ShadowMap
ShadowMap is an AI-powered Digital Risk Protection SaaS platform headquartered in London, helping enterprise security teams monitor external attack surfaces, detect data leaks, and run phishing takedowns across internet, deep web, and dark web.
- Company typePrivate
- Founded2021
- HeadquartersLondon, United Kingdom
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What ShadowMap does
ShadowMap is a Digital Risk Protection SaaS platform headquartered in London (legal entity ShadowMap Limited, Kemp House, City Road) that originated as an internal R&D project inside Security Brigade in 2017 and spun out as an independent startup in 2021. It is led by founder and CEO Yash Kadakia, who also founded Security Brigade, and is supported by R&D operations in Mumbai and regional sales offices in Singapore, Mumbai, New York, and Dubai. The company sells exclusively to enterprise security teams (CISOs, SOCs, brand protection teams, and executive leadership), with publicly named customers including Mahindra Group, ICICI Bank, Swiggy, Titan Company, Go Digit Insurance, and Lactalis. Distribution combines direct enterprise field sales with a channel program featuring Tata Communications, NetMagic, NTT Communications, and Hitachi Systems, plus general reseller, MSSP, and distributor onboarding.
The platform applies AI and ML to continuously monitor an organization's external attack surface across the internet, deep web, and dark web. Core modules are Attack Surface Management (4B+ IPs, 600K+ S3 buckets, 400M+ domains, 4M+ mobile apps), Actionable Threat Intelligence (20+ feeds covering GDPR violations, misconfigurations, ransomware, APT, SSL/TLS, C2 servers), Data Leak and Credential Monitoring (GitHub, BitBucket, pastebin, open storage), Dark Web Monitoring (50,000+ sources including Telegram/IRC/Discord), and Brand Protection & Takedowns (computer-vision logo detection plus multi-pronged registrar/hosting/DNS/SSL/CDN takedowns). Supporting capabilities include SSO Integration Tracking across Google Workspace, Azure AD, Okta, and others; Executive Cyber Protection; Security Ratings; and an Automation & SLA engine that integrates with 50+ security and IT tools (Splunk, QRadar, ArcSight, JIRA, ServiceNow, Imperva, F5, deception platforms, firewalls, WAFs) and supports custom API workflows.
ShadowMap operates on a quote-based enterprise SaaS subscription model with annual billing; pricing is not publicly disclosed and all purchases require a demo. The company is privately held as a subsidiary of Security Brigade, with no disclosed external venture funding, no M&A activity, and no regulatory or restructuring actions on record. Recognized by the Data Security Council of India as the Most Innovative Product in Cyber Security (2020), ShadowMap continues to invest in original OSINT/threat intelligence publications as a top-of-funnel demand-generation asset.
ShadowMap firmographics
Firmographics- Name
- ShadowMap
- Legal name
- ShadowMap Limited
- Website
- https://shadowmap.com
- Company type
- Private
- Founded year
- 2021
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- ShadowMap is an AI-powered Digital Risk Protection SaaS platform headquartered in London, helping enterprise security teams monitor external attack surfaces, detect data leaks, and run phishing takedowns across internet, deep web, and dark web.
- Ownership category
- akta.pro rank
ShadowMap industry classification
Industry- Product category
- Digital Risk Protection / External Attack Surface Management
- NAICS
- Web Search Portals and All Other Information Services (519290), Investigation and Personal Background Check Services (561611)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Data Security & Privacy Services (DLP, Encryption, Privacy Ops) (BPAKAHAM)
- akta.pro secondary industries
- Cloud Security Services (Posture Mgmt, Workload Protection) (BPAKAHAK), Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK), Cloud Data Security (DSPM, Cloud DLP) (HDADADAJ)
Keywords
Where ShadowMap is headquartered
LocationHeadquarters
- HQ city
- London
- HQ country
- United Kingdom
- HQ region
- Europe
Offices7 records
Markets served
ShadowMap business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations
Revenue model
- SaaS Subscription - Digital Risk Protection Platform: ShadowMap operates as a SaaS subscription platform providing continuous digital risk monitoring. Customers pay for ongoing access to the platform including attack surface management, threat intelligence, brand protection, and takedown services. The platform supports enterprise pricing with demos indicating a consultative sales approach.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise SaaS subscription with demo required |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels5 records
ShadowMap product offering
Product offeringCore offering
ShadowMap is an AI and ML-powered Digital Risk Protection SaaS platform that continuously monitors a customer's external attack surface, the surface/deep/dark web, code repositories, cloud storage, paste sites, and breach databases to discover shadow IT, data leaks, leaked credentials, brand impersonation, and phishing infrastructure. It correlates those findings with integrated threat intelligence feeds, scores risk, and triggers automated or analyst-led takedown, workflow, and SLA actions through integrations with SIEM, ticketing, firewall, WAF, CMDB, and identity/SSO systems, sold as a subscription to enterprise security teams and CISOs.
Product overview
ShadowMap is an AI and ML-powered Digital Risk Protection platform that operates as a unified SaaS product with integrated modules rather than standalone point solutions. The core platform provides four key pillars: Attack Surface Management for real-time shadow IT and asset inventory discovery; Actionable Threat Intelligence correlating attack surface with integrated threat feeds; Automation & SLAs for driving compliance through security infrastructure integrations; and Security Ratings for benchmarking cybersecurity performance. Supporting modules include Brand Protection & Takedowns with sub-features for Executive Cyber Protection, Cyber Threat Police Services, and SSO Integration Tracking; Dark Web Monitoring & Data Breaches; and Monitoring Data Leaks & Leaked Credentials. Solutions include Phishing Takedown combining automation with expert analysts, Automate Security Operations for workflow integration, and Security Ratings. The platform is developed by Security Brigade and monitors 4 billion+ IP addresses, 600,000+ S3 buckets, 66 million repositories, 100 million+ pastebin posts, and 50,000+ dark web sources.
Differentiator
Problem solved
Functional benefit
Products and services
- Attack Surface Management
Quantifiable outcome
- Continuous monitoring of 4B+ IP addresses, 400M+ domains, 50K+ dark web sources
- +2 more outcomes
Companies that use ShadowMap
Customer profileNamed customers6 records
Segments3 records
Ideal customer profiles2 records
ShadowMap technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration42 records
AI capability8 records
Feature9 records
ShadowMap partnerships and signals
Strategic signalPartnerships
Eight partnerships are on record, tiered featured, core and general.
- Tata CommunicationsfeaturedFeatured partner in ShadowMap's growing partner ecosystem. Tata Communications provides global telecommunications and network solutions, reselling ShadowMap's digital risk protection services to enterprise customers.
- NetMagicfeaturedFeatured partner and managed hosting provider reselling ShadowMap's security solutions. NetMagic offers managed data center services and cloud solutions in India.
- NTT CommunicationsfeaturedFeatured partner - global ICT solutions provider reselling ShadowMap services. NTT Communications offers enterprise network and cloud infrastructure globally.
- Hitachi SystemsfeaturedFeatured partner - system integration and IT services provider reselling ShadowMap solutions in the Asia Pacific region.
- Security BrigadecoreShadowMap originated from Security Brigade's R&D labs as a nights & weekend project to help customers with shadow IT and data leaks. Security Brigade is a global security testing company with 100+ team members.
- Resellers (General)generalGeneral reseller partnership model with dedicated account managers, partnership portal, sales trainings, and ability to schedule free POC reports and demos for customers.
- MSSPs (Managed Security Service Providers)generalMSSP partnership model allowing managed security service providers to integrate ShadowMap into their service offerings.
- Distributors (General)generalGeneral distribution partnership model for regional distributors of cybersecurity solutions.
Scale indicators9 records
Recent moves6 records
Expansion highlights5 records
ShadowMap competitors and assessment
Company assessmentDirect peers
- ZeroFox: ZeroFox is a direct Digital Risk Protection peer offering external threat intelligence, dark web monitoring, brand protection, and phishing takedown services to enterprise security teams, competing head-to-head with ShadowMap's core use cases.
- ReliaQuest (Digital Shadows): ReliaQuest acquired Digital Shadows, a leading Digital Risk Protection and external threat intelligence platform; directly comparable to ShadowMap's attack surface, dark web, and brand protection offerings.
- Recorded Future: Recorded Future is a top-tier threat intelligence platform that ingests data from the open, deep, and dark web — directly comparable to ShadowMap's Actionable Threat Intelligence and Dark Web Monitoring modules.
- BitSight: BitSight specializes in security ratings and attack surface analytics, closely overlapping with ShadowMap's Security Ratings and continuous ASM modules for enterprise security benchmarking.
- CybelAngel: CybelAngel provides external attack surface management and digital risk protection, focused on detecting exposed assets, data leaks, and credential exposure across the open and dark web.
- KELA: KELA is a dark web threat intelligence provider that monitors cybercrime forums, marketplaces, and ransomware groups — directly comparable to ShadowMap's Dark Web Monitoring and breach intelligence capabilities.
Broad incumbents
- CrowdStrike (Falcon Surface): CrowdStrike's Falcon Surface product provides external attack surface management as part of its broader endpoint and XDR platform, overlapping with ShadowMap's ASM capabilities from a much larger installed base.
- Microsoft (RiskIQ): Microsoft acquired RiskIQ to add external attack surface and digital risk monitoring to its Defender and Sentinel platforms — a broad incumbent that competes with ShadowMap for enterprise security budget.
- Tenable (Tenable.asm): Tenable's attack surface management module sits inside a broader vulnerability management platform, competing with ShadowMap's ASM and Security Ratings for enterprise security teams.
- Rapid7 (IntSights): Rapid7's threat intelligence arm (acquired from IntSights) provides external threat and dark web monitoring integrated into a broader security operations platform, comparable to ShadowMap's intelligence modules.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
ShadowMap social profiles
Digital presenceShadowMap financial estimates
Financial estimateRevenue estimate
Valuation estimate
ShadowMap leadership team
Management profileNumber of profiles
Profiles2 records
ShadowMap funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
ShadowMap M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about ShadowMap
What does ShadowMap do?
ShadowMap is an AI and ML-powered Digital Risk Protection SaaS platform that continuously monitors a customer's external attack surface, the surface/deep/dark web, code repositories, cloud storage, paste sites, and breach databases to discover shadow IT, data leaks, leaked credentials, brand impersonation, and phishing infrastructure. It correlates those findings with integrated threat intelligence feeds, scores risk, and triggers automated or analyst-led takedown, workflow, and SLA actions through integrations with SIEM, ticketing, firewall, WAF, CMDB, and identity/SSO systems, sold as a subscription to enterprise security teams and CISOs.
Is ShadowMap a public or private company?
ShadowMap is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was ShadowMap founded?
ShadowMap was founded in 2021. It employs 1 to 10 people.
Where is ShadowMap based?
ShadowMap is headquartered in London, United Kingdom, in the Europe region.
How does ShadowMap make money?
One revenue line is on record: saaS Subscription - Digital Risk Protection Platform.
Who are ShadowMap's main competitors?
Direct peers on record are ZeroFox, ReliaQuest (Digital Shadows), Recorded Future, BitSight, CybelAngel and KELA. Broad incumbents are CrowdStrike (Falcon Surface), Microsoft (RiskIQ), Tenable (Tenable.asm) and Rapid7 (IntSights).
Does ShadowMap have an API?
No public API is recorded for ShadowMap.
What industry is ShadowMap in?
ShadowMap's product category is Digital Risk Protection / External Attack Surface Management. Its primary akta.pro industry code is BPAKAHAM, Data Security & Privacy Services (DLP, Encryption, Privacy Ops), with a secondary code of BPAKAHAK, Cloud Security Services (Posture Mgmt, Workload Protection). Its NAICS code is 519290 and its SIC code is 7370.