Inside the platform
See how the platform looks.
A walk through the whole dashboard, filled with sample data. Press Next and we point out what you are looking at, or click any section in the sidebar yourself.
sinonsecurity.com/dashboard
Overview1 / 29
Where you start
The Overview shows what we found about your company, most important first.
Coverage
What we’re collecting from today.
What we watch, and how much of it. The groups named below are the ones posting the most victims right now.
- Ransomware620+
groups tracked
Every tracked group's own leak site, checked continuously for new victims, countdown timers and published data.
Currently tracking
The GentlemenQilinDirewolfCoinbase CartelKrybitInc RansomAkiraShinyhuntersand hundreds more - Underground+50forums+100channels
high-impact venues
Gated forums and criminal Telegram channels chosen for what trades in them: access, data and initial footholds. We hold membership over time, so threads behind reply locks and invite walls are visible to us.
- Breach data10B+
records searchable
Credentials from infostealer infections and breach dumps, matched against every name you monitor and searchable on demand from your dashboard. You are told about records that are new to you, so an old match doesn't come back.
- Brand protectionMinute by minute
certificate transparency
We read newly issued TLS certificates as they're logged and flag domains built to resemble yours, at the moment the certificate is issued.
Want to know what we’d find?
Run one search against your domain now. No account, no card.
How it works
How collection works.
Four steps. You only ever see the last one.
- Collection
We hold membership in closed forums and channels
Long-standing access to gated forums and invite-only Telegram channels. We read what's posted, track the handles that matter and follow them when they move.
- Leak sites
We watch every ransomware group's own site
Groups publish their victims themselves before anyone reports it. We pull each post at source and keep it after the group deletes it.
- Filtering
We de-duplicate, translate and score
Raw collection is mostly repeats. Every item is de-duplicated, translated where needed, classified and scored against your sector, your regions and your watch terms.
- Alerting
We email you when something matches
One email, however many of your terms matched, carrying the source, the severity and the rules that fired.
Email alerts
Live now, grouped into one message
Full history
Included on Business plans
Team seats
Up to 5 on Business Plus
SINON Copilot
Conversational dark web CTI, coming soon
SINON Copilot is next: ask questions of the underground in plain language and get answers drawn from everything we collect.
Alert contents
Every alert shows the rules that fired.
Findings are scored against the profile you set: sector, regions, watch terms and a severity floor. Each alert lists which of those matched, so a wrong match is a setting you can change.
Scored against your sector, regions and watch terms
Direct, strong and contextual matches kept separate
Source, severity and matching rules on every item
Severity floor you set, changeable at any time
Sample alertCritical
forum · access sale
Network access to a financial-services company in your region is being advertised for sale.
Names “your brand”Your sectorGB · United KingdomInitial Access Brokers
Illustrative. Not a real disclosure.
Search your domain before you decide anything.
One free search, no account. If it comes back empty, you’ve lost thirty seconds.