The last feed you’ll ever need

Unleash cyber security performance, supercharge your security stack and maximize analysts’ performance with the ultimate underground threat intelligence collection available.




Sixgill Platform

Deepest underground sources

Look beyond the obvious

Darkfeed is a feed of malicious indicators of compromise, including domains, URLs, hashes, and IP addresses.

It relies on Cybersixgill’s vast collection of deep and dark web sources and provides unique and advanced warnings about new cyberthreats.

It is automated, meaning that IOCs are extracted and delivered in real-time, and it is actionable, meaning that its consumers will be able to receive and block items that threaten their organizations.


Context is king

Darkfeed also offers the most comprehensive IOC enrichment solution on the market. By enriching IOCs from SIEM, SOAR, TIP or VM platforms, users gain unparalleled context and essential explanations in order to accelerate their incident prevention and response and stay ahead of the threat curve.

  • Automatically enrich IOCs via Darkfeed
  • Block threats and enrich endpoint protection in real-time from your SIEM, SOAR, TIP or VM platform
  • Gain contextual and actionable insights with essential explanations of IOCs


See for yourself

The Darkfeed Difference

Darkfeed is structured in the STIX format and shared via Cybersixgill’s API, allowing customers to automatically consume and integrate it with their security solutions, whether SIEM, SOAR, FW, vulnerability management tools, or any other platform.

Other feeds are manual, relying on humans to search and extract IOCs.

Other feeds are vague, providing IOCs without any explanation.

Other feeds are passive, reporting IOCs observed from attacks.

Darkfeed is automated, from collection to extraction to delivery.

Darkfeed provides context, giving essential explanations of its IOCs.

Darkfeed is preemptive. Its unique data stream brings IOCs before they are used in an attack and detected.

Zero-day malware research

Instant context. Swift action.

Gain instant context, understanding and insights regarding each IOC. Trigger the right playbook or investigate further with ease.

Instant extended details

IOC enrichment & scoring

& additional information

Investigate further
via the Cybersixgill Portal for maximum effect

Incident response

Preempt incident response

Investigate a specific threat or incident across all our datasets from the dark, deep, and clear web. Gain unmatched visibility and insight into each and every threat actor’s context, history and mindset.

  • Immediate context

  • Trigger sophisticated playbooks

  • Preemptive actions

  • Comprehensive intelligence

Power-up your power tools

Supercharge the solutions you trust with seamless integration. Darkfeed enriches your existing security platforms with unmatched intelligence for maximum performance.