See Every Threat.
Before It Hits You.
DarkFeed is an AI-powered threat intelligence platform delivering real-time ransomware data, AI-classified darknet forum events, and vulnerability tracking — built for security teams that need to act fast.
See DarkFeed In Action
Watch a guided walkthrough of the DarkFeed intelligence platform — live ransomware feeds, AI-classified darknet events, KEV vulnerability tracking, and group attribution, all in one place.
Everything Your Team Needs,
In One AI-Powered Intelligence Hub
A look inside the DarkFeed platform — real dashboards, AI-driven insights, and live data updated continuously around the clock.
Global Ransomware Intelligence,
All Time
The enterprise command center — a consolidated, real-time view of all ransomware and breach activity tracked by DarkFeed since inception. Sector trends, geographic heat maps, monthly event flows, and live victim attribution in one place.
- 17,605 all-time events across 246 ransomware groups
- Sector breakdowns: Financial, HealthCare, Government, Manufacturing, Technology and more
- Live ticker with the latest victim publications in real time
- Geographic heat map showing attack intensity by country
A limited free version of this dashboard is publicly available — open to everyone. Unlock the full dataset, all-time history, live ticker, and advanced filters with a subscription.
View Free Dashboard
Real-Time CTI Feed &
30-Day Attack Calendar
Track top threat actors, most attacked sectors, and most targeted nations — all updated continuously. The 30-Day Attack Activity Calendar provides a heatmap view of daily ransomware volume, so you can instantly spot peak attack windows.
- Global ransomware statistics tracking — countries, sectors & attack volumes
- Track TTPs and activity patterns of active ransomware & extortion groups
- Color-coded calendar heatmap — no attacks to high activity
High-Risk Forum Events,
AI-Classified in Real Time
DarkFeed's AI continuously scans darknet forums and assigns risk scores from 6 to 10 to every high-value post. Each event includes an AI Risk Assessment, the original raw text, source, author, and threat level — giving your team immediate context to act on.
- 1,883+ total events — 43 classified as Critical (Level 10)
- AI-generated risk assessment for every single post
- Filter by risk level: 6 (Elevated) to 10 (Critical)
Vulnerability Tracking Focused
on Active Ransomware Exploitation
The CISA KEV module gives you a live view of every Known Exploited Vulnerability that is currently being leveraged by ransomware threat actors. Stop patching by CVSS score alone — patch what attackers are actually using today.
- 1,577 total CVEs — 313 linked to active ransomware campaigns
- Top vendors by exposure: Microsoft (368), Apple, Cisco, Adobe
- 19.8% ransomware rate — 1,560 overdue remediations flagged
- Monthly CVE additions chart — 24-month historical view
120 Tracked Groups,
42 Active This Month
A comprehensive profiling dashboard for every major ransomware and extortion group tracked by DarkFeed. Each group card shows live online/offline status, 30-day event activity, sparkline trend charts, and a full profile with historical data.
- 120 groups tracked — LockBit, Qilin, Akira, DragonForce, CLOP and more
- Live ONLINE / OFFLINE status badge for every group
- Activity sparklines and event count over the last 30 days
- Direct link to full group intelligence profiles
Global Attack Trends,
Month by Month
Navigate through years of ransomware data by month and year. The Monthly Statistics dashboard combines a world geographic heat map, attack heatmap calendar, top countries, sectors, and most active groups — all in one unified view.
- Track sector statistics and the most active extortion groups by month
- Interactive month/year selector — browse 2024, 2025, 2026
- Geographic heat map colored by relative ransomware intensity
Country-Focused Intelligence:
Israel Threat Landscape
A dedicated dashboard for the Israeli threat landscape — tracking every documented ransomware and breach incident targeting Israeli organizations. Includes real-time CTI updates, emerging group activity, and sector-by-sector breakdowns.
- Track all ransomware & extortion attacks targeting Israel in one dedicated dashboard
- Real-time CTI updates — emerging threat actors and active group profiles
- We build country-specific dashboards for clients who request monitoring by their country
- Sector-by-sector breakdown — identify which industries are most at risk
This dashboard is publicly available and updated every 48 hours. For real-time data, live alerts, and full threat visibility, a subscription is required.
View Israel DashboardAI-Powered Intelligence,
Built for Security Professionals
Every signal processed, classified, and delivered by AI — so your team focuses on response, not research.
AI-Powered Intelligence.
Zero Blind Spots.
Join security teams worldwide who rely on DarkFeed's AI-driven platform for real-time ransomware tracking, darknet monitoring, and vulnerability intelligence.