the technology
behind Darkfeed

Sixgill is a fully automated cyber threat intelligence solution suite that helps organizations protect their critical assets, reduce fraud and data breaches, protect their brand and ultimately minimize attack surface. The platform empowers security teams with contextual and actionable insights as well as the ability to conduct real-time investigations.

Rich data feeds such as Darkfeed™ harness Sixgill’s unmatched intelligence collection capabilities and delivers real-time intel into organizations’ existing security systems to help proactively block threats. Current customers include global 2000 enterprises, financial services, MSSPs, government and law enforcement entities.

Unmatched collection

Light years ahead of the threat curve

Sixgill’s proprietary AI algorithms, automation and
contextual analysis deliver unparalleled collection in terms
of depth and breadth.

Sophisticated structuring

This is what intelligence is made of

The Darkfeed’s comprehensive structuring includes:

  • Standard STIX properties for automated parsing.
  • Contextual information to enrich IOCs and allow client-side filtering. This incl. source, post title, post ID, actor, feed name, feed ID, severity, confidence.
  • External integrations for IOC enrichment Incl. : Mitre ATT&CK – tactic and technique Virustotal – abstraction of detections and link to pages.


Intelligence that gets the big picture

Sixgill uses NLP and machine learning to tag posts based on their contents. The Darkfeed focuses on malware-tagged posts, ensuring that malicious indicators are published, while false positives are minimized.

The only threat intelligence platform
that is 100% automated

Next-gen querying & extraction

It’s like bringing a rocket
to a car race

Sixgill automatically queries, extracts and correlates billions of datasets from the underground. It enriches data, turning it to relevant intelligence, so you can make better security decisions and take action – faster.