Best Dark Web Monitoring Tools - Page 6

How Many Dark Web Monitoring Tools Products Does G2 Track?

Total Products under this Category: 96

Category Stats (Nov 2026)

  • Average Rating: 4.65/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Whiteintel Dark Web Intelligence (+0.35%) - Among all products in this category, Whiteintel Dark Web Intelligence recorded the largest rating increase compared to last month

Last updated: November 01, 2026

How Does G2 Rank Dark Web Monitoring Tools Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 9,000+ Authentic Reviews
  • 96+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Dark Web Monitoring Tools

G2 Grid® for Dark Web Monitoring Tools plotting products by satisfaction and market presence

Highlighted products: ZeroFox, SOCRadar Extended Threat Intelligence, CloudSEK, Cyble, CTM360, Recorded Future, 1Password, and Keeper Business Password Manager.

Underlying data: [Grid® JSON](https://www.g2.com/categories/dark-web-monitoring/grids.json?focus%5B%5D=zerofox&focus%5B%5D=socradar-extended-threat-intelligence&focus%5B%5D=cloudsek&focus%5B%5D=cyble&focus%5B%5D=ctm360-ctm360&focus%5B%5D=recorded-future&focus%5B%5D=1password&focus%5B%5D=keeper-business-password-manager)

Darkweb IQ

Darkweb IQ is a cyber threat intelligence company that stops ransomware before it starts. Almost no attack begins with the attack. Weeks earlier, an initial access broker sells the way into the victim's network, and for those weeks the target has no idea. Darkweb IQ works in that window. Our undercover analysts hold direct, one-on-one relationships with the people who sell that access. When your company's access is offered for sale, we hear about it from the seller and warn you while there is still time to close the door. Through a DOJ-approved law enforcement program, Darkweb IQ is the market's only standing buyer on the defender side. That position gives us visibility into impending attacks that never shows up in public sources or data feeds. We have conducted more than 2,600 attack interceptions for customers, insurers, and partners. Most of that work stays under cover. One case is public: the Department of Justice credited Darkweb IQ by name for assisting the investigation of initial access broker Catalin Dragomir, who tried to sell access to 46 U.S. hospitals before his arrest. All 46 were warned. None was breached. He is serving 56 months in federal prison. We send very few alerts, and we stand behind the ones we send. Our analysts throw out about 99 of every 100 raw hits, and a human vets everything before it reaches you. A top-five cyber insurer measured our alerts as true positives 96% of the time. The platform has three parts. AlertIQ monitors for compromised credentials, infostealer infections, and initial access broker activity targeting your organization. InterceptIQ is the intervention arm: when your access is being sold, we engage the seller under cover to stall the sale while you close the exposure. VendorIQ extends the same coverage to your vendors and supply chain. Intel briefings and API access are available for teams that want the data in their SOC or SIEM.

Who Is the Company Behind Darkweb IQ?

DeTCT by CYFIRMA

DeTCT by CYFIRMA is a predictive digital risk detection and management platform that helps organizations proactively identify and mitigate external threats. It continuously monitors digital channels including social media, websites, and online repositories to detect risks such as impersonation, data leaks, brand infringement, and other exposures that could impact business operations or reputation. By delivering clear visibility into an organization's digital footprint and exposed assets, DeTCT provides actionable intelligence to support effective risk mitigation and protect sensitive information from compromise. Built on a proprietary 5-pillar architecture, it offers targeted coverage across Attack Surface Discovery & Intelligence, Vulnerability Intelligence & Threat Prioritization, Brand & Online Exposure Management, Digital Risk & Identity Protection, and Third Party Risk Management. CYFIRMA CYFIRMA is a preemptive External Threat Landscape Management (ETLM) company, delivering prioritized, personalized intelligence through its AI-powered platform, DeCYFIR. Approaching cybersecurity from a hacker's perspective, CYFIRMA provides organizations with early warnings and actionable insights to predict and prevent cyberattacks before they materialize. Built on a proprietary 9-pillar architecture spanning Attack Surface Discovery & Intelligence, Vulnerability Intelligence & Threat Prioritization, Brand & Online Exposure Management, Digital Risk & Identity Protection, Third Party Risk Management, Situational Awareness & Emerging Threats, Predictive Threat Intelligence, Threat Adaptive Awareness & Training, and Sector Tailored Deception Intelligence. DeCYFIR consolidates comprehensive external threat coverage into a single unified platform, simplifying operations and enabling proactive defense.

Who Is the Company Behind DeTCT by CYFIRMA?

  • Seller: CYFIRMA
  • Year Founded: 2017
  • HQ Location: Singapore, SG
  • LinkedIn® Page: www.linkedin.com
    135 employees on LinkedIn®
  • Phone: marketing@cyfirma.com

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works

Experian Data Breach and Crisis Response Services (UK)

Experian's Data Breach and Crisis Response Services in the UK offer comprehensive solutions to help businesses effectively manage and mitigate the impact of data breaches and crises. With over a decade of experience, Experian provides tailored support to organizations of all sizes, ensuring swift and efficient responses to protect both the business and its customers. Key Features and Functionality: - Consumer Notification Services: Experian facilitates timely communication with affected individuals through multiple channels, including letters, emails, and SMS, ensuring that customers are informed promptly about any incidents. - Call Centre Support: Dedicated, multilingual call centre agents are available to handle inbound inquiries from customers or employees following a data breach, providing reassurance and detailed information. - Identity Monitoring Services: To safeguard individuals at risk of identity theft, Experian offers credit and dark web monitoring services, alerting consumers to potential misuse of their personal information. - Proactive Planning Services: Experian assists businesses in developing robust response plans before any incidents occur, including scenario exercises and resource modeling, to ensure preparedness and compliance with regulatory requirements. Primary Value and Solutions Provided: Experian's services are designed to minimize the operational, financial, and reputational damage that can result from data breaches. By offering end-to-end support—from proactive planning to post-incident response—Experian enables businesses to act swiftly and confidently in the face of crises. This comprehensive approach not only helps in maintaining customer trust but also ensures compliance with regulatory obligations, ultimately safeguarding the organization's long-term success.

Who Is the Company Behind Experian Data Breach and Crisis Response Services (UK)?

  • Seller: Experian
  • Year Founded: 1826
  • HQ Location: Dublin, Ireland
  • LinkedIn® Page: www.linkedin.com
    26,648 employees on LinkedIn®
  • Ownership: LSE: EXPNL
  • Phone: +353 (0) 1 846 9100

Gordon

Gordon is an AI-powered cyber resilience platform built by Mitigata for regulated enterprises. It replaces multiple point solutions with one unified console covering SOC, VAPT, GRC, phishing simulation, third-party risk, brand monitoring, and cyber insurance. 𝗖𝗼𝗿𝗲 𝗰𝗮𝗽𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 𝗜𝗱𝗲𝗻𝘁𝗶𝗳𝘆 Discover and map all cyber assets across domains, IPs, subdomains, and mobile apps. Score employee cyber risk (0–100) using real behavior like phishing clicks, credential reuse, and unusual access patterns. Integrates with HRMS tools like Darwinbox, Keka, and SAP SuccessFactors. 𝗔𝘀𝘀𝗲𝘀𝘀 Continuous VAPT by CERT-In empanelled testers across web, API, cloud (AWS, Azure, GCP), network, and mobile. Third-party risk scoring using 200+ signals. Compliance mapped to RBI, SEBI, DPDP Act 2023, IRDAI, and CERT-In. Quantifies financial impact using FAIR methodology. 𝗠𝗶𝘁𝗶𝗴𝗮𝘁𝗲 Automated phishing simulations with multilingual templates. Risk-based microlearning and gamified training. Integrated cyber insurance from leading providers with posture-linked pricing, reducing premiums by up to 40%. 𝗠𝗼𝗻𝗶𝘁𝗼𝗿 24/7 SOC with AI-driven alert triage to reduce false positives. Full attack chain visibility mapped to MITRE ATT&CK. Automated CERT-In reporting within 6 hours. Continuous brand monitoring across dark web, domains, and social platforms with takedown support. 𝗪𝗵𝘆 𝗚𝗼𝗿𝗱𝗼𝗻 Gordon AI powers the platform with executive summaries, prioritised actions, anomaly alerts, and ready-to-share board reports. Built for BFSI, fintech, healthcare, SaaS, and manufacturing. Deploys in hours, not months. Starts at $1,787/month with a 15-day free trial.

Who Is the Company Behind Gordon?

  • Seller: Mitigata
  • Year Founded: 2021
  • HQ Location: Bangalore, IN
  • LinkedIn® Page: www.linkedin.com
    106 employees on LinkedIn®
  • Ownership: Private Limited
  • Phone: 7807153087

Gordon AI Dark Watch

Mitigata's Dark Web Monitoring solution continuously scans criminal forums, illicit marketplaces, Telegram channels, breach archives, and paste sites to detect when your organisation's sensitive data is exposed in the digital underground. Trusted by 800+ businesses, Mitigata's dark web monitoring services go beyond generic alerts. When a threat actor mentions your company, we analyse their reputation, capability level, and intent, delivering intelligence that's actually actionable. Our dark web monitoring platform monitors leaked credentials, executive identities, employee data, and corporate assets 24/7, with real-time notifications the moment your information surfaces.

Who Is the Company Behind Gordon AI Dark Watch?

  • Seller: Mitigata
  • Year Founded: 2021
  • HQ Location: Bangalore, IN
  • LinkedIn® Page: www.linkedin.com
    106 employees on LinkedIn®
  • Ownership: Private Limited
  • Phone: 7807153087

Innsight

Innsight is a powerful Open-source Intelligence (OSINT) platform that transforms vast data from the surface web, deep web and dark web, which includes social media sources, search engines, newspapers, into actionable intelligence. It empowers defence, law enforcement, and intelligence agencies to predict threats, monitor sentiments, and track high-value targets. With advanced profiling, multilingual analysis, and real-time alerts, Innsight delivers strategic insights that drive mission-critical decisions.

Who Is the Company Behind Innsight?

IntelForce

IntelForce (Cyber Intelligence / Dark Web Monitoring) IntelForce provides services in cyber intelligence, especially Dark Web Monitoring and OSINT (Open‐Source Intelligence), Attack Surface Management and Fraud Detection. Key features include: tracking leaked credentials, detecting compromised devices, monitoring threat sources, real‐time alerts for domain/email/IP address exposure.

Who Is the Company Behind IntelForce?

Intel IQ

Intel IQ is a cybersecurity company that provides real-time dark web credential monitoring, uncovering leaked passwords & session cookies to secure your team and customers. Unlike general Dark Web monitors, our narrow focus on infostealer malware logs allows us to provide more granular and actionable data - like session cookies - that general breach notification services often lack. What We Do Proactive Threat Detection Identify compromised employee and customer credentials from dark web stealer logs in real-time, allowing for immediate action before a breach escalates. Real-Time Alerts Receive immediate notifications when new data related to their domain appears on the dark web. Session Invalidation Use leaked session cookies to identify which active user sessions need to be terminated immediately. Continuous Monitoring Strengthen your organization's cybersecurity defenses by continuously monitoring for and addressing credential compromises, reducing the risk of account takeovers and data breaches.

Who Is the Company Behind Intel IQ?

Intrace

Intrace is one platform for protective risk intelligence and OSINT investigations, built for executive protection, due diligence, law enforcement, and other security teams. Collect and analyze open-source data, then turn it into actionable reports in minutes.

Who Is the Company Behind Intrace?

KELA Threat Intelligence Platform

KELA’s Unified Threat Intelligence Platform is an all-in-one solution for Cyber Threat Intelligence (CTI), External Attack Surface Management (EASM), Digital Risk Protection Services (DRPS), and Third-Party Risk Management (TPRM), delivering real-time, actionable insights. The platform protects identities, brands, digital exposure, and the supply chain, seamlessly integrating into existing security controls and acting as the first line of defense against cyber threats from the cybercriminal underground. It monitors national risks, critical infrastructure, and supports dark web and cybercrime investigations, helping organizations close security gaps and stay ahead of evolving threats. KELA serves hundreds of customers, including enterprises, MSSPs, law enforcement agencies, CERTs, and government agencies worldwide

Who Is the Company Behind KELA Threat Intelligence Platform?

MSPDarkIntel

MSPDarkIntel is the most comprehensive dark web monitoring platform built by MSPs for MSPs. We help you protect your clients and generate predictable monthly revenue by continuously tracking over 500 billion breached assets, infostealer logs, and dark web mentions, all without adding operational overhead.

Who Is the Company Behind MSPDarkIntel?

MSP Dark Web

Offering a Dark Web scanning service to IT Service companies to help protect against identity fraud.

Who Is the Company Behind MSP Dark Web?

Oktoboot

Oktoboot® is a cloud-native Cyber Threat Intelligence (CTI) platform that empowers businesses and organizations to proactively detect, analyze, and respond to cyber threats. By delivering real-time threat insights and actionable intelligence, Oktoboot helps security teams stay ahead of evolving cyber risks and protect their digital assets.

Who Is the Company Behind Oktoboot?

Resecurity Digital Risk Monitoring Platform

Resecurity's Digital Risk Monitoring Platform, Risk™, is an AI-driven solution designed to automate digital risk management by providing actionable intelligence on significant changes to an organization's security posture. It continuously monitors for threats such as data breaches, compromised credentials, network infections, and other security incidents, enabling proactive defense against cyber threats. Key Features and Functionality: - Comprehensive Risk Evaluation: Conducts in-depth assessments across the entire enterprise ecosystem to identify vulnerabilities and security gaps. - Scalable Monitoring: Capable of monitoring digital footprints of any size on a massive scale, ensuring extensive coverage. - Effective Threat Mitigation: Provides early-warning security notifications and automated daily security posture reports to facilitate timely remediation actions. - Risk Measurement: Assigns daily security scores based on monitored domains, IPs, networks, vulnerabilities, and cloud services, offering a clear overview of the organization's security status. - Risk Assessment: Refines and enriches data points to pinpoint weaknesses and vulnerabilities in digital assets, with updates delivered through reports or emails as new data emerges. - Global Visibility: Utilizes geo-location capabilities to deliver contextual information, identifying low, medium, and high-risk areas for managing infrastructure and network resources. Primary Value and Problem Solved: Risk™ empowers organizations to proactively manage and mitigate digital risks by providing real-time insights into their security posture. By automating the detection of external threats—including account takeovers, botnet infections, business email compromises, cyberespionage, brand reputation abuse, dark web activity, domain squatting, data breaches, and more—the platform enables businesses to identify and address vulnerabilities promptly. This proactive approach helps prevent potential security incidents, safeguarding the organization's assets, reputation, and customer trust.

Who Is the Company Behind Resecurity Digital Risk Monitoring Platform?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated October 3, 2024