We maintain one of the largest repositories of actionable security information in the world. By providing data to those who need it, we equip our partners to become more secure.
Investigation Support
Shadowserver provides CSIRTs and law enforcement agencies around the world with the insights and capabilities required to conduct effective local, regional, or international security investigations. These partners trust us to provide relevant information, equip them to interpret it effectively, work discreetly in sensitive situations, and help them acquire the evidence to build a successful case.
Cybercrime Prevention
We work with our partners to identify malicious activity, protect victims and take down global cybercrime infrastructures and networks. We focus on cases that involve criminal abuse of the Internet’s infrastructure: including botnets, denial of service attacks, malware, compromised servers, mass infections, and much more.
International Resources
Shadowserver has professional relationships with investigators all around the world, as well as the resources to bring actionable intelligence about international cybercrime out into the light. If specialist infrastructure or custom approaches are required, we can provide effective technical and operational solutions in the jurisdictions where our partners need them.
News & Insights
Shadowserver works in confidence and only does PR when our partners explicitly want publicity for our joint success stories. Follow reporting on the latest cybersecurity news. Find out how to protect yourself from emerging threats. Get insights on best practices for network and Internet security. Learn what Shadowserver is doing to help.
Common Questions
At Shadowserver, we believe in transparency and work to promote a culture of sharing across the Internet security community. But we aren’t reckless. The data we collect is protected. We make it available on a need-to-know basis, whether you’re an end-user or a national CSIRT. Full answer »
Where can I find your statistics?
Shadowserver provides detailed information about detected events on your networks once you opt-in and subscribe to our free daily reports. You can find more general high level information about different potential types of threats by visiting our Statistics page.
Similarly to organizations such as Shodan and Censys, Shadowserver performs daily port scanning of the entire IPv4 Internet, from computers physically located in the USA, where port scanning is not prevented by Federal law. Full answer »
Help us make the Internet more secure
The Shadowserver Foundation offers all services free of charge, for public benefit. We don’t sell data. Our funding comes from sponsorships, grants, and charitable donations.
Get support for your investigation
Personal engagement from a trustworthy partner with a proven track record. Deep insight through high-quality information. To get support from Shadowserver for your investigations, please get in touch.
Other Services
Data Collection
Our data collection services »
Network Reporting
We send daily custom reports to over 4600 subscribers, helping network owners, national governments, Fortune 500 companies, and others identify their security exposures.