Sold by: Cybersixgill
Cybersixgill offers real-time threat intelligence solutions to help security teams detect and respond to imminent threats from the clear, deep, and dark web.
3.6
Overview
Cybersixgill continuously collects and exposes the earliest possible indications of risk, moments after they surface on the clear, deep and dark web.
Our proprietary algorithms extract data from a wide range of sources, including content from limited-access deep and dark web forums, underground markets, invite-only messaging groups, code repositories, paste sites and clear web platforms, as well as an unparalleled archive of indexed, searchable historical data from as early as the 1990's.
This data is processed, correlated and enriched with machine learning techniques to create profiles and patterns of malicious threat actors and their peer networks, delivering critical insight into the nature, source and context of each threat.
Our extensive body of threat intelligence data can be consumed through various solution offerings and integrations, each addressing critical customer pain points and use cases.
These solutions are scalable, searchable and seamlessly integrated into existing security stacks, quickly arming enterprises, government and MSSP's alike with accurate, relevant and actionable insights to proactively block threats before they materialize into attacks.
Highlights
- Cybersixgill automates data collection from the widest range of sources, delivering operational threat intelligence quickly.
- The platform offers secure access to threat intelligence through SaaS, APIs, and seamless integration with existing security operations.
- With AI-driven analysis, Cybersixgill reduces response time, offering real-time alerts and insights from the dark web.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Cyber Threat Intelligence Cybersixgill | Cyber Threat Intelligence Base Package | $155,000.00 |
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
For support contact info@cybersixgill.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Cybersixgill
By SecAI
AI generated from product descriptions
Multi-Source Data Collection
Automated collection from clear web, deep web, dark web forums, underground markets, invite-only messaging groups, code repositories, paste sites, and historical archives dating back to the 1990s.
Machine Learning-Based Threat Analysis
Proprietary algorithms and machine learning techniques process, correlate and enrich collected data to create profiles and patterns of malicious threat actors and peer networks.
Real-Time Alert Generation
AI-driven analysis delivers real-time alerts and insights with reduced response time for threat detection and identification.
API and SaaS Integration
Threat intelligence accessible through SaaS platform, APIs, and seamless integration with existing security operations and stacks.
Searchable Historical Data Archive
Indexed and searchable historical threat intelligence database spanning from the 1990s to present, enabling contextual threat analysis and pattern recognition.
Multi-Source Threat Monitoring
Monitors over 500 sources across surface, deep, and dark web including forums, data leak sites, and encrypted chat platforms to detect security risks and initial access vectors.
Machine Learning-Based Detection
Utilizes machine learning engine to detect and mitigate leaked credentials, secrets, and data breaches with prioritization for VIP and executive accounts.
Modular Architecture
Comprises three main modules (deep and dark web monitoring, data leak monitoring, and brand threat monitoring) with multiple sub-modules that can be purchased individually or in combinations based on specific use cases.
SIEM and SOAR Integration
Integrates with major SIEM and SOAR solution providers, Slack, and ticketing tools for streamlined alert management and incident response workflows.
Customizable Alert Configuration
Provides granular tagging and customizable alert rules to deliver specific actionable intelligence with instant reporting capabilities.
Multi-Source Threat Intelligence Integration
Integrates threat intelligence from multiple sources to provide comprehensive coverage and context for threat detection.
Generative AI-Powered Analysis
Utilizes fine-tuned generative AI models to deliver actionable security insights backed by global threat intelligence repositories.
Threat Intelligence API Services
Provides API-based threat intelligence services for programmatic access to threat data and security intelligence.
High-Fidelity Threat Detection
Delivers high-fidelity threat intelligence with rich contextual information to improve detection accuracy and reduce false positives.
Alert Fatigue Reduction
Streamlines threat detection workflows through intelligent filtering and prioritization to minimize alert volume and operational noise.
Standard contract
No
Customer reviews
Aditya Vikram Raj
Centralized threat insights have enabled comprehensive dark web exposure reporting
Reviewed on Apr 04, 2026
Review provided by PeerSpot
What is our primary use case?
Our main use case for Cybersixgill during our proof of concept was to find a tool as a single pane of glass that would provide us actionable threat intelligence along with adversary reporting. We were also looking for a tool that could perform multiple functions, including dark web scanning and dark web intelligence specifically.
When I need to prepare a report for one of my customers, I can search for that particular organization's exposure over the darknet to find what has been there, what emails have been leaked, and other relevant information by checking different dark web forums, market forums, leak sites, and any ransomware groups claiming or naming that particular organization on their leak sites.
What is most valuable?
The best feature that Cybersixgill offers with respect to dark web intelligence is that they provide very good screenshots of where the particular data has been taken, which allows for better visualization and understanding of the scenario, with the source being indicated through onion links that can be reverse-engineered for further investigation.
We were really impressed by some of the features of the platform, and we were planning to integrate it into our day-to-day work, but I'm not certain whether that happened because I was serving a notice period at that time.
What needs improvement?
I used Cybersixgill for only three months as a proof of concept, so I do not feel I am in a position to provide meaningful suggestions for improvements.
For how long have I used the solution?
I used Cybersixgill for a very limited period of time, which was approximately two to three months, and this was during a product review session for our team's proof of concept.
What other advice do I have?
If you are looking for threat intelligence that can cater to various needs from IOC to threat advisories and along with dark web intelligence, then you should try Cybersixgill. I gave this product a rating of 8.
Transportation/Trucking/Railroad
High Cost, Low Signal: More Noise Than Intelligence
Reviewed on Feb 10, 2026
Review provided by G2
What do you like best about the product?
The marketing and positioning are polished. On the surface, Bitsight Threat Intelligence (formerly Cybersixgill) appears to offer broad dark web coverage and an impressive volume of data sources. The promise of automated threat discovery across forums, marketplaces, and paste sites is appealing, especially for teams that lack in-house collection capabilities.
Unfortunately, that promise rarely translates into day-to-day value.
Unfortunately, that promise rarely translates into day-to-day value.
What do you dislike about the product?
The biggest issue is signal-to-noise ratio. The platform generates a high volume of alerts and findings, but a significant portion are low-quality, redundant, or irrelevant. Analysts spend far too much time filtering noise instead of responding to actionable threats.
Performance is another major drawback. Searches and dashboards are often slow, which is frustrating for a tool that claims near real-time intelligence. The UI feels dated and clunky, and workflows are not intuitive.
Support and documentation also fall short of expectations for a product at this price point. Documentation is thin, and support responses are not too helpful.
Performance is another major drawback. Searches and dashboards are often slow, which is frustrating for a tool that claims near real-time intelligence. The UI feels dated and clunky, and workflows are not intuitive.
Support and documentation also fall short of expectations for a product at this price point. Documentation is thin, and support responses are not too helpful.
What problems is the product solving and how is that benefiting you?
In theory, it is meant to solve early detection of credential leaks, brand abuse, and underground chatter before issues escalate. In practice, the benefit is limited because the data requires extensive manual triage to determine what actually matters.
Instead of accelerating response, it often adds operational overhead. The tool identifies “things that exist on the internet,” but stops short of consistently answering the more important question: what requires action right now?
Instead of accelerating response, it often adds operational overhead. The tool identifies “things that exist on the internet,” but stops short of consistently answering the more important question: what requires action right now?
George G.
excellent service
Reviewed on Dec 18, 2024
Review provided by G2
What do you like best about the product?
detailed information and great team to work with
What do you dislike about the product?
nothing at this point, everything met expectations
What problems is the product solving and how is that benefiting you?
advanced threat intel
Manufacturing
Comprehensive threat monitoring tool
Reviewed on Oct 24, 2024
Review provided by G2
What do you like best about the product?
Intelligence provided by it is highly relevant and customizable.
What do you dislike about the product?
Nothing as such it is just great tool to work with.
What problems is the product solving and how is that benefiting you?
It helps to identify if there are any threats to websites and this in turn help to make them more secure.