DarkWebSonar is a dark web monitoring and threat intelligence platform. It collects data from ransomware leak sites, underground forums, Telegram channels, marketplaces and paste sites, and makes it searchable by threat actor, sector, country and keyword.
Users enter their organization’s sector and countries of operation, and DarkWebSonar ranks the threat actors that have targeted organizations matching that profile. Users can add actors and keywords to watchlists and receive alerts when a watched actor posts a new victim or a monitored keyword appears.
Features include:
- Threat actor watchlists ranked by sector and country
- Monitoring of ransomware leak sites and dark web sources for company names, domains and keywords
- Breached credential and infostealer exposure checks
- Threat actor profiles with MITRE ATT&CK technique mapping
- Threat Intelligence Briefs
- REST API and a hosted MCP server for use with AI assistants such as Claude and Cursor
Data is collected passively; DarkWebSonar does not interact with threat actors. The platform is used by in-house security teams, security consultancies and MSPs. It is offered on monthly plans with a 14-day free trial.
