joshhighet/ransomwatch

Health v2 · maintenance only

Flags: no_releases archived no_readme

Adoption not part of the score

1116 stars · 170 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A transparent ransomware claim tracker that monitors ransomware groups' leak sites on the dark web and records their victim claims. It aggregates and publishes this threat intelligence data via a web interface.

Use cases

• track ransomware group victim claims
• monitor dark web leak sites for new postings
• research ransomware group activity over time
• get alerts on new ransomware victims
• build threat intelligence reports on ransomware campaigns

When to choose

• you need historical ransomware claim data for threat intelligence research
• you want a self-hosted, transparent tracker of ransomware leak sites

When to avoid

• you need actively maintained software with support
• you require real-time guaranteed coverage of all leak sites
• you need a commercial threat intelligence feed with SLAs

Facets

application · maturity abandoned

web-scraping monitoring osint analytics security osint crawlers monitoring self-hosted ransomware darkweb tor threat-intelligence ransomware-tracking leak-site-monitoring web-server docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="joshhighet/ransomwatch")