Searchlight Threat
Dark web threat intelligence that maps attacker activity to your organization and sends alerts with the actor, source and MITRE ATT&CK mapping.
How MSPs use it: resell or bundle it for clients
About
Searchlight Threat, formerly Cerberus, collects continuously from the clear, deep and dark web, including forums, marketplaces, leak sites and encrypted channels, and keeps that data searchable after a source goes offline. It maps attacker activity to your organization, credentials and brand, and sends alerts with the actor, source and MITRE ATT&CK mapping into SIEM, SOAR and ticketing tools. Analysts can search fifteen years of activity, read actor profiles and reach Tor and I2P through the in-browser Stealth Browser. It also flags traffic between your network and the dark web. Searchlight says law enforcement and government agencies use the same dataset.
AI & Automation
Cerberus is a dark web investigation tool built in collaboration with law enforcement.
Selling this to clients
Clients pay for this one: MSPs resell it or bundle it into a managed service rather than running it for themselves.
- Dark web monitoring for MSPs: 30 products comparedBuyer's guide for this category, with how to package it and what clients hear · 9 min read
- Quote and bundle it in your proposals with SalesbuildrService catalog, live distributor pricing, quotes straight into your PSA.
Searchlight Cyber
3 products · View profile
Medium · 50-200 employees · 9y in business
Updated Oct 19, 2026