Digital Intelligence Platform

Sharper data for security analysts and threat hunters

Scarlet Shark gives your team the data and tools to enhance investigations, track malicious infrastructure, and stay ahead of emerging threats.

10,000+
Services tracked
IPv4 + IPv6
Geolocation coverage
YARA & Sigma
Detection rules included
REST API
Full platform access
Platform

Everything analysts need, in one place

From service identification to threat actor reporting, Scarlet Shark consolidates the intelligence your investigations depend on.

Service Identification

We track more than 10,000 services — SaaS platforms, VPNs, web crawlers, and beyond. Uncover the IPs, domains, certificates, and other artifacts each service uses.

Download a sample list of VPN & proxy IPs →
Service identification example in the Scarlet Shark UI

Service Monitoring

Monitor the uptime and security compliance of the SaaS platforms your team relies on. Track scheduled maintenance windows and service events, so your analysts always know what's planned, what's degraded, and what's back online. Scarlet Shark also maps upstream dependencies, the services your services rely on, so you can spot the true source of an outage, all consolidated in one location.

Service status monitoring dashboard

Threat Actor & Malware Reports

Gain an in-depth understanding with comprehensive reports covering the tools, targets, tactics, techniques, and procedures of active threat actors and malware families.

Detailed threat actor report
Capabilities

Built for modern threat hunting

Malicious Infrastructure Identification

Track malicious IPs, ASNs, domains, file hashes, and other artifacts. Our AI and machine-learning models flag potentially malicious indicators, giving analysts an edge over newly deployed infrastructure.

IP Geolocation

Resolve the physical locations of IPv4 and IPv6 addresses while gaining insight into their network types and owners.

Tailored News Feeds

Stay informed about threats that may affect your organization. Receive updates and security alerts for the software and services you actually use.

REST API

Create custom tools, enhance existing workflows, and enrich IoCs programmatically. View the API documentation.

Integrations

Connect powerful data platforms like VirusTotal, Shodan, Azure Graph, and CrowdStrike to unlock deeper insights and connections in your investigations.

Service Status Monitoring

One consolidated view of uptime and security compliance across every SaaS platform your analysts depend on.

Pricing

Plans for every team

All prices are plus tax.

Basic
$10/month
Plus tax
  • Single user
  • 1,000 UI searches / month
  • 100 API calls / month
  • 2 integrations
Buy Now
Enterprise
$350/month
Plus tax
  • Unlimited users
  • Unlimited UI searches
  • 20,000 API calls / month
  • 25 integrations
Coming Soon
MSP
$900/month
Plus tax
  • Unlimited users
  • Unlimited UI searches
  • Unlimited API calls
  • Unlimited integrations
Coming Soon

Not sure yet?

Check out some of our intelligence feeds — available for free, no account required.

Browse Free Intel Feeds