Threat intelligence without the enterprise markup.
Monitor breach claims, ransomware activity, underground forum posts, IOCs, threat trends, and unredacted source screenshots across dedicated intelligence feeds and pages.
Free
Daily threat intel summaries and curated post notifications.
- Daily email summary, Monday-Friday
- Curated post notifications
Good for casual visibility
Plus
For monitoring dark-web threats, leak claims, IOCs, and source context.
$3.33/mo billed annually
Save $8 yearlyIncludes Free, plus
- Advanced threat feed tools - an interactive OSINT investigation toolbox built into the threat feed (domain, IP, CVE, hash, credential-leak & infostealer lookups)
- 800-1100 unredacted threat feed alerts daily on average across breaches, leaks, IAB, malware, phishing, DDoS, defacements, and more
- 500+ verified threat-surface sources
- 22+ forums monitored and growing
- 120,000+ real-time threat alerts
- JSON, CSV, and XML export
- Threat intelligence analytics
- 30-day IOC feed and 174k+ historical IOCs
Built for active threat monitoring
Pro
Best value for deeper dark-web and ransomware visibility.
$6.67/mo billed annually
Save $16 yearlyIncludes Plus, plus
- Comprehensive ransomware feed with 29,300+ entries
- Live ransomware sites directory
- 300+ ransomware groups tracked
- Ransomware visual analytics dashboard
- Ransomware negotiations archive
- Ransomware notes archive
Best for ransomware-focused users
Elite
The complete experience with ad-free access, support, and early tools.
$12.50/mo billed annually
Save $30 yearlyIncludes Pro, plus
- 100% ad-free experience
- Early Access Program
- 4 early access tools and growing
- Email support with 1-business-day response
Best for daily power use
Real-Time Threat Feed
Breach, leak, DDoS, defacement, phishing, stealer, malware, and vulnerability activity, to name a few, from 22+ monitored forums and growing, with unredacted breach/leak data, screenshots, export options, and keyword alerts.
Threat feed monitors
Coverage includes breach claims, leak activity, underground market activity, infrastructure abuse, and other high-signal threat activity.
And other monitored threat categories as coverage expands.
Ransomware Feed
Claim tracking, group attribution, screenshots, metadata, site status, notes, negotiations, and visual analytics from 300+ ransomware groups.
Compare every tier
Plus unlocks the core intelligence feed. Pro adds ransomware intelligence. Elite adds the full user experience and support layer.
| Feature | Free $0 | Plus $4/mo · $40/yr | Pro $8/mo · $80/yr | Elite $15/mo · $150/yr |
|---|---|---|---|---|
| Core access | ||||
| Daily email summary, Monday-Friday | ✓ | ✓ | ✓ | ✓ |
| Curated post email notifications | ✓ | ✓ | ✓ | ✓ |
| Enhanced blog posts | - | 4,900+ | 5,400+ | 5,400+ |
| Threat alerts tracked | - | 120,000+ | 120,000+ | 120,000+ |
| Verified threat-surface sources | - | 500+ | 500+ | 500+ |
| Forums monitored and growing | - | 22+ | 22+ | 22+ |
| Threat feeds | ||||
| Real-time threat feed | - | ✓ | ✓ | ✓ |
| Monitored threat categories | - | 19+ categories | 19+ categories | 19+ categories |
| Advanced threat feed tools with OSINT investigation toolbox | - | ✓ | ✓ | ✓ |
| Unredacted breach/leak data with JSON/CSV/XML export | - | ✓ | ✓ | ✓ |
| Cybersecurity news feed | - | ✓ | ✓ | ✓ |
| Custom browser notifications and keyword alerts | - | ✓ | ✓ | ✓ |
| Real-time IOC feed and 174k+ historical IOCs | - | ✓ | ✓ | ✓ |
| FBI Watchdog feed | - | ✓ | ✓ | ✓ |
| Ransomware intelligence | ||||
| Comprehensive ransomware feed | - | - | 29,300+ | 29,300+ |
| Live ransomware sites directory | - | - | 300+ groups | 300+ groups |
| Ransomware visual analytics dashboard | - | - | ✓ | ✓ |
| Ransomware negotiations archive | - | - | ✓ | ✓ |
| Ransomware notes archive | - | - | ✓ | ✓ |
| Research, experience, and support | ||||
| Full forum coverage and direct source links | - | ✓ | ✓ | ✓ |
| Uptime monitoring for 500+ sites | - | ✓ | ✓ | ✓ |
| High-res threat feed screenshots | - | ✓ | ✓ | ✓ |
| 100% ad-free experience | - | - | - | ✓ |
| Early Access Program | - | - | - | ✓ |
| Email support | - | - | - | ✓ |
Free
- Daily email summary
- Curated post notifications
Plus
- Advanced threat feed tools - OSINT investigation toolbox (new in 3.0)
- Real-time threat feed
- Unredacted breach/leak data
- JSON, CSV, and XML export
- IOC feed and historical IOCs
- 500+ verified sources
- 22+ forums monitored and growing
- Categories include carding, dark web chatter, breaches, leaks, DDoS, defacements, initial access, stealer logs, malware, phishing, bulletproof hosting, vulnerabilities, and more
Pro
- Everything in Plus
- Ransomware feed
- 300+ group directory
- Visual analytics dashboard
- Ransomware negotiations archive
- Ransomware notes archive
Elite
- Everything in Pro
- 100% ad-free experience
- Early Access Program
- Email support
Common questions
Plus is the best starting point for core threat-feed visibility. Pro is the best overall value if ransomware monitoring matters. Elite is for users who want everything, including ad-free access and support.
Yes. Crypto payments are available through the crypto payment page. Crypto is non-recurring, so renewal is manual.
Yes. Card subscriptions auto-renew unless cancelled from your account portal.
Yes. Use the account portal to manage your subscription, billing period, and cancellation.
Yes. You can upgrade or downgrade between tiers anytime from your account portal. For card subscriptions, the change applies to your ongoing billing.
Yes. Cancelling a card subscription stops the next renewal, and your access stays active through the end of the period you've already paid for.
Still have a question? Visit the Help Center