PlatformCibera OSINT, a Cibera Security product

Threat intelligence you can trace to the source

Cibera OSINT watches vulnerabilities, indicators, ransomware disclosures, approved dark web pages and Telegram channels for you, keeps the original evidence for every record, and alerts your team the moment something matches what you care about.

Start with your organization Managed by our analysts View pricing

Intelligence coverage

Known exploited vulnerabilitiesCVE recordsExploit prediction scores Security advisoriesRansomware disclosure claimsIndicators of compromise Approved onion pagesPublic Telegram channelsSecurity newsInfostealer exposure lookups
Platform

Every signal, one console, with the evidence attached

Each record keeps its provider, original reference and collection time, so analysts check the source before they act.

Vulnerability intelligence

Known exploited vulnerabilities, CVE changes, exploitation probability scores and security advisories, side by side.

CVE record · remote code executionknown exploited
Exploit prediction scorehigh
Vendor advisorylinked

IOC investigation

Search IPs, domains, URLs, hashes and CVEs across collected evidence, see related records and link them to a case.

suspicious-domain.example
3 sources reported this indicatorrelated

Ransomware intelligence

Group activity and victim disclosure claims, matched exactly to the organizations and domains you watch.

Telegram intelligence

Approved public channels are scanned for indicators, CVEs and claims.

public channel · claim detectedNew victim posted: example.org
Statusunverified

Isolated dark web monitoring

A locked-down collector checks approved onion pages for your terms. No files, no page bodies kept.

CollectorTorApproved page

Watchlists, alerts and Telegram notifications

Watch domains, IP ranges, CVEs, brands, organizations and threat actors. Matches become alerts with the original evidence, and you can receive a minimal notification in your own Telegram chat that never reveals your watchlist terms.

Alert · domain match · security newsnew
Alert · CVE match · exploited vulnerabilityacknowledged

Investigations and briefings

Build cases with your team and download briefings with citations for every record.

How it works

From signal to evidence in three steps

01

Collect from authorized sources

Public and licensed feeds are collected on a schedule and shared with customers only where each provider's licence allows it.

02

Match what you watch

Your organization's watchlists are checked as new records arrive. Matches become alerts that keep the original evidence.

03

Investigate and report

Relate records that share indicators, work the case with your team, and share briefings with citations.

Security by design

Built by a security company, for security teams

  • Your data stays yoursWatchlists, alerts and investigations are isolated per organization in the application and in the database itself.
  • Evidence you can verifyEvery record links to its original source with collection timestamps. Unverified claims are labelled as such.
  • Careful collectionOnly approved Telegram channels and onion pages. Attachments are never downloaded and links are never opened.
  • Licensing-awareThird-party intelligence is shown to customers only where the provider's licence permits it.
Who it's for

Sized for teams without an enterprise budget

Security teams

Track the vulnerabilities, indicators and threat actors relevant to your stack, with alerts instead of endless feeds.

Managed service providers

Monitor customer domains and brands from separate organizations, each with its own members and alerts.

IT and risk leaders

Know when your organization appears in ransomware claims or exploited vulnerabilities affect your vendors.

Pricing

Simple plans that grow with your team

No free tier and no unlimited plans: clear limits keep the service affordable and sustainable.

Loading plans…

FAQ

Questions, answered

What is OSINT?

Open-source intelligence is information gathered from publicly available or licensed sources. Cibera OSINT focuses on cyber threats: vulnerabilities, indicators of compromise, ransomware activity and discussions in approved channels.

Where does the data come from?

From public and licensed intelligence providers, approved public Telegram channels and approved onion pages. Every record shows its provider and original reference. Customers only see sources whose licence allows it.

Do you access private groups or download leaked files?

No. Only approved public channels, explicitly authorized groups and approved onion pages are monitored. Attachments and files are never downloaded, and links in messages are never opened.

Can my whole team use it?

Yes. Each organization has owners, administrators, analysts and viewers. Invite colleagues by email and share watchlists, alerts and investigations.

How is my organization's data protected?

Your watchlists, alerts and investigations are isolated per organization, enforced both by the application and by row-level security in the database. Telegram notifications never include your watchlist terms.

How do I subscribe?

Online checkout is being finalized. Create your organization now and contact us to activate a plan.

Get started

See what's being said about you before it matters

Create your organization, add a watchlist and let Cibera OSINT do the watching.

Create your organization