Collection
Internet-scale source coverage
Void Runner and Explorator collect dark web, infrastructure, and C2 signal before it becomes commoditized reporting.


Capabilities
Dendrite's capabilities are designed as independent data pipelines that become more powerful when correlated across dark web, C2 infrastructure, leaked credentials, AI workflows, and legacy feeds.
Capability model
Dendrite's capability set starts with proprietary extraction techniques across the dark, deep, and surface web, giving customers unprecedented clarity into resources, infrastructure, and user communications. Once enriched, each record undergoes a rigorous transformation process where it becomes a highly refined intelligence product, pre-correlated to each of our other data sources.
Each capability represents an independent data process and a standalone data product that can be consumed independently. However, synchronized deployment creates an ontology unlike any other, optimized for both human and agentic AI knowledge and analysis workflows.
Capabilities
Start with the capability that matches your workflow, then expand into the metrics, delivery paths, and related data sources that support it.
Dark Web Intelligence
Active collection, characterization, and correlation of dark web services, users, communication hubs, and historical records.
Command & Control Intelligence
Perpetual enumeration, fingerprinting, and monitoring of C2 infrastructure connected to malware campaigns and threat actor activity.
Cryptocurrency Data Intelligence
Cryptocurrency data correlated to wallets, services, dark web activity, infrastructure, and investigation-ready entity context.
Identity Exposure Intelligence
A homogenized breach and credential intelligence set correlated to infrastructure, services, users, and organizational risk context.
Training and Grounding Data
Proprietary, high-confidence security datasets built for grounding, RAG, GraphRAG, tool use, model training, and verticalized AI workflows.
Collaborative Intelligence Workspace
A graphical workspace for exploring Dendrite and supported third-party data, coordinating investigations, and sharing intelligence.
Grouping logic
Teams can start with a data source, an analyst workflow, or a delivery path without losing access to the broader intelligence graph.
Collection
Void Runner and Explorator collect dark web, infrastructure, and C2 signal before it becomes commoditized reporting.
Correlation
Leaked Credentials and the core correlation engine connect users, organizations, services, credentials, and historical records.
Operationalization
The Unified Web Platform and AI/ML dataset paths turn correlated intelligence into team workflows, exports, and model grounding data.
Access
Talk with Dendrite about the data source, delivery path, and access model that best fits your team.