Public ransomware claims
Pro and above

Watch for public ransomware claims about your organization

Compare your domains and organization or brand names with a third-party public ransomware-claims feed covering the last 30 days. This is limited monitoring, not a direct Tor crawl or comprehensive dark-web search. Terms are matched locally. It does not search private forums, email breaches, passwords or stolen credentials. No match is not proof of safety.

Public claim monitoring

Build a watchlist

Add domains and organization or brand names. Watch values are encrypted at rest and shown with redacted previews.

  • Domains
  • Organization and brand names
  • On-demand or explicit recurring runs

A documented public source

The monitor retrieves the public RansomLook feed once, then compares watch terms locally. It does not visit extortion sites or download leaked files.

Surface what shows up

Matches and the assessment scope appear alongside your other scan findings. Each run costs 2 credits; recurring runs require an explicit schedule.

Verify before acting

Treat matches as unverified public claims. Corroborate them with your security team and follow your incident-response process when evidence supports it.

Create your monitoring watchlist

Available on Pro and above. Each on-demand or recurring run costs 2 credits.