ThreatFusionAI™
HomeSearchDarkwebBlogs
Capabilities
  • MITRE ATT&CK MappingObserved techniques, tactic coverage and candidate threat actors for a sample.
  • Threat Hunting & IOC Cross-ReferenceStart from one indicator and pivot through everything connected to it.
  • Dark Web & External Threat ContextCredential exposure, leaked data and access brokering, tied back to the platform.
  • SOC OperationsEnrich SIEM and EDR alerts before the block-or-monitor call, by API or by hand.
Investigation tools
  • IOC Cross-ReferencePivot through connected indicators as a graph
  • ATT&CK Matrix441 techniques across 14 tactics, browsable
  • ATT&CK AttributionOverlay a sample and rank candidate actors
  • Vulnerability CatalogueCVEs by vendor and product
How it works
  • Malware AnalysisFour steps, without switching between tools
  • AI CorrelationCorrelation, prioritisation and an analyst assistant
  • What Is Threat IntelligenceFrom atomic indicators to something actionable
  • What Your Team GetsTraditional investigation against this one
Start hereOne box, seven indicator typesPaste a hash, IP, domain, URL, CVE, email or phone number and follow what it connects to. Hover anything on the left for detail.
  • 2.3M+ malware samples analysed
  • Millions of relationships mapped
  • Thousands of threat actors tracked
Open search→
Indicators
  • File HashAV verdicts, behaviour, extracted IOCs, related samples
  • IP AddressReputation, geolocation, connected malware and domains
  • DomainReputation, related hosts, malware relationships
  • URLMalicious website checker for phishing and payload links
More indicators
  • CVECVSS, EPSS, KEV status and exploit availability
  • EmailDark web exposure — masked, full records on Enterprise
  • PhoneDark web exposure — masked, full records on Enterprise
Where to start
  • Dark Web SearchCheck a phone or email against the breach corpus
  • Unified SearchOne box, all seven types, auto-detected
  • IOC Cross-ReferenceOnce you have a result, follow it outward
  • Vulnerability CatalogueBrowse by vendor when you have no CVE id
Every lookupIs also a REST callThe same enrichment runs token-authenticated inside a SOAR playbook, with no analyst in the loop. Hover an indicator type on the left for what it returns.
  • Token-authenticated REST, one call per indicator
  • The same data the browser lookup shows
  • Rate limits and quotas per plan
See the API→
Live threats
  • Threat MapMalicious IPs worldwide, updated every minute
  • CountriesThreat activity for every country
  • IOC FeedNew IPs, domains, URLs and hashes as they are reported
  • TrendingListed by the most feeds in the last 24 hours
Campaigns
  • OverviewMalware and ransomware at a glance
  • MalwareFamilies building the most new infrastructure
  • RansomwareVictims map and the groups behind them
  • Ransomware VictimsEvery leak-site post, newest first
  • Breaches & IncidentsWho was attacked, when and how
  • Is My Company Listed?Search leak sites for a company or domain
Stay informed
  • Weekly DigestThe week in malware and ransomware
  • Your AlertsSign inFollow a family, country or network
LiveThe threat mapMalicious infrastructure worldwide, refreshed every minute. Hover anything on the left for detail.
  • Command-and-control, malware, phishing and attackers
  • Countries, states and networks
  • 7-day replay
Open the map→
Developers
  • API OverviewEndpoints, authentication and rate limits
  • API ReferenceSign inEvery endpoint, with request and response shapes
  • API StatusSign inYour usage against your plan's limits
Reading
  • Threat ResearchWrite-ups and analysis from Craw Security
  • Frequently Asked QuestionsWhat the platform does and does not claim
Plans
  • PricingIndividual and team tiers
  • Who Uses ItFinance, healthcare, government, MSSPs and more
For developersAutomate the whole lookupEvery enrichment on this site is reachable as a token-authenticated REST call, so the same work can run inside a playbook with no analyst in the loop.
  • One call per indicator
  • The same data the browser shows
  • Quotas visible on your account
Start with the overview→
Company
  • About UsWho builds this, and why
  • Why UsWhat this does that a stack of portals does not
  • Contact UsTalk to an analyst about an engagement
Trust
  • Privacy PolicyWhat is collected and what is done with it
  • Terms & ConditionsAcceptable use and the terms of service
ThreatFusionAI™Built by Craw SecurityA threat intelligence platform built by people who run investigations, for people who run investigations. Hover anything on the left for detail.
  • 2.3M+ malware samples analysed
  • Millions of relationships mapped
  • Thousands of threat actors tracked
About the company→
Sign in

Cancellation & Refund Policy

Last updated: 27 October 2026

1. Who this applies to

ThreatFusionAI™ is operated by Craw Cyber Security Private Limited, Plot 4, Lane 2, Kehar Singh Estate, Westend Marg, Saidulajab, New Delhi 110030, India. This policy covers the paid plans (Pro, Max and Business) bought on threatfusionai.com, whether paid by card (processed by Stripe) or by UPI, netbanking or wallet (processed by Razorpay). Enterprise plans follow the terms of their own agreement.

2. Cancelling a plan

  • Monthly plans renew automatically until you turn auto-renewal off on Billing & plan. Turning it off cancels the plan at the end of the month you have paid for: you keep full access until then and are not charged again. You can turn it back on any time before that date.
  • One-month plans (bought with auto-renewal off) do not renew and end by themselves at the end of the month.
  • Cancelling does not delete your account. When the plan ends, your account returns to the Free plan, or to the plan it had before.

3. Refunds: pro-rata for unused time

  • You can ask for a refund of the unused part of your current billing period at any time during that period. We refund the amount paid for the period multiplied by the number of unused days, divided by the number of days in the period, counted from the day we receive your request. Your plan ends when the refund is issued.
  • This applies to monthly plans and to one-month plans alike.
  • Duplicate or mistaken charges are refunded in full.
  • Plan changes: an upgrade charges the difference for the rest of the period straight away; a downgrade turns the unused part of the higher plan into credit on your next payments. If you cancel while you hold such credit, we refund what is left of it.
  • Prices in Indian rupees include 18% GST; a refund includes the matching part of the GST.
  • We do not refund billing periods that have already ended, or plans of accounts suspended for breaking our Terms & Conditions.

4. How to ask for a refund

Write to support@threatfusionai.com from the email address of your account (or tell us which account it is), with the date and amount of the payment or the invoice number shown on Billing & plan. You can also call us on +91 951-380-5401. We answer within two business days.

5. When the money reaches you

Refunds go back to the original payment method (the same card, UPI account or bank account), in the currency you paid. We issue an approved refund within five business days; your bank or card issuer may then take another 5 to 10 business days to show it. For payments in a currency other than your card’s, the exchange rate is set by your bank.

6. Contact

Craw Cyber Security Private Limited · support@threatfusionai.com · +91 951-380-5401 · Contact page. See also our Shipping & Delivery Policy.

ThreatFusionAI™
By Craw Security

AI-Powered unified Threat Intelligence & Cyber Defense Platform. Collect, correlate, analyze, and act on threats in real time.

Platform
  • MITRE ATT&CK Mapping
  • Threat Hunting & IOC Cross-Reference
  • Dark Web & External Threat Context
  • SOC Operations
  • Plans
  • API Overview
About us
  • About
  • Why Us
  • Craw Security
  • Privacy Policy
  • Terms & Conditions
  • Cancellation & Refunds
  • Shipping & Delivery
Connect
support@threatfusionai.com
+91 951-380-5401
Plot no. 4, Lane no. 2,Kehar Singh Estate, Westend Marg, Behind Saket Metro Station, Saidulajab, New Delhi - 110030
Threat Intel Newsletter
Stay ahead of emerging threats

Get new research, advisories, and platform updates delivered to your inbox. No spam — unsubscribe anytime.

© 2026 ThreatFusionAI™ by Craw Cyber Security Pvt Ltd. All Rights Reserved.
Demo
ThreatFusionAI™ Product Walkthrough
The fastest way to see what ThreatFusionAI does is to run a search. Paste any hash, IP, domain or CVE and you'll get the full report, the connected indicators and the actor attribution in one pass.
What you'll see
  • • Verdicts from multiple antivirus engines
  • • The connected IOC graph you can click through
  • • Ranked threat actors based on ATT&CK overlap
Next step
Start with a free search, no card needed. Check the plans if you need more volume.

Security check

Confirm you're human to continue.