Watch the names that matter
Add companies, domains, product names, suppliers, executives, and portfolio companies.
Dark web monitoring
Hanasand monitors ransomware and extortion metadata, matches it to watchlists, and sends notification packets for security, vendor-risk, and executive-response teams.
Best for
Company alerts
Delivery
Webhook + API
Output
Review-ready events
Example payload sent when a watched term matches
{
"eventType": "darkweb.monitoring.match",
"deliveredAt": "2026-06-23T08:16:44.000Z",
"severity": "review",
"actor": "Akira",
"company": "Acme Payments",
"matchedTerm": "acme.com",
"claimSummary": "Actor page lists a new victim claim and mentions financial records, contracts, and employee data.",
"claimedAt": "2026-06-23T07:58:00.000Z",
"sourceName": "monitored actor page",
"sourceUrl": "https://hanasand.com/ti?query=Acme%20Payments",
"confidence": 0.84,
"recommendedAction": "Confirm the company match, notify vendor-risk or incident response, and watch for claim updates.",
"pivots": [
"Akira",
"Acme Payments",
"acme.com",
"financial records"
]
}Add companies, domains, product names, suppliers, executives, and portfolio companies.
Use public trackers as seeds and owned collection for monitored actor-page metadata.
Deliver one compact event to a webhook, inbox, or review queue with the fields a team needs first.
API and webhook delivery
The API is useful because it turns scattered actor-page observations into stable fields: company, actor, matched term, claim text, source, timing, confidence, and recommended action.
Fields customers pay for