Dark web monitoring for you and your suppliers

See what they see.

What ransomware groups have published about you and your suppliers. Your supplier won’t tell you. The leak will.

If we miss a significant leak about you, next year is free.

Request my statement Free, within 24 business hours.

OwlyScan Monitoring, Overview of the demo company ACME: on the left a briefing with the verdict High exposure, a summary of four publications, six new documents, three documents to look at first, the top attack scenario and the four publications; on the right a globe placing each publication, with a zoom lens on France and Belgium. — AI native · our models read every document MCP native · your AI tools plug in · all included

The free statement first, then three offers from 3 000 € a year

How it works

A ransomware group exfiltrates the files before encrypting them. If it is not paid, it publishes them. Among them are military secrets, trade secrets, HR files, and the means to get into a site or reach a person.

These files stay online for years, and others use them. An attacker finds passwords in them for the next intrusion, a competitor reads your commercial terms, and an intelligence service collects the names of your engineers.

In several sectors, the law also requires you to know. A bank under DORA or an operator under NIS 2 must be able to say what has been published about it and its suppliers, and since when it has known.

Because nobody can read all of this by hand, we do it with software. Each document is read automatically, and we work out what it is, what it is about and whose it is. You receive the part that concerns you.

Fetch

As soon as a group publishes a new victim, we fetch everything it put online, in every format and every language. We open every archive, even those holding other archives.
The Breakdown view shows what each publication holds, by type of data.

Monitoring · Breakdown view · demo data
Read

Our models read each document in full and give it a title in plain words, its kind, its date, and the name of the company it is about.
In the Documents view, the most important ones are at the top of the list.

Monitoring · Documents view · demo data
Hand over

For each document that concerns you, you receive one page: the line that matters, what an attacker can do with it, where it comes from, and who on your side has to act.
Passwords are masked.

Monitoring · a document open · demo data

No one will ask you to read ransomware sites. Your clients, your insurer and the regulator will ask what leaked about you, and since when you knew. We agree with you what to watch and who receives what. After that, it takes almost none of your time.

Some of it is yours.

A publication can hold millions of files, the victim’s and those of all its partners. The dashboard pulls out what is about you and shows what it changes for you.

Impact view: attack scenarios, most severe first. Scenario 1, High: sign in to ACME's VPN as a finance employee, evidence 3 of 4 found, why it matters, and the three publications it combines, none of which shows it alone. On the right, a flow from publications to scenarios to attacker types.

Timeline view: 55% of ACME's dated documents are less than a year old. One ridge per publication across 2023 to 2027, the documents placed on it by date and criticality, with when each publication was seen online and a Today line.

Themes view: a treemap of ACME's documents grouped by theme, such as Saved staff passwords, Finance files and payments, Supplier contacts and terms; each block sized by its number of documents and coloured by criticality.

Report panel: ACME, a billing API key and a database password pasted on 27 September. In short first, then what was found, what an attacker can do and coverage, with each document cited as a reference chip and listed on the right.

The Impact view shows what an attacker can do with the published documents, most serious first. A password in one publication, an employee’s name in another and the address of a gateway in a third are enough to open a door.

Monitoring · Impact view · demo dataKeys shown as in the app

You access all of it.

The search engine gives you every document of every publication. You search by keyword, the way an attacker would. Your searches leave no trace.

Sold on its own, or included in Monitoring.

Keyword search for the part number 7Q-4410-114: 21 matches. Sources on the left, Globex Machining 14, Initech Freight 6, a paste site 1; results grouped by folder with the address, the file and a passage with the term marked; the assistant on the right.

The assistant answers: all 21 results concern one customer, coded AC-0092 in the supplier's files, with numbered citations to an inspection report, a purchase order, a non-conformance report, the drawing index and a freight forwarder's manifests.

Explain on a first article inspection report: format, nature, dates, sensitive findings and takeaway. The customer's technical data was published through its supplier, under a part number; the customer's name is not in the file.

Search for a domain name, a product name or a project code. Every published document that mentions it comes up, grouped by source, with the passage where the term appears.

Investigation · keyword search · demo data

Formatted by the AI

A published spreadsheet arrives as raw text.

Formatted gives it back its headings and tables, without changing a value. The raw text stays in the next tab, to compare.

The same document, Formatted tab: a field table with part number, customer, purchase order, supplier, material, drawing and export class, then a table of the eight characteristics with nominal, tolerances, measured value and result.

The document viewer, Raw text tab: a first article inspection report as 21 lines of semicolon-separated text, the part number marked.

Investigation · document viewer · demo dataDrag to compare

How you get it.

Three offers: Access, Unlimited and Ecosystem.

See the offers

FAQ

“Is it legal?”: Yes. We work like a search engine: our indexing is purely technical, automatic and passive. We index what is already published, and you have nothing to download.
“What do you index?”: The whole dark web, without picking: everything published there, read document by document. So it covers business risk, military risk, exposed personal data and physical risk alike.
“What if you find nothing?”: Good news, and a dated statement to prove it the day someone asks. The real question is whether you can trust the product: that is what our guarantee is for. If we miss a significant leak about you, next year is free.
“Does it plug into our SOC, our CTI platform or MISP?”: Yes. Findings go out over syslog, or as STIX over TAXII. An MCP server is also available for your AI tools.
“Where does our data stay?”: As an option: AI models hosted in the EU, or OwlyScan deployed on your premises.

Now see your own company.

No access to your systems. We read only what is already exposed. The results go to you alone.

The statement is free because it shows you our work on your own scope. By hand, it would take two people three weeks.

What happens next

You send the form below.
Within 24 business hours, you receive your complete statement.
An analyst reads it with you for 30 minutes. Together you decide what to watch and who receives what.
You try the service before you buy, with our help and training.
Monitoring starts the day of that reading.

Your statement

Your company, your suppliers, a programme, or the entities you watch. You choose.

What you receive

First page of the example statement for ACME, a fictitious company: the OwlyScan masthead, the specimen notice, the title, the recipient and the scope, then the executive summary and its table of findings by severity. — Specimen · fictitious data In yours, every fact has its source and its date, and the names are in clear.

Guarantee

If we miss a significant leak about you, next year is free.

P.S. Take stock before a client or an auditor asks you to.

Hosted in France, available on your premises

Developed in France. Our clients include government services, banks, aerospace groups and ERP software vendors. Member of GICAT. Heard by the French Senate. Published at IEEE ICTAI and IFIP SEC.