Get a hacker’s view of your organisation. DarkInvader continuously discovers your internet-facing assets and exposures, so you can find and fix them before attackers do.
DarkInvader brings related risks from across your external attack surface together, reducing duplicate alerts and making them easier to understand. Its AI agents then look for ways those risks could combine into a wider attack path, helping your team see what matters most and what to address first.
● new: mcp connector
External Attack Surface Management (EASM) is the ongoing discovery, monitoring and assessment of internet-facing assets that could be seen or targeted by an attacker. DarkInvader helps organisations identify known and previously unknown assets, monitor them for changes and exposures, and prioritise external risks that need attention.
DarkInvader uses automated external reconnaissance to discover internet-facing assets associated with your organisation, including domains, subdomains, IP addresses, cloud infrastructure and exposed services. Discovered assets are then continuously monitored for changes, misconfigurations, vulnerabilities and other exposures as your external attack surface evolves.
DarkInvader can identify issues including exposed services, open ports, vulnerable software, certificate problems, security misconfigurations and shadow IT. It also brings in external intelligence such as leaked credentials, dark web activity and other signals that may increase the risk associated with an asset or organisation.
DarkInvader is an External Attack Surface Management (EASM) platform that continuously discovers and monitors an organisation’s internet-facing attack surface. It combines external asset discovery, vulnerability assessment, OSINT, dark web intelligence and other external signals to help security teams identify exposures, understand risk and prioritise what needs attention.
When providing EASM services, DarkInvader typically acts as a data processor, working under your instructions to identify threats to your public-facing assets. Where our proprietary tools independently collect and index publicly available personal data, we act as the data controller for that specific processing.
We process personal data connected to your organisation as discovered across the surface, deep and dark web, including leaked credentials, network details, OSINT data and threat actor discussions. The exact nature of personal data found can't be predicted in advance, but may include names, work emails, phone numbers and financial details.
As the data controller, you're responsible for ensuring lawful processing under UK GDPR and the Data Protection Act 2018, including establishing a lawful basis (typically legitimate interests) and informing data subjects. We support this with a Legitimate Interest Assessment and a compliant privacy notice you can share with data subjects.
Yes. Since DarkInvader acts as a data processor, UK GDPR Article 28 requires a Data Processing Agreement to be in place. Our data processing terms are incorporated into our standard terms of service, defining how personal data is processed, protected and managed.
We maintain robust technical and organisational measures including role-based access controls, multi-factor authentication, AES-256/TLS encryption, continuous monitoring and regular vulnerability scanning. This is backed by staff security training, documented data protection policies and a defined incident response plan.
Our infrastructure is hosted by AWS in UK and Ireland data centres, and we work with a small number of independent OSINT and dark web crawler providers to support data discovery. Any international data transfers comply with UK GDPR safeguards such as International Data Transfer Agreements or Standard Contractual Clauses.
