ThreatFusionAI™
HomeSearchDarkwebBlogs
Capabilities
  • MITRE ATT&CK MappingObserved techniques, tactic coverage and candidate threat actors for a sample.
  • Threat Hunting & IOC Cross-ReferenceStart from one indicator and pivot through everything connected to it.
  • Dark Web & External Threat ContextCredential exposure, leaked data and access brokering, tied back to the platform.
  • SOC OperationsEnrich SIEM and EDR alerts before the block-or-monitor call, by API or by hand.
Investigation tools
  • IOC Cross-ReferencePivot through connected indicators as a graph
  • ATT&CK Matrix441 techniques across 14 tactics, browsable
  • ATT&CK AttributionOverlay a sample and rank candidate actors
  • Vulnerability CatalogueCVEs by vendor and product
How it works
  • Malware AnalysisFour steps, without switching between tools
  • AI CorrelationCorrelation, prioritisation and an analyst assistant
  • What Is Threat IntelligenceFrom atomic indicators to something actionable
  • What Your Team GetsTraditional investigation against this one
Start hereOne box, seven indicator typesPaste a hash, IP, domain, URL, CVE, email or phone number and follow what it connects to. Hover anything on the left for detail.
  • 2.3M+ malware samples analysed
  • Millions of relationships mapped
  • Thousands of threat actors tracked
Open search→
Indicators
  • File HashAV verdicts, behaviour, extracted IOCs, related samples
  • IP AddressReputation, geolocation, connected malware and domains
  • DomainReputation, related hosts, malware relationships
  • URLMalicious website checker for phishing and payload links
More indicators
  • CVECVSS, EPSS, KEV status and exploit availability
  • EmailDark web exposure — masked, full records on Enterprise
  • PhoneDark web exposure — masked, full records on Enterprise
Where to start
  • Dark Web SearchCheck a phone or email against the breach corpus
  • Unified SearchOne box, all seven types, auto-detected
  • IOC Cross-ReferenceOnce you have a result, follow it outward
  • Vulnerability CatalogueBrowse by vendor when you have no CVE id
Every lookupIs also a REST callThe same enrichment runs token-authenticated inside a SOAR playbook, with no analyst in the loop. Hover an indicator type on the left for what it returns.
  • Token-authenticated REST, one call per indicator
  • The same data the browser lookup shows
  • Rate limits and quotas per plan
See the API→
Live threats
  • Threat MapMalicious IPs worldwide, updated every minute
  • CountriesThreat activity for every country
  • IOC FeedNew IPs, domains, URLs and hashes as they are reported
  • TrendingListed by the most feeds in the last 24 hours
Campaigns
  • OverviewMalware and ransomware at a glance
  • MalwareFamilies building the most new infrastructure
  • RansomwareVictims map and the groups behind them
  • Ransomware VictimsEvery leak-site post, newest first
  • Breaches & IncidentsWho was attacked, when and how
  • Is My Company Listed?Search leak sites for a company or domain
Stay informed
  • Weekly DigestThe week in malware and ransomware
  • Your AlertsSign inFollow a family, country or network
LiveThe threat mapMalicious infrastructure worldwide, refreshed every minute. Hover anything on the left for detail.
  • Command-and-control, malware, phishing and attackers
  • Countries, states and networks
  • 7-day replay
Open the map→
Developers
  • API OverviewEndpoints, authentication and rate limits
  • API ReferenceSign inEvery endpoint, with request and response shapes
  • API StatusSign inYour usage against your plan's limits
Reading
  • Threat ResearchWrite-ups and analysis from Craw Security
  • Frequently Asked QuestionsWhat the platform does and does not claim
Plans
  • PricingIndividual and team tiers
  • Who Uses ItFinance, healthcare, government, MSSPs and more
For developersAutomate the whole lookupEvery enrichment on this site is reachable as a token-authenticated REST call, so the same work can run inside a playbook with no analyst in the loop.
  • One call per indicator
  • The same data the browser shows
  • Quotas visible on your account
Start with the overview→
Company
  • About UsWho builds this, and why
  • Why UsWhat this does that a stack of portals does not
  • Contact UsTalk to an analyst about an engagement
Trust
  • Privacy PolicyWhat is collected and what is done with it
  • Terms & ConditionsAcceptable use and the terms of service
ThreatFusionAI™Built by Craw SecurityA threat intelligence platform built by people who run investigations, for people who run investigations. Hover anything on the left for detail.
  • 2.3M+ malware samples analysed
  • Millions of relationships mapped
  • Thousands of threat actors tracked
About the company→
Sign in

Terms & Conditions

Last updated: November 2, 2026

1. Acceptance of Terms

ThreatFusionAI™ is operated by Craw Cyber Security Private Limited, Plot 4, Lane 2, Kehar Singh Estate, Westend Marg, Saidulajab, New Delhi 110030, India (“we”, “us”). By creating an account, accessing our website, or using the ThreatFusionAI™ API, you agree to be bound by these Terms & Conditions and our Privacy Policy. If you do not agree, do not use the service.

2. Eligibility & Account Responsibilities

  • You must provide accurate registration and profile information and keep it up to date.
  • You are responsible for maintaining the confidentiality of your account credentials and API key, and for all activity under your account.
  • You must notify us promptly of any unauthorized use of your account or suspected key compromise.

3. Use of the Service

You agree to use ThreatFusionAI™ only for lawful purposes, including legitimate threat intelligence, security research, and defensive cybersecurity activities. You may not:

  • Use the platform to plan, facilitate, or conduct unauthorized access, attacks, or other malicious activity against systems you do not own or have explicit permission to test.
  • Attempt to circumvent rate limits, resell API access without authorization, or reverse-engineer the platform.
  • Upload or submit content that is unlawful, infringing, or that you do not have the right to share.

4. API Access & Rate Limits

API access is provided under your subscription plan's daily request limits and usage terms. We may throttle, suspend, or revoke API keys that exceed fair-use limits, are used abusively, or violate these Terms. Usage and quota details are visible on your API dashboard.

5. Plans, Payments & Renewal

Certain features require a paid plan. Plan tiers, prices and included quotas are described on our pricing page; prices may change with reasonable notice, and a change applies from your next renewal.

  • Payments are made to Craw Cyber Security Private Limited, by card (processed by Stripe) or by UPI, netbanking or wallet (processed by Razorpay). We never see or store your full card details.
  • Monthly plans renew automatically until you turn auto-renewal off on Billing & plan; turning it off ends the plan at the end of the period paid for. You may instead pay for a single month, which does not renew.
  • Upgrades take effect immediately and the difference for the rest of the period is charged at once. Downgrades take effect immediately and the unused part of the higher plan becomes credit on later payments.
  • Refunds follow our Cancellation & Refund Policy; delivery of a plan is described in our Shipping & Delivery Policy.

6. Intellectual Property

The ThreatFusionAI™ platform, branding, and underlying technology are owned by us or our licensors and protected by intellectual property laws. Threat data you submit remains yours, but you grant us a license to process it for the purpose of providing the service, including aggregated or anonymized use to improve detection quality.

7. Termination

We may suspend or terminate your access if you violate these Terms, misuse the service, or pose a security risk to the platform or other users. You may stop using the service and request account deletion at any time.

8. Disclaimer & Limitation of Liability

The service is provided "as is" without warranties of any kind. Threat intelligence data is provided for informational purposes and should not be the sole basis for critical security decisions. To the maximum extent permitted by law, ThreatFusionAI™ is not liable for indirect, incidental, or consequential damages arising from use of the service.

9. Governing Law

These Terms are governed by applicable local law without regard to conflict-of-law principles, and any disputes will be resolved in the competent courts of that jurisdiction, unless otherwise required by law.

10. Changes to These Terms

We may revise these Terms from time to time. Continued use of the service after changes take effect constitutes acceptance of the revised Terms. Material changes will be communicated via the platform or by email.

11. Contact Us

Questions about these Terms can be sent to Craw Cyber Security Private Limited at support@threatfusionai.com, by phone on +91 951-380-5401, or via our Contact page.

ThreatFusionAI™
By Craw Security

AI-Powered unified Threat Intelligence & Cyber Defense Platform. Collect, correlate, analyze, and act on threats in real time.

Platform
  • MITRE ATT&CK Mapping
  • Threat Hunting & IOC Cross-Reference
  • Dark Web & External Threat Context
  • SOC Operations
  • Plans
  • API Overview
About us
  • About
  • Why Us
  • Craw Security
  • Privacy Policy
  • Terms & Conditions
  • Cancellation & Refunds
  • Shipping & Delivery
Connect
support@threatfusionai.com
+91 951-380-5401
Plot no. 4, Lane no. 2,Kehar Singh Estate, Westend Marg, Behind Saket Metro Station, Saidulajab, New Delhi - 110030
Threat Intel Newsletter
Stay ahead of emerging threats

Get new research, advisories, and platform updates delivered to your inbox. No spam — unsubscribe anytime.

© 2026 ThreatFusionAI™ by Craw Cyber Security Pvt Ltd. All Rights Reserved.
Demo
ThreatFusionAI™ Product Walkthrough
The fastest way to see what ThreatFusionAI does is to run a search. Paste any hash, IP, domain or CVE and you'll get the full report, the connected indicators and the actor attribution in one pass.
What you'll see
  • • Verdicts from multiple antivirus engines
  • • The connected IOC graph you can click through
  • • Ranked threat actors based on ATT&CK overlap
Next step
Start with a free search, no card needed. Check the plans if you need more volume.

Security check

Confirm you're human to continue.