New module launched: real-time tracking of CISA's Known Exploited Vulnerabilities, with a focused view on CVEs actively leveraged in ransomware campaigns. Prioritize patching based on actual threat actor activity — not just severity scores.
New module: curated high-risk posts from forums across the open web and darknet. Each event includes an AI Risk Assessment, a numeric risk score (levels 6–10), supporting imagery, and full context in a clear, structured layout.
A new free dashboard focused on Israel is now available! Access it via the Dashboards menu.
Darkfeed wishes all our users a joyful holiday season and a successful start to the new year 2026!
We have officially deployed API V3, featuring enhanced security measures and new metadata fields for improved attribution.
We have rolled out a refreshed visual design across the Darkfeed platform to improve clarity, consistency and overall usability.
About DarkFeed
DarkFeed is a cyber threat intelligence company focused on exposing ransomware operations, monitoring dark web activity, and turning complex data into clear, actionable insight.
Mission-Driven Intelligence
At DarkFeed, our mission is simple and focused: to provide high‑quality threat intelligence against ransomware groups and cybercrime, at a fair and accessible price for organizations of every size. We operate at the intersection of technology, intelligence and security operations, helping teams see, understand and respond to threats before they become business‑impacting incidents.
We began our journey several years ago with a bold idea – to offer free cyber intelligence services to the global community. During those early years we helped more than 2,000 companies worldwide gain visibility into active threats, with no commercial obligation and no cost.
Building on that experience, in March 2023 we transitioned into a commercial model. Today, DarkFeed offers affordable monitoring and intelligence packages tailored for security teams, MSSPs, governments and enterprises that need a reliable and continuous view into ransomware ecosystems.
Our Story
DarkFeed started as a community‑driven project that believed every defender should have access to high‑quality cyber intelligence. For several years, our platform operated completely free of charge, tracking ransomware groups, data leak sites and dark web activity to help organizations understand their exposure.
As the volume and sophistication of attacks grew, so did the demand for deeper coverage, better uptime and enterprise‑grade delivery. To meet that demand, we evolved into a commercial intelligence provider while keeping the same philosophy: clear, concrete and operational intelligence – without unnecessary noise.
What We Do
We continuously monitor ransomware blogs, leak sites, forums and related dark web sources. The raw data we collect is normalized, de‑duplicated and enriched into a clean data layer that powers our dashboards and API.
Instead of sending you unfiltered screenshots or unstructured posts, DarkFeed provides standardized entities – group, victim, country, sector, date, tags and links – allowing you to plug our data directly into your existing processes and platforms.
Who We Serve
Our customers span a wide range of sectors and geographies, including:
- National CERTs and government cyber units
- Intelligence and threat research companies
- Financial institutions and insurance providers
- Managed security service providers (MSSPs) and SOCs
- Enterprises in critical infrastructure, healthcare, manufacturing and more
Whether you are a small security team or a large global organization, DarkFeed is designed to give you a focused, high‑signal view of the ransomware landscape.
Why DarkFeed?
- Expertise and efficiency A compact team of specialists focused only on ransomware and dark web intelligence – no distractions, no generic feeds.
- Operational by design Our data is structured to be used by analysts, automation and executives alike – clear fields, clear context, and clear impact.
- Affordable intelligence Pricing is designed so that startups, SMBs and large enterprises can all benefit from the same quality of intelligence.
- Transparency & focus We prioritize accuracy, explain what we track, and avoid inflating numbers or adding noise just to "look bigger."
Staying Close to the Threat
As the ransomware ecosystem evolves, so does DarkFeed. Our commitment is to stay close to the threat – tracking new actors, new leak sites and new tactics – and to reflect that reality in our products with minimal delay.
We believe that great threat intelligence should not only inform you about "what happened", but help you take decisive action. That means better detection logic, better context for incident response, and better messaging for your stakeholders and customers.
With DarkFeed, you are partnering with a team that is as invested in understanding ransomware operations as you are in defending against them.
- Continuous monitoring of ransomware leaks & extortion sites
- Structured data via dashboards and API for easy integration
- Enrichment you can plug into SIEM/SOAR, TIPs and internal workflows
- Clear, concise intelligence instead of noisy, unfiltered feeds
Contact & Company Details
DarkFeed Ltd. is headquartered in Tel Aviv, Israel and serves customers across the globe.
- Company DARKFEED LTD
- Address PO Box 425, Shalom Tower, Ahad Haam 9, Tel Aviv, Israel
- Email Team AT Darkfeed.io
For partnership opportunities, enterprise access or custom intelligence needs, reach out to us and our team will be happy to help.
Legal & Disclaimer
The material and information contained on this website are provided for general information purposes only. You should not rely upon the material or information on this website as the sole basis for making any business, legal or other decisions.
The information displayed on the website is copied "as‑is" from dark sources. While DarkFeed makes a reasonable effort to normalize, structure and enrich the data, we cannot guarantee completeness, accuracy or that the data is free of errors introduced at the source.
For details on how we handle data, cookies and user privacy, please review our Privacy Policy.
Global ransomware and breach intelligence for security teams and enterprises.