Skip to main content

Shrink your external blind spots.

External threat intelligence for small business

Affordable visibility into leaked credentials, exposed infrastructure, and other external risk, without a dedicated security team.

Prefer a walkthrough first? Watch the platform tour

Why ThreatHarvest

You shouldn't need a dedicated security team to know your external risks.

Enterprise platforms assume you already have a security team, and cobbling together free tools just adds another job. ThreatHarvest watches the external landscape for signs your organization has surfaced somewhere it shouldn't, then presents findings you can review without hiring analysts or standing up an enterprise threat-intel stack.

Findings, not feeds

Tell ThreatHarvest what identifies your organization, then review prioritized findings matched to those identifiers, not another raw feed firehose.

Sized for small teams

No agents to install, no required sales calls, no long-term contracts. Built for SMBs and resource-constrained IT, even a team of one.

Honest external focus

Not an active scanner or replacement for your internal controls. Focused on the external landscape where warning signs can appear.

See capabilities and the platform tour on the Product page.

Who it's for

Built for lean teams

Small and midsize teams with real external exposure, such as leaked credentials, ransomware leak-site postings, and exposed assets, who need findings they can review, not raw feeds, at a cost and complexity that matches their risk profile.

Founder-led, independent, self-financed, and built in Kansas.

"When you have access to the right context, you stop reacting to disasters and start showing up with a plan."
Josh Cech, Founder, ThreatHarvest
  • Filter to your organization

    Findings are scoped to the identifiers you register, so you see what you care about, not the entire internet.

  • What needs your attention

    Findings flag what deserves a look. You decide what needs a response.

  • Ready when something surfaces

    Stay organized during quiet stretches so your workflow is already in place when it matters.

Coverage

What our external threat intelligence monitors

Choose what you need to know about, frombreach indicators to lookalike domains. We handle the sources and match findings to the identifiers you register.

External Exposure

  • Account Compromise

    Find credential exposure

  • Certificate Issuance

    Ensure certificate authenticity

  • External Attack Surface

    Discover points of access

Active Threats

  • Emerging Vulnerabilities

    Monitor disclosed vulnerabilities

  • Breach Indicators

    Detect evidence of an attack

  • Supply Chain Incidents

    Identify third-party security risk

  • Illicit Messaging Activity

    Track threat actor communication

Situational Awareness

  • Brand Impersonation

    Uncover brand identity misuse

  • Supply Chain Mentions

    Uncover underground activity

  • Domain Spoofing

    Locate fraudulent sites

  • Underground Mentions

    Monitor threat actor posts

Sourced broadly, filtered to what matters to you

  • Credential Leaks
  • Threat Feeds
  • Certificate Transparency
  • News Feeds
  • Messaging Channels
  • Vulnerability Database
  • Social Handles
  • Domain Permutations
  • Darkweb Postings
  • Network Crawling

Full breakdown and plan packaging on Product and Pricing.

Getting started

From signup to monitoring in minutes

1

Start a trial

New customers get a 14-day free trial on the Starter plan.

2

Register what identifies you

Register domains, IPs, keywords, and other identifiers with guided setup. Finish in about 15 minutes.

3

Monitor what matters

Monitoring starts as soon as setup is done, and findings surface over time.

Frequently asked questions

What is external threat intelligence?

Visibility into risk that surfaces outside your own network. With ThreatHarvest, you register your domains, public IPs, brand keywords, and social handles, then review findings matched to them, not a raw feed. It is not a SIEM, a scanner, or a security team, and it works alongside the controls you already run.

Is external threat intelligence only for enterprises?

No. Small teams have real external exposure too, and they are who ThreatHarvest is built for: SMBs and resource-constrained IT without dedicated security staff or an enterprise budget. For a longer answer, see what threat intelligence is and who it is for. For general small business security guidance, see CISA's cyber guidance for small businesses and the NIST Small Business Cybersecurity Corner.

What are external threats?

Risks that originate outside your organization and can be exploited by malicious actors, such as phishing, leaked credentials, or exposed infrastructure, as opposed to risks from inside your own network. For a worked example, see what an external threat looks like.

How does onboarding work?

Add the domains, IP addresses, and keywords that identify your organization, then pick which categories of external risk you want watched. Monitoring starts from there, and you can adjust anytime. (In the product those identifiers are called attributes, and risk categories are requirements. Your plan sets how many you can register, and which requirements and sources they're monitored against.)

What identifiers can I register?

Domains, IP addresses, keyphrases, social handles, and similar identifiers ThreatHarvest matches against the external threat landscape. Your plan sets how many you can register, and which requirements and sources they're monitored against.

Why was ThreatHarvest built?

Most threat intelligence platforms are priced and built for large enterprises with dedicated security staff. ThreatHarvest exists for the much larger group of organizations that have real external exposure but not that budget or headcount. Visibility should not be out of reach just because you're small.

How does the free trial work?

New customers get a 14-day free trial on the Starter plan. There is nothing to request: new accounts get the trial automatically when they sign up for the Starter plan. If you don't cancel before the trial ends, your plan begins immediately afterward.

Why is a credit card required for the trial?

It's one of the ways we keep the platform secure. A credit card is required for security, but there is no subscription charge at sign-up. Because ThreatHarvest is a security product, requiring a card and limiting each company to one trial helps prevent abuse.

Who is eligible for the trial?

New customers only, limit one per company. Eligibility is confirmed at sign-up. If no trial is shown when you sign up, the account isn't eligible.

Is there a contract? Can I cancel?

There is no long-term contract and no required sales call. You can cancel anytime in the app: go to Account, choose Billing & Payment (this opens Stripe's billing portal), then select Cancel Subscription. The same steps apply during a free trial: cancel before it ends and you won't be charged. If you don't cancel, your plan begins as soon as the trial ends. There are no refunds. After you cancel, you keep access through the end of the current monthly term.

Ready to shrink your window of exposure?

Start a free trial, talk to us, or watch the platform tour. No security team required, starting at $99/month.

Watch the platform tour