Developer docs
API playgroundTry for free, no card

Search company profiles

Constella Intelligence

Full company profile

uuid0002z98

Namestring
Constella Intelligence
Legal namestring
Constella Intelligence, Inc.
Websiteurl
constella.ai
Company typeenum
Private
Founded yearint
2016
Descriptiontext

Constella Intelligence is a private cybersecurity company founded in 2016 and headquartered in Los Altos, California, that provides identity risk intelligence and digital risk protection services to enterprise security teams, fraud teams, MSSPs/MDR-XDR providers, and law enforcement agencies. The company maintains what it describes as the world's largest curated identity data lake, spanning over 1 trillion identity attributes and 54.6 billion curated records across 125+ countries and 50+ languages, aggregated from surface, deep, and dark web sources. Its core technology is the Verified Identity Pedigree methodology — a multi-stage verification pipeline that cleans, deduplicates, and enriches raw breach and infostealer data with source provenance and recency, supported by an Identity Correlation & Attribution Engine that links fragmented digital identities (emails, usernames, social handles, phone numbers, credentials) to verified personas.

Constella operates a dual-platform model: (1) the Hunter+ Digital Risk Protection platform, sold to enterprise security teams and CISOs as a subscription with Executive Protection, Brand Integrity, and Threat Investigation modules; and (2) an Intelligence API that delivers high-speed access to its curated identity dataset for embedding into MDR/XDR detection stacks, fraud engines, identity theft monitoring products, and OSINT tools. The company processes 51.7 million infostealer packages annually (a 72% YoY increase in 2025) and publishes proprietary research, including the 2026 Identity Breach Report, as a thought-leadership and demand-generation asset. Its business model is enterprise subscription with annual terms, EULA-defined API call limits, and a 5%-or-CPI annual escalator; a free Exposure Check tool serves top-of-funnel lead generation. Distribution is primarily direct enterprise field sales, supplemented by a reseller/partner program and an MSSP/MDR-XDR integration channel; the company also maintains an EU branch office in Madrid, Spain to support GDPR-aligned operations in EMEA.

Short descriptiontext

Constella Intelligence provides identity risk intelligence and digital risk protection to enterprise security teams, fraud teams, MSSPs, and law enforcement, combining a 1T+ attribute curated identity data lake with a Hunter+ DRP platform and an Intelligence API.

Operating statusenum
Operating
Ownership categoryenum
Headcount rangeband
101–250
akta.pro rankint
HeadquartersLos Altos, United States
HQ citystring
Los Altos
HQ countrystring
United States
HQ regionstring
North America
Markets served

Serves global market

Offices3 records

Each record includes

City, Country, Type, Description, Source

Keyword5 values
identity threat intelligence, digital risk protection, breach data monitoring, dark web monitoring, account takeover prevention
Industry3 codes
1Security Analytics & Detection Engineering
CodeHDADAGAEPrimaryYes
2Deception Technology & Threat Hunting
CodeHDADAGAIPrimaryNo
3Financial Crime Investigations & Intelligence (link analysis, network analytics)
CodeFSAGAFAHPrimaryNo
NAICS code1 code
  • Security Systems Services (except Locksmiths)561621
SIC code1 code
  • Services-Prepackaged Software7372
Product category
Identity Threat Intelligence & Digital Risk Protection
Social media profiles1 record
GTM motion2 records

Each record includes

Type, Description, Source

Revenue model3 records
1Identity Data API (Subscription/Usage)
TypeSubscription Recurring
Description

Constella offers API access to its curated identity risk database, powered by verified breach and infostealer data. Revenue is generated through subscription licenses (annual terms per EULA) with API call limits defined in Order Forms. Additional Professional Services (training, consulting, implementation) are available via Statements of Work. The dual-path product strategy serves both API consumers (Build path) and platform users (Investigate path).

constella.ai
2Hunter+ DRP Platform (Subscription)
TypeSubscription Recurring
Description

The Hunter+ Digital Risk Protection platform is sold as a subscription product with annual renewal terms. It provides executive protection, brand integrity monitoring, ransomware prevention, and threat investigation capabilities. Support tiers (Standard and Premium) are available with associated SLAs, with premium support offered for an additional fee.

constella.ai
3Professional Services
TypeProfessional Services
Description

Training, consulting, and implementation services are offered pursuant to Statements of Work or Order Forms, priced separately from the core platform/API subscriptions. These services are performed by Constella personnel or third-party subcontractors under Constella's direction.

constella.ai
Marketing channels9 records

Each record includes

Title, Type, Stage, Description, Source

Distribution channels4 records

Each record includes

Title, Type, Scope, Target buyer, Description, Source

Cost components5 values
Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations
Pricing details4 tiers
1Free Exposure Check (top-of-funnel)
ModelFreemiumBilling cadenceOthers
Notes

A free tool available at threatmap.constella.ai that allows users to check their exposure. Serves as a lead generation mechanism for paid platform and API sales.

constella.ai
2Standard Support SLA
ModelSubscriptionBilling cadenceAnnual
Notes

Standard support tier available for ID Theft Monitoring and Hunter platform products. Specific terms defined in published SLA documents.

constella.ai
3Premium Support SLA
ModelSubscriptionBilling cadenceAnnual
Notes

Premium support tier available at additional cost for ID Theft Monitoring and Hunter platform, with enhanced response times and dedicated assistance. Specific terms defined in published SLA documents.

constella.ai
4Enterprise Subscription (API and/or Hunter+ Platform)
ModelSubscriptionBilling cadenceAnnual
Notes

Enterprise subscription model with Order Form-defined Call Limits (seat counts, API call quotas, data storage limits). Annual subscription terms with automatic renewal unless 60-day written notice is provided. Fees auto-increase by greater of 5% or CPI per renewal cycle. Payment terms: net 30 days.

constella.ai
GTM typeB2B
B2B
Offering typeSoftware
Software
Brand1 of 2 records shown
1Hunter+
Description

Digital Risk Protection platform for security teams providing executive protection, brand protection, and threat investigation capabilities.

constella.ai
+1 more record
Core offering1 text field

Constella Intelligence provides identity risk intelligence and digital risk protection through two product paths. The "Build" path offers the Intelligence API, which delivers programmatic access to a curated library of breach and infostealer data for embedding into customer security and fraud products. The "Investigate" path offers the Hunter+ Digital Risk Protection (DRP) platform, a ready-to-use platform that automates detection of compromised credentials, brand impersonations, executive risks, and pre-ransomware signals across surface, deep, and dark web sources.

Differentiator
Functional benefit
Problem solved
Quantifiable outcome1 of 9 values shown
  • Full remediation completed in 88 minutes from alert receipt (session invalidation, credential rotation, scope assessment) vs. weeks for typical breach detection
+8 more records
Product overview1 text field

Constella Intelligence offers a dual-platform solution consisting of Hunter+ (a Digital Risk Protection platform) and an Identity Data API. Hunter+ provides automated detection of compromised credentials, brand impersonations, and executive risks through modules including Executive Protection, Brand Protection, and Threat Investigation. The Intelligence API enables product owners and MDR/XDR platforms to embed high-fidelity identity risk data into their own products. Additional solutions include Account Takeover Prevention, Session Hijacking protection, Ransomware Prevention, Identity Theft Monitoring, and OSINT capabilities. The company processes over 54.6 billion curated records across 125+ countries and 50+ languages, powering identity-centric threat intelligence and digital risk protection.

Product and service1 record
1Hunter+ Digital Risk Protection Platform
Scale indicator10 records

Each record includes

Type, Value, Description, Source

Partnership4 partners
Strategic tierCoreTypeStrategic or Co-development PartnerAnnounced on2026-04-30
Description

Constella Intelligence and WMC Global co-hosted a practitioner panel on April 30, 2026 examining the phishing-as-a-service supply chain and mobile fraud. WMC Global is a mobile threat intelligence company; this joint panel demonstrated a co-marketing and thought leadership partnership addressing the smishing crisis and $80 billion in annual mobile fraud losses.

Strategic tierCoreTypeGTM or Marketing PartnerAnnounced on2026-02-12
Description

Javelin Strategy & Research named Constella Intelligence Best in Class in all five categories of its 2025 Dark Web Threat Intelligence Vendor Scorecard. This analyst endorsement serves as a key GTM asset for Constella, validating its methodology and approach to mapping threat actor infrastructure through identity-related artifacts.

Strategic tierCoreTypeTechnology or IntegrationAnnounced on2025-10-31
Description

Proton launched its Data Breach Observatory initiative in October 2025 in partnership with Constella Intelligence. The initiative monitors and reports on cybersecurity breaches by tracking dark web marketplaces. Constella's identity breach data and expertise support Proton's breach monitoring capabilities. Proton VPN users benefit from this integrated threat intelligence.

Strategic tierCoreTypeGTM or Marketing PartnerAnnounced on2025-10-09
Description

SINET selected Constella Intelligence as one of 16 winners of the 2025 SINET16 Innovator Award at RSAC 2026. SINET is a cybersecurity innovation accelerator that connects emerging companies with enterprise and government buyers. This recognition provided Constella with a platform for brand visibility and GTM acceleration among senior security decision-makers.

Recent move6 records

Each record includes

Date, Type, Title, Description, Source

Expansion highlight5 records

Each record includes

Type, Description

Peers10 records
TypeBroad incumbent
Description

Largest threat intelligence platform, now owned by Mastercard. Overlaps with Constella in dark web monitoring, identity intelligence, and breach data, but operates a much broader intelligence portfolio across adversary, vulnerability, and geopolitical intel.

TypeDirect peer
Description

Direct competitor in cyber threat intelligence and dark web monitoring. Co-mentioned with Constella on the 'The Gentlemen' ransomware attribution research, and serves overlapping fraud, brand protection, and corporate security buyers.

TypeDirect peer
Description

Threat intelligence vendor specializing in actor-centric intelligence and dark web monitoring. Referenced alongside Constella in ransomware attribution work, and competes for similar enterprise security, fraud, and government buyers.

TypeDirect peer
Description

Specialist in infostealer and breach data recapture, with a strong Account Takeover Prevention and fraud use case overlap. Directly competes with Constella's Intelligence API and ATO prevention solutions in the same enterprise and identity-protection reseller channel.

TypeDirect peer
Description

Dark web monitoring and infostealer intelligence vendor. Cited alongside Constella in research on North Korean IT worker identity abuse and infostealer log volume trends; competes for the same MDR/XDR and enterprise security buyers.

TypeDirect peer
Description

Digital Risk Protection platform offering brand protection, executive protection, and dark web monitoring — overlapping with Constella's Hunter+ DRP modules including Brand Protection, Executive Protection, and threat investigation capabilities.

TypeDirect peer
Description

Dark web data and intelligence provider with similar identity-centric data collection across deep and dark web sources. Competes with Constella in OSINT, fraud, and government/law enforcement use cases.

TypeBroad incumbent
Description

Acquired Digital Shadows, a Digital Risk Protection vendor. Now part of a broader security operations platform, competing with Constella's Hunter+ on DRP use cases while leveraging significantly larger enterprise reach and capital.

TypeDirect peer
Description

Dark web threat intelligence vendor focused on automated collection from cybercrime forums, marketplaces, and leak sites. Competes with Constella in financial services, MSSP, and government identity intelligence use cases.

TypeEmerging player
Description

Emerging infostealer intelligence provider exposing compromised credentials, cookies, and device fingerprints. Focuses narrowly on infostealer-derived identity data, intersecting with Constella's Infostealer Package Monitoring and Botnet Package Download capabilities.

Market position
Strengths4 records

Each record includes

Headline, Details, Source

Weaknesses4 records

Each record includes

Headline, Details, Source

Competitive moat4 records

Each record includes

Type, Details

Key risks5 records

Each record includes

Headline, Details, Source

Key highlights6 records

Each record includes

Headline, Details, Source

Customer concentration

Classification, Details

Named customers8 records

Each record includes

Name, Industry, Type, Use case, Source, UUID

Segment6 records

Each record includes

Title, Type, Primary, Description, Pain point addressed, Use case, Source

Ideal customer profile5 records

Each record includes

Profile, Firmographic size, Sales motion, Sales cycle length, Buying structure, Purchase trigger, Buyer persona, Geography, Industry vertical, Primary use case, Description, Pain points, Evidence proof points, Target buyer

Technology focused
Yes
API detail
Has APIbool
Yes

Docs URL, Description

AI capability5 records

Each record includes

Type, Description, Source

AI maturity
App detail

Has app

Feature7 records

Each record includes

Title, Differentiator, Description, Source

Core technology
Revenue estimate
Valuation estimate
Number of profiles
Profiles9 records

Each record includes

Name, Designation, Designation category, Overview, Profile commentary, Source

No data
Compliance2 records

Each record includes

Name, Class, Description

Funding overview

Funding stage, Last funding date, Total funding USD

Funding rounds1 record

Each record includes

Round, Amount USD, Date, Pre money valuation, Total investors, Investors, News

Investors1 record

Each record includes

Name, Type, Date of entry, Rounds participated, Website

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Each record includes

Name, Acquisition type, Announced date, Completed date, Status, Website, News

Investment

Each record includes

Name, Round, Announced date, Lead investor, Website, News

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Constella Intelligence

Identity Threat Intelligence & Digital Risk Protectionconstella.ai

Constella Intelligence provides identity risk intelligence and digital risk protection to enterprise security teams, fraud teams, MSSPs, and law enforcement, combining a 1T+ attribute curated identity data lake with a Hunter+ DRP platform and an Intelligence API.

What Constella Intelligence does

Constella Intelligence is a private cybersecurity company founded in 2016 and headquartered in Los Altos, California, that provides identity risk intelligence and digital risk protection services to enterprise security teams, fraud teams, MSSPs/MDR-XDR providers, and law enforcement agencies. The company maintains what it describes as the world's largest curated identity data lake, spanning over 1 trillion identity attributes and 54.6 billion curated records across 125+ countries and 50+ languages, aggregated from surface, deep, and dark web sources. Its core technology is the Verified Identity Pedigree methodology — a multi-stage verification pipeline that cleans, deduplicates, and enriches raw breach and infostealer data with source provenance and recency, supported by an Identity Correlation & Attribution Engine that links fragmented digital identities (emails, usernames, social handles, phone numbers, credentials) to verified personas.

Constella operates a dual-platform model: (1) the Hunter+ Digital Risk Protection platform, sold to enterprise security teams and CISOs as a subscription with Executive Protection, Brand Integrity, and Threat Investigation modules; and (2) an Intelligence API that delivers high-speed access to its curated identity dataset for embedding into MDR/XDR detection stacks, fraud engines, identity theft monitoring products, and OSINT tools. The company processes 51.7 million infostealer packages annually (a 72% YoY increase in 2025) and publishes proprietary research, including the 2026 Identity Breach Report, as a thought-leadership and demand-generation asset. Its business model is enterprise subscription with annual terms, EULA-defined API call limits, and a 5%-or-CPI annual escalator; a free Exposure Check tool serves top-of-funnel lead generation. Distribution is primarily direct enterprise field sales, supplemented by a reseller/partner program and an MSSP/MDR-XDR integration channel; the company also maintains an EU branch office in Madrid, Spain to support GDPR-aligned operations in EMEA.

Constella Intelligence firmographics

Firmographics
Name
Constella Intelligence
Legal name
Constella Intelligence, Inc.
Website
https://constella.ai
Company type
Private
Founded year
2016
Operating status
Operating
Headcount range
101–250 employees
Short description
Constella Intelligence provides identity risk intelligence and digital risk protection to enterprise security teams, fraud teams, MSSPs, and law enforcement, combining a 1T+ attribute curated identity data lake with a Hunter+ DRP platform and an Intelligence API.
Ownership category
akta.pro rank

Constella Intelligence industry classification

Industry
Product category
Identity Threat Intelligence & Digital Risk Protection
NAICS
Security Systems Services (except Locksmiths) (561621)
SIC
Services-Prepackaged Software (7372)
akta.pro primary industry
Security Analytics & Detection Engineering (HDADAGAE)
akta.pro secondary industries
Deception Technology & Threat Hunting (HDADAGAI), Financial Crime Investigations & Intelligence (link analysis, network analytics) (FSAGAFAH)

Keywords

  • Identity threat intelligence
  • Digital risk protection
  • Breach data monitoring
  • Dark web monitoring
  • Account takeover prevention

Where Constella Intelligence is headquartered

Location

Headquarters

HQ city
Los Altos
HQ country
United States
HQ region
North America

Offices3 records

Markets served

Constella Intelligence business model

Business model
GTM type
B2B
Offering type
Software
Cost components
Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations

Revenue model

  1. Identity Data API (Subscription/Usage): Constella offers API access to its curated identity risk database, powered by verified breach and infostealer data. Revenue is generated through subscription licenses (annual terms per EULA) with API call limits defined in Order Forms. Additional Professional Services (training, consulting, implementation) are available via Statements of Work. The dual-path product strategy serves both API consumers (Build path) and platform users (Investigate path).
  2. Hunter+ DRP Platform (Subscription): The Hunter+ Digital Risk Protection platform is sold as a subscription product with annual renewal terms. It provides executive protection, brand integrity monitoring, ransomware prevention, and threat investigation capabilities. Support tiers (Standard and Premium) are available with associated SLAs, with premium support offered for an additional fee.
  3. Professional Services: Training, consulting, and implementation services are offered pursuant to Statements of Work or Order Forms, priced separately from the core platform/API subscriptions. These services are performed by Constella personnel or third-party subcontractors under Constella's direction.

Pricing tiers

ModelBillingPrice
FreemiumOthersFree Exposure Check (top-of-funnel)
SubscriptionAnnualStandard Support SLA
SubscriptionAnnualPremium Support SLA
SubscriptionAnnualEnterprise Subscription (API and/or Hunter+ Platform)

Go-to-market motion2 records

Distribution channels4 records

Marketing channels9 records

Constella Intelligence product offering

Product offering

Core offering

Constella Intelligence provides identity risk intelligence and digital risk protection through two product paths. The "Build" path offers the Intelligence API, which delivers programmatic access to a curated library of breach and infostealer data for embedding into customer security and fraud products. The "Investigate" path offers the Hunter+ Digital Risk Protection (DRP) platform, a ready-to-use platform that automates detection of compromised credentials, brand impersonations, executive risks, and pre-ransomware signals across surface, deep, and dark web sources.

Product overview

Constella Intelligence offers a dual-platform solution consisting of Hunter+ (a Digital Risk Protection platform) and an Identity Data API. Hunter+ provides automated detection of compromised credentials, brand impersonations, and executive risks through modules including Executive Protection, Brand Protection, and Threat Investigation. The Intelligence API enables product owners and MDR/XDR platforms to embed high-fidelity identity risk data into their own products. Additional solutions include Account Takeover Prevention, Session Hijacking protection, Ransomware Prevention, Identity Theft Monitoring, and OSINT capabilities. The company processes over 54.6 billion curated records across 125+ countries and 50+ languages, powering identity-centric threat intelligence and digital risk protection.

Differentiator

Problem solved

Functional benefit

Brands

  • Hunter+: Digital Risk Protection platform for security teams providing executive protection, brand protection, and threat investigation capabilities.
  • Identity Data API

Products and services

  • Hunter+ Digital Risk Protection Platform

Quantifiable outcome

  • Full remediation completed in 88 minutes from alert receipt (session invalidation, credential rotation, scope assessment) vs. weeks for typical breach detection
  • +8 more outcomes

Companies that use Constella Intelligence

Customer profile

Named customers8 records

Segments6 records

Ideal customer profiles5 records

Constella Intelligence technology and API

Technology

Technology focussed Yes

API detail

Has API
Yes
API docs
API detail

Core technology

AI maturity

App detail

AI capability5 records

Feature7 records

Constella Intelligence partnerships and signals

Strategic signal

Partnerships

Four partnerships are on record, tiered core.

  • WMC GlobalcoreStrategic or Co-development Partner · 30 April 2026Constella Intelligence and WMC Global co-hosted a practitioner panel on April 30, 2026 examining the phishing-as-a-service supply chain and mobile fraud. WMC Global is a mobile threat intelligence company; this joint panel demonstrated a co-marketing and thought leadership partnership addressing the smishing crisis and $80 billion in annual mobile fraud losses.
  • Javelin Strategy & ResearchcoreGTM or Marketing Partner · 12 February 2026Javelin Strategy & Research named Constella Intelligence Best in Class in all five categories of its 2025 Dark Web Threat Intelligence Vendor Scorecard. This analyst endorsement serves as a key GTM asset for Constella, validating its methodology and approach to mapping threat actor infrastructure through identity-related artifacts.
  • ProtoncoreTechnology or Integration · 31 October 2025Proton launched its Data Breach Observatory initiative in October 2025 in partnership with Constella Intelligence. The initiative monitors and reports on cybersecurity breaches by tracking dark web marketplaces. Constella's identity breach data and expertise support Proton's breach monitoring capabilities. Proton VPN users benefit from this integrated threat intelligence.
  • SINETcoreGTM or Marketing Partner · 9 October 2025SINET selected Constella Intelligence as one of 16 winners of the 2025 SINET16 Innovator Award at RSAC 2026. SINET is a cybersecurity innovation accelerator that connects emerging companies with enterprise and government buyers. This recognition provided Constella with a platform for brand visibility and GTM acceleration among senior security decision-makers.

Scale indicators10 records

Recent moves6 records

Expansion highlights5 records

Constella Intelligence competitors and assessment

Company assessment

Broad incumbents

  • Recorded Future: Largest threat intelligence platform, now owned by Mastercard. Overlaps with Constella in dark web monitoring, identity intelligence, and breach data, but operates a much broader intelligence portfolio across adversary, vulnerability, and geopolitical intel.
  • ReliaQuest (Digital Shadows): Acquired Digital Shadows, a Digital Risk Protection vendor. Now part of a broader security operations platform, competing with Constella's Hunter+ on DRP use cases while leveraging significantly larger enterprise reach and capital.

Direct peers

  • Flashpoint: Direct competitor in cyber threat intelligence and dark web monitoring. Co-mentioned with Constella on the 'The Gentlemen' ransomware attribution research, and serves overlapping fraud, brand protection, and corporate security buyers.
  • Intel 471: Threat intelligence vendor specializing in actor-centric intelligence and dark web monitoring. Referenced alongside Constella in ransomware attribution work, and competes for similar enterprise security, fraud, and government buyers.
  • SpyCloud: Specialist in infostealer and breach data recapture, with a strong Account Takeover Prevention and fraud use case overlap. Directly competes with Constella's Intelligence API and ATO prevention solutions in the same enterprise and identity-protection reseller channel.
  • Flare: Dark web monitoring and infostealer intelligence vendor. Cited alongside Constella in research on North Korean IT worker identity abuse and infostealer log volume trends; competes for the same MDR/XDR and enterprise security buyers.
  • ZeroFox: Digital Risk Protection platform offering brand protection, executive protection, and dark web monitoring — overlapping with Constella's Hunter+ DRP modules including Brand Protection, Executive Protection, and threat investigation capabilities.
  • DarkOwl: Dark web data and intelligence provider with similar identity-centric data collection across deep and dark web sources. Competes with Constella in OSINT, fraud, and government/law enforcement use cases.
  • Cybersixgill: Dark web threat intelligence vendor focused on automated collection from cybercrime forums, marketplaces, and leak sites. Competes with Constella in financial services, MSSP, and government identity intelligence use cases.

Emerging players

  • Hudson Rock: Emerging infostealer intelligence provider exposing compromised credentials, cookies, and device fingerprints. Focuses narrowly on infostealer-derived identity data, intersecting with Constella's Infostealer Package Monitoring and Botnet Package Download capabilities.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

Constella Intelligence social profiles

Digital presence

Constella Intelligence compliance and trust

Trust signal

Compliance2 records

Constella Intelligence financial estimates

Financial estimate

Revenue estimate

Valuation estimate

Constella Intelligence leadership team

Management profile

Number of profiles

Profiles9 records

Constella Intelligence funding detail

Funding detail

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

Constella Intelligence M&A and investment

M&A and investment

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Constella Intelligence

What does Constella Intelligence do?

Constella Intelligence provides identity risk intelligence and digital risk protection through two product paths. The "Build" path offers the Intelligence API, which delivers programmatic access to a curated library of breach and infostealer data for embedding into customer security and fraud products. The "Investigate" path offers the Hunter+ Digital Risk Protection (DRP) platform, a ready-to-use platform that automates detection of compromised credentials, brand impersonations, executive risks, and pre-ransomware signals across surface, deep, and dark web sources.

Is Constella Intelligence a public or private company?

Constella Intelligence is a private company. It is classified as venture growth investor backed and is currently operating.

When was Constella Intelligence founded?

Constella Intelligence was founded in 2016. It employs 101 to 250 people.

Where is Constella Intelligence based?

Constella Intelligence is headquartered in Los Altos, United States, in the North America region.

How does Constella Intelligence make money?

Three revenue lines are on record. Identity Data API (Subscription/Usage) is the primary driver. The others are hunter+ DRP Platform (Subscription) and professional Services.

Who are Constella Intelligence's main competitors?

Broad incumbents on record are Recorded Future and ReliaQuest (Digital Shadows). Direct peers are Flashpoint, Intel 471, SpyCloud, Flare, ZeroFox, DarkOwl and Cybersixgill. Hudson Rock is listed as an emerging player.

Does Constella Intelligence have an API?

Yes. Constella offers an Identity Data API that provides access to the world's largest library of compromised identity data through a single, secure endpoint. The API powers customer-facing security products, internal fraud detection engines, and enables integration for MDR/XDR platforms to detect pre-ransomware signals and session hijacking attempts. It supports identity theft monitoring for real-time dark web monitoring and OSINT investigations by linking anonymous digital fragments to verified personas. Developer documentation is at constella.ai/data/developer-portal.

What industry is Constella Intelligence in?

Constella Intelligence's product category is Identity Threat Intelligence & Digital Risk Protection. Its primary akta.pro industry code is HDADAGAE, Security Analytics & Detection Engineering, with a secondary code of HDADAGAI, Deception Technology & Threat Hunting. Its NAICS code is 561621 and its SIC code is 7372.

Unlock the full company data

50 free credits on sign-up, no credit card required.

Contact sales
Live signals
EIN PresswireConstella Intelligence Quarterly Report Finds Infostealer Infections Nearly Doubled in Q2 2026Constella Intelligence reported a 99.53% increase in infostealer infections in Q2 2026, registering 5.53 million devices. The company identified over 670,000 potential breaches with more than 447 billion records, and its Data Lake grew to 72.95 billion records. The report recommends expanding identity risk management beyond internal systems.Security BoulevardYour Employees Logged In Without Issue; Attackers Logged In Too.In January 2026, cybersecurity firm Socket disclosed five malicious Chrome extensions on the Chrome Web Store that were stealing session cookies from Workday, NetSuite, and SAP SuccessFactors every 60 seconds, exfiltrating them to attacker-controlled command-and-control servers. The extensions also blocked access to Workday's security administration pages to prevent detection, allowing attackers who obtained valid session cookies to gain fully authenticated access without triggering login events or MFA challenges. According to Constella Intelligence, 90 billion browser cookies are circulating in cybercriminal marketplaces, and traditional security controls including MFA, credential monitoring, zero trust architecture, and endpoint detection are ineffective against session cookie replay attacks.Security BoulevardHow OSINT Teams Use Identity Intelligence to Accelerate InvestigationsThis article explains how Identity Intelligence helps Open-Source Intelligence (OSINT) investigators connect fragmented digital identities—such as email addresses, usernames, and social media accounts—to establish attribution in investigations. It describes the growing challenge that investigators face as digital identities rarely exist in isolation, with individuals often maintaining multiple aliases and personas across platforms. The article promotes Constella Intelligence's identity-centric intelligence solutions as a tool to accelerate investigations across threat intelligence, fraud, and corporate investigation contexts.Krebs on SecurityWho Runs the Ransomware Group ‘The Gentlemen?’ – Krebs on SecuritySecurity researchers have traced the identity of the administrator behind the ransomware group "The Gentlemen," identifying him as Alexander Andreevich Yapaev, a 36-year-old from Izhevsk, Russia, who also works as head of B2B marketing at Uralenergo Udmurtia. The group has rapidly become the second most active ransomware-as-a-service operation, claiming at least 332 victims since mid-2025 and attracting affiliates with a generous 90/10 revenue split compared to the industry standard 80/20. Multiple cyber intelligence firms including Intel 471, Constella Intelligence, Epieos, Flashpoint, and PRODAFT contributed analysis linking the administrator's online aliases Zeta88 and Hastalamuerte to Yapaev through breached forum data and open-source intelligence.BenzingaMassive Data Leak Hits Major US Newsrooms As Thousands Of Journalists' Information Appears On Dark Web -A data leak exposed more than 116,000 instances of employee data linked to The New York Times, The Wall Street Journal, and The Washington Post on the dark web, according to a joint study by Proton and Constella Intelligence. The exposed records included over 35,000 email addresses, personal information such as names, phone numbers, dates of birth, addresses, and thousands of passwords. Proton warned that the leaked information could increase risks of phishing, blackmail, and harassment targeting journalists and media organizations, and stated it alerted the CTOs of all three organizations while emphasizing this is a structural problem affecting all internet users.Security BoulevardSmishing at Scale: What Our Expert Panel Revealed About the Mobile Phishing Supply ChainConstella Intelligence and WMC Global hosted a practitioner panel on April 30, 2026, revealing how phishing-as-a-service has evolved into an industrialized supply chain responsible for an estimated $80 billion in annual global mobile fraud losses. The panel highlighted that entry into the ecosystem now requires almost no technical skill due to pre-built kits, automated infrastructure, and AI-powered systems, while mobile has become a structurally advantaged attack channel due to encryption blind spots and enterprise visibility gaps. Key participants including the Oklahoma Turnpike Authority shared how toll road smishing campaigns have escalated sharply, with attackers exploiting the lack of inter-agency coordination and unclear ownership of the problem across states.Security BoulevardWhy Dark Web Monitoring Is No Longer Enough (And What Comes Next)Constella Intelligence published an analysis arguing that traditional dark web monitoring has become insufficient for modern cybersecurity needs, as identity exposure now spans infostealer logs, messaging platforms, paste sites, and private forums rather than just the dark web. The article contends that attackers are leveraging automation and real-time data correlation to exploit credentials before traditional monitoring alerts are triggered, creating a reactive gap. Constella proposes a shift toward Identity Risk Intelligence, a model that aggregates, verifies, and contextualizes identity data across multiple sources to provide actionable insights rather than point-in-time alerts.Security BoulevardWhat the FBI Director Breach Reveals About Executive Digital ExposureOn March 27, 2026, the Iranian state-linked Handala Hack Team breached FBI Director Kash Patel's personal Gmail account and published over 300 emails, personal photos, travel records, and a resume spanning roughly 2011 to 2022, which the FBI confirmed contained no government information but acknowledged was in the hands of a hostile foreign intelligence service. The article cites Constella Intelligence data showing a 135% year-over-year increase in curated identity records and a 661% surge in breaches containing personally identifiable information in 2025, framing the Patel breach as part of a documented Iranian cyber strategy targeting personal accounts of high-value individuals. The article uses this breach as a case study to promote Constella Intelligence's Executive Identity Threat Protection platform, which monitors personal digital exposure of senior leadership across open, deep, and dark web sources.Security BoulevardEULAThe article provides the End User License Agreement (EULA) for Constella Intelligence, Inc., outlining terms of use, restrictions, data ownership, support, liabilities, and legal provisions related to their applications and data. It defines key concepts, license limitations, support policies, and legal responsibilities for users.EIN PresswireConstella Intelligence Unveils 2026 Identity Breach Report: The Industrialization of IdentityConstella Intelligence released its 2026 Identity Breach Report on February 12, 2026, revealing a fundamental shift in cyber threats toward industrialized weaponization of identity data at machine speed and scale. Key findings include a 661% increase in breaches containing personally identifiable information and a 261% year-over-year increase in plaintext-stored credentials, with 68.89% of all breached credentials found in plaintext. The report also noted that while unique identifiers grew only 11% in 2025, total record volume surged 135%, signaling that threat actors are building richer profiles of existing victims rather than seeking new ones.