Built for cyber intelligence.

Connects cyber threat data with its sources, detection dates and affected accounts, turning it into intelligence you can investigate.

Contact salesRead API documentation

Set up Dark Radar MCP

For companies, public institutions and CTI teams

Integrates with your existing security infrastructure.

With more than 40 integration options, Dark Radar connects to the security systems you use, including SIEM and SOAR platforms, and delivers threat intelligence and findings to them.

Entra ID, Google, Okta, Keycloak, SCIM, LDAP, Auth0, PingOne, Splunk, Sentinel, ServiceNow, Google Chat, PagerDuty, GitLab, TAXII, Mattermost, Discord, Telegram, Opsgenie, Elastic, Graylog, Wazuh, Datadog, Sumo Logic, OpenCTI, Syslog, S3 / OCSF, Cortex, SecOps, Rocket.Chat, Webex, Linear, Jira SM, Webhook, Email, Slack, Teams, GitHub, Jira

Intelligence

Monitor your organization's external risk from one panel.

Infostealer Detection

Monitor the accounts of your employees that appear in leak records, by your domain. See the malware family and leak date on every finding.

Explore Infostealer Detection
0:51

Platform

Not just the leak,but where it came from.

Assistant, integrations, monitored sources and critical finding alerts on one platform.

Analyze recent leaks for holding-darkradar.com.
Analyzing
leak_search
file_analysis
cti_analysis
3 new records found, 2 critical. Summary and source details are ready.

Analyze with the assistant

Review leak records, files and threat intelligence in one conversation.

$ darkradar integrations add

connectedsplunk
connectedsentinel
connectedservicenow

Connects to your integrations

Findings are delivered to your SIEM, SOAR and notification systems.

Forum · new listing
Paste site · email list
Infostealer log · LummaC2

Sources in one stream

Forums, paste sites, infostealer logs and open ports are monitored.

infostealer.json source

{

"ip": "185.**.**.21",

"hwid": "7F3A-…-C21B",

"log_date": "2026-10-12"

}

Shows where the leak came from

Every record comes with its IP address, device ID and log date.

Critical leak

Security team → call?

Calls on critical findings

On a critical leak, the assistant calls the person you choose.