Signal on the
threat surface.
Structured, always-fresh intel: vulnerabilities and exploited CVEs, malware and phishing indicators, ransomware claims, cloud incidents, vendor advisories, and bug bounty scope.
Threat geography
Open full map →Loading claim map…
Recent activity
View all →Explore
Bug bounty programs
Public program scope and in-scope domains. Search by name or domain.
Vulnerabilities
Recent CVEs, actively exploited (KEV), Exploit-DB, CERT-EU, GHSA, and EPSS scores.
Live indicators
Defanged phishing URLs and ransomware leak-site victim domains in one feed.
Ransomware claims
Recent leak-site claims with group, sector, country, and claim metadata.
Live threat map
Victim claims and phishing hosting by country, with a 72-hour replay and layer toggle.
Phishing URLs
A deduplicated OpenPhish snapshot, defanged before it reaches the browser.
Cloud threats & advisories
Wiz Research incidents and campaigns, plus Microsoft and Ubuntu advisories.
Free to read. Pro to respond.
Every feed and page here is public and unkeyed. Pro adds private watchlists, correlated alerts, signed webhooks, and STIX 2.1 export.
Data API
Public JSON endpoints, updated on a schedule. No key required for read access.
Every file carries a schema_version; see the
field contract before depending on a shape.
Per-source health is published at /data/status.json.