Free tools
Put VULONE data on your own site
Live widgets, machine-readable feeds and open formats built from the same data as the platform. No account needed; a link back is all we ask.
Ransomware victim counter embeddable widget
A small card with this month's leak-site victim count, the five most active groups and a link to their profiles. Refreshes every ten minutes. Paste the snippet where you want the card to appear; add data-theme="light" for light backgrounds.
<script src="https://vulone.com/embed/ransomware-counter.js" async></script>Research feed JSON Feed 1.1
The latest leak-site claims and VULONE publications as JSON, with per-group monthly counts. Poll it, pipe it into Slack, or build your own view.
https://vulone.com/research-feed.json
HTML version · RSS of publications
Articles as Markdown
Append .md to any blog or research URL to get the article as plain Markdown with front matter, for LLM ingestion, note-taking or archival.
IOCs over TAXII and REST
STIX 2.1 indicator and ransomware-actor collections for SIEM, TIP and MISP, plus a REST API for search and profiles. Read the API docs.
Need more than the public data?
Full victim lists, negotiation chats, actor profiles across 40+ forums and the selector index are in the platform.
