows top daily DDoS attacks worldwide and offers modes for large, unusual and combined attacks, plus a map and table view and historical data.
eCrime.ch is an extortion exposure monitoring platform for enterprise security, incident response and third-party risk teams. It detects, verifies and delivers ransomware and data-leak signals with context such as entity mapping, artifacts, links and timelines. The site states it monitors 280+ extortion and leak sources and delivers alerts through dashboard, email, Slack, API and reports. A REST API provides tracker, intelligence, file-search, screenshot, actor, leak-site and torrent-monitoring data.
