What SOCRadar does

SOCRadar is a privately held SaaS cybersecurity company founded in 2019 and headquartered in Delaware (Newark/Middletown), with operations spanning 75 countries and 251-500 employees. The company provides an AI-driven Extended Threat Intelligence (XTI) platform that unifies digital risk protection, external attack surface management, dark web monitoring, brand protection, supply chain intelligence, and cyber threat intelligence under a single operational framework, serving over 1,000 customers across government, finance, healthcare, retail, technology, critical infrastructure, aviation, energy, and logistics sectors. Underlying technology includes a Threat Research Unit that produces proprietary intelligence (e.g., FortiBleed, Operation HookedWing), SOCRadar Labs offering 25+ free browser-based threat intelligence tools, an MCP Server for AI-driven cybersecurity automation, and an AI Copilot supporting adversary attribution and supply chain risk analysis.

SOCRadar's most recent product layer, Agentic Threat Intelligence (ATI), deploys autonomous AI agents for phishing detection, brand abuse protection, and dark web monitoring, complemented by an AI Agent Marketplace launched at RSA Conference 2026. The company monetizes primarily through annual SaaS subscriptions on a quote-based pricing model, with freemium entry via SOCRadar Labs and Hacker Score tools. Distribution combines direct enterprise field sales with an expanding MSSP channel (~33% of revenue, targeting >60% within two years) and a redesigned VAR-first Partner Program (March 2026). Total funding raised is $30.2M across a $5M Series A (212.VC, March 2023) and a $25.2M Series B (PeakSpan Capital led with Oxx, May 2024). Recognitions include Visionary in Gartner's 2026 Magic Quadrant for Cyberthreat Intelligence Technologies, QKS Group SPARK Matrix Leader (Digital Risk Protection, Exposure Management, Digital Threat Intelligence Management), Inc. 5000, and CISA-recommended free resource status.

Name

SOCRadar

Legal name

SOCRadar Cyberintelligence Inc.

Website

https://socradar.io

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

251–500 employees

Short description

SOCRadar is a Delaware-based SaaS cybersecurity company founded in 2019 that provides an AI-driven Extended Threat Intelligence platform unifying dark web monitoring, attack surface management, and brand protection for over 1,000 enterprise and government customers across 75 countries.

Ownership category

akta.pro rank

Product category

Cybersecurity Threat Intelligence SaaS

NAICS

Computer Systems Design and Related Services (5415), Other Computer Related Services (541519), Computer Systems Design and Related Services (54151)

SIC

Services-Prepackaged Software (7372), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Threat Intelligence Services (BPAEADAC)

akta.pro secondary industries

Security Operations Center (SOC) as a Service (BPAEADAB), SOAR & Security Automation (HDADAGAB), Email & Collaboration Threat Detection/Response (ICR/CTDR) (HDADAKAI)

Keywords

• Threat intelligence platform
• Dark web monitoring
• Attack surface management
• Digital risk protection
• Supply chain security

Headquarters

HQ city

Reston

HQ country

United States

HQ region

North America

Offices3 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations

Revenue model

1. Extended Threat Intelligence (XTI) Platform Subscription: SaaS subscription model providing access to the unified threat intelligence platform including dark web monitoring, attack surface management, brand protection, and cyber threat intelligence. Pricing is quote-based / tiered for enterprise and mid-market customers.
2. Agentic Threat Intelligence (ATI) Platform: AI-driven autonomous threat intelligence platform subscription with agentic AI capabilities. Offered as an add-on or standalone platform tier.
3. AI Agent Marketplace Purchases: Modular AI agent marketplace enabling purchase and deployment of specialized autonomous AI agents for specific cybersecurity tasks (phishing detection, brand abuse protection, dark web monitoring), representing a precision-led, customizable cybersecurity offering distinct from traditional 'all-in-one' platform models.
4. MSSP Channel Revenue: Revenue generated through MSSP partners who resell or integrate SOCRadar's threat intelligence into their managed security services. Currently approximately one-third of revenue with a target of over 60% within two years.

Pricing tiers

Go-to-market motion3 records

Distribution channels5 records

Marketing channels9 records

Core offering

SOCRadar provides an AI-driven Extended Threat Intelligence (XTI) SaaS platform that unifies dark web monitoring, external attack surface management, brand protection, cyber threat intelligence, and supply chain intelligence under a single operational framework for enterprise and government customers. The offering is augmented by the Agentic Threat Intelligence (ATI) platform with autonomous AI agents, an MCP Server for AI-driven threat intel workflows, and a suite of free browser-based tools (SOCRadar Labs) that drives product-led growth into paid subscriptions.

Product overview

SOCRadar is a global threat intelligence and cybersecurity company offering a unified platform architecture combining Extended Threat Intelligence (XTI) and Agentic Threat Intelligence (ATI) as the core platforms. The XTI platform integrates Digital Risk Protection, Attack Surface Management, Cyber Threat Intelligence, Dark Web Monitoring, Brand Protection, and Supply Chain Intelligence as modules under a single operational framework. The ATI platform provides AI-driven capabilities with autonomous agents for threat intelligence. Supporting offerings include SOCRadar Labs (free tools), MCP Server for automation, and SOCRadar University for training. The company serves over 1,000 customers across 75 countries with operations established in 2019.

Differentiator

Problem solved

Functional benefit

Brands

• Extended Threat Intelligence (XTI): Unified platform combining digital risk protection, threat intelligence, and external attack surface management.
• Agentic Threat Intelligence
• SOCRadar Labs
• SOCRadar University
• DarkMirror
• Supply Chain Intelligence

Products and services

• Extended Threat Intelligence (XTI) Platform Unified SaaS platform combining Dark Web Monitoring, Cyber Threat Intelligence, Attack Surface Management, Brand Protection, and Supply Chain Intelligence under a single operational framework for enterprise and government security teams.
• Agentic Threat Intelligence (ATI) AI-driven threat intelligence platform powered by autonomous AI agents that think, adapt, and act to defend against cyber threats including ransomware and phishing, with capabilities for adversary attribution, alert prioritization, and supply chain risk analysis.
• Advanced Dark Web Monitoring Continuous monitoring of dark web forums, black markets, leak sites, and Telegram channels to detect credential leaks, stolen data, and brand exposure for businesses.
• Cyber Threat Intelligence Threat hunting and threat actor tracking with behavioral analytics to identify and monitor threat actors targeting organizations, including MITRE ATT&CK-aligned TTP analysis.
• Attack Surface Management Continuous discovery and prioritization of exposed digital assets from a hacker mindset, providing external visibility into an organization's internet-facing footprint.
• Brand Protection Actionable intelligence alerts for brand impersonation, lookalike domains, and brand abuse detection including VIP protection use cases.
• Supply Chain Intelligence Evaluates the security posture of entire supply networks through monitoring across 133 technical assessment checkpoints to identify third-party vulnerabilities.
• MCP Server for Cybersecurity Model Context Protocol server providing conversational command interface for cybersecurity operations, enabling AI-driven threat intelligence capabilities and integration with AI workflows.
• SOCRadar Labs (Free Tools Platform) Collection of over 25 browser-based threat intelligence services including Dark Web Report, IOC Radar, DarkMirror, Threat Actors, External Threat Assessment, Account Breach, and FortiBleed Exposure Checker. Listed by CISA as a recommended free threat intelligence resource.
• AI Agent Marketplace Marketplace for modular purchase and deployment of specialized autonomous AI agents for cybersecurity tasks including phishing detection, brand abuse protection, and dark web monitoring.
• Hacker Score Free AI-powered scoring tool for MSSPs and MSPs that evaluates over 150 external attack indicators including phishing exposure, leaked credentials, and vulnerable internet-facing assets to help organizations understand cyber risk from an attacker's perspective.
• Real-Time DDoS Threat Intelligence Platform Real-time monitoring and analysis of DDoS attacks targeting European infrastructure, with updates every 5 seconds, geographic threat mapping, sector-specific insights, and a live attack feed with flexible time-range analysis.
• SOCRadar University Cybersecurity training and e-learning platform offering partner training, employee training, and customer courses to build skills and drive platform adoption, including certifications on threat intelligence.

Quantifiable outcome

• Over 1,000 customers served across 75 countries with double-digit revenue growth
• +4 more outcomes

Named customers1 record

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

AI capability9 records

Feature10 records

Partnerships

Three partnerships are on record, tiered core and moderate.

• CywarecoreTechnology or Integration · 2 June 2026Cyware integrated SOCRadar's external threat intelligence (phishing domains, stolen credentials) into its Security Operations Platform to enhance Digital Risk Protection (DRP) capabilities for MSSPs. The integration aims to improve threat contextualization, automation, and response by providing external threat signals within a unified workflow. Joint press release issued June 2, 2026.
• APWG (Anti-Phishing Working Group)moderateStrategic or Co-development Partner · 10 December 2024SOCRadar joined forces with APWG to combat phishing and cybercrime. APWG is an international coalition unified by a grievous shared mission to wipe away phishing and other related fraud. The partnership enhances SOCRadar's anti-phishing capabilities and threat intelligence data sharing within the global cybersecurity community.
• MaltegocoreTechnology or Integration · 21 November 2024SOCRadar and Maltego announced a strategic partnership to transform threat intelligence for cybersecurity teams. The partnership enables integration of SOCRadar's threat intelligence data into Maltego's link analysis platform, allowing security professionals to correlate and visualize threat data more effectively. Enables SOCRadar users to leverage Maltego's investigative capabilities.

Scale indicators8 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Recorded Future: Closest direct competitor in threat intelligence; offers an intelligence platform covering dark web, threat actor, and brand monitoring. Now owned by Mastercard, it competes head-on with SOCRadar's XTI across enterprise and government accounts.
• ZeroFox: Direct competitor in Digital Risk Protection / external threat intelligence with comparable dark web monitoring, brand protection, and attack surface capabilities. Pursues a similar enterprise and MSSP go-to-market, making it one of the most directly comparable vendors to SOCRadar XTI.
• Anomali: Threat intelligence platform combining TIP, SIEM integrations, dark web, and threat actor tracking. Competes with SOCRadar in mid-market and enterprise CTI deals and shares similar SIEM/SOAR integration patterns.
• ThreatConnect: Threat intelligence operations platform focused on TIP, threat analytics, and orchestration. Comparable to SOCRadar's cyber threat intelligence and IOC enrichment modules, serving enterprise security operations teams.
• Cyware: SOAR and threat intelligence sharing platform that is also a SOCRadar technology partner (Cyware integrated SOCRadar's external threat intelligence into its Security Operations Platform). Competes with SOCRadar at the SOAR/tip intersection while partnering on digital risk protection for MSSPs.
• Digital Shadows (now ReliaQuest): Digital Shadows' SearchLight offered digital risk protection, dark web monitoring, and brand protection nearly identical to SOCRadar XTI modules. Now part of ReliaQuest, it remains one of the closest direct peers in digital risk and external threat intelligence.
• Intel 471: Cyber threat intelligence provider focused on adversary, malware, and dark-web intelligence with a strong emphasis on premium, human-curated feeds. Comparable to SOCRadar's Cyber Threat Intelligence and Dark Web Monitoring offerings, particularly for enterprise SOC and MSSP use cases.

Broad incumbents

• Mandiant: Acquired by Google Cloud, Mandiant provides cyber threat intelligence plus incident response and managed defense. Overlaps directly with SOCRadar's cyber threat intelligence and supply chain modules but operates at much larger scale and as part of Google Cloud's broader portfolio.
• CrowdStrike: Endpoint and cloud security incumbent that has expanded into threat intelligence, external attack surface, and identity protection via Falcon Intelligence and Charlotte AI. Competes with SOCRadar across enterprise CTI and ASM, particularly where CrowdStrike bundles intelligence into its broader XDR platform.
• Tenable: Vulnerability management and exposure management leader (Nessus, Tenable One). Competes with SOCRadar's Attack Surface Management and Supply Chain Intelligence modules within exposure management programs, especially among enterprise and MSSP buyers.

Market position

Strengths5 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/socradar
• LinkedInlinkedin.com/company/socradar
• GitHubgithub.com/socradar

Compliance6 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds2 records

Investors3 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about SOCRadar