Free tools
Put VULONE data on your own site
Live widgets, machine-readable feeds and open formats built from the same data as the platform. No account needed; a link back is all we ask.
Ransomware victim counter embeddable widget
A small card with this month's leak-site victim count, the five most active groups and a link to their profiles. Refreshes every ten minutes. Paste the snippet where you want the card to appear; add data-theme="light" for light backgrounds.
<script src="https://vulone.com/embed/ransomware-counter.js" async></script>Research feed JSON Feed 1.1
The latest leak-site claims and VULONE publications as JSON, with per-group monthly counts. Poll it, pipe it into Slack, or build your own view.
https://vulone.com/research-feed.json
HTML version ยท RSS of publications
Articles as Markdown
Append .md to any blog or research URL to get the article as plain Markdown with front matter, for LLM ingestion, note-taking or archival.
IOCs over TAXII and REST
STIX 2.1 indicator and ransomware-actor collections for SIEM, TIP and MISP, plus a REST API for search and profiles. Read the API docs.
Need more than the public data?
Full victim lists, negotiation chats, actor profiles across 40+ forums and the selector index are in the platform.
