Investigation and intelligence software

Investigate criminal activity at the source

Criminals rely on staying out of sight.

Searchlight securely puts investigators inside the dark web and encrypted apps like Telegram – so the evidence in front of your team is real, current, & evidential.

Background Gradient

Proven investigation tool

Supporting serious organized crime investigations since 2017

Searchlight Threat & our LEA-only capabilities have been used in some of the biggest cases involving online criminal activity.

This includes groups that are dealing arms, drugs, and CSEA, or are connected to hostile intelligence, ransomware gangs, organized crime, and human trafficking.

Background Gradient

First-hand access to
intelligence

Relying on slow RFI processes and third-party analysts means the picture you get is already out of date. Searchlight gives investigators direct, real-time access to 15+ years of live and archived intelligence across the clear, deep, and dark web. The moment something happens, your team can see it.

Built to support the way
you work

Unlike other investigation tools built for enterprise users, Searchlight was built from day one for law enforcement, with an intuitive interface officers can use without specialized training. Time goes directly into investigations, not battling against hard to use tools.

Red-tape free access to the
dark web

Access to the dark web shouldn't take an IT ticket. Isolated machines and lengthy approvals burn through time investigators don't have. Searchlight runs directly in your browser – no installation, no red tape. Your team can go from lead to evidence the same day.

Press

Searchlight Cyber Partners With TRM Labs to Bring Enhanced Cryptocurrency Analysis to its Dark Web Investigation Platform

Press

Searchlight Cyber Supports the U.S. Government Takedown of the BidenCash Dark Web Marketplace

Press

Searchlight Cyber Launches New Dark Web Marketplace Module for Law Enforcement, Government, and Security Professionals

Press

Searchlight Cyber Report: Ransomware Groups Claimed Record Number of Victims in 2025 with 30% Annual Increase

Blog

Enriched Actor Profiles in Cerberus

Blog

Additional tooling added to the Stealth Browser

Blog

Significant enhancements to AI Research Assistant models

Blog

Targeting Illicit Crypto Flows: Searchlight Cyber Supports Law Enforcement Takedown of AudiA6 Crypto-Mixer

Press

Searchlight Cyber Partners With TRM Labs to Bring Enhanced Cryptocurrency Analysis to its Dark Web Investigation Platform

Press

Searchlight Cyber Supports the U.S. Government Takedown of the BidenCash Dark Web Marketplace

Press

Searchlight Cyber Launches New Dark Web Marketplace Module for Law Enforcement, Government, and Security Professionals

Press

Searchlight Cyber Report: Ransomware Groups Claimed Record Number of Victims in 2025 with 30% Annual Increase

Blog

Enriched Actor Profiles in Cerberus

Blog

Additional tooling added to the Stealth Browser

Blog

Significant enhancements to AI Research Assistant models

Blog

Targeting Illicit Crypto Flows: Searchlight Cyber Supports Law Enforcement Takedown of AudiA6 Crypto-Mixer

Use Cases

Investigative use cases

Including groups that are dealing arms, drugs, and CSEA, or are connected to hostile intelligence, ransomware gangs, organized crime, and human trafficking.

Investigate the creation and distribution of indecent material on closed chat groups and the dark web. Surface high-risk posts claiming to have access to children, identify and gather intelligence on high-risk offenders, seize forums, and protect vulnerable individuals.

Get access to intelligence on cybercriminal gangs operating on encrypted chats, illicit marketplaces, and dark web forums. Monitor hacking forums, investigate 1,000+ threat actor groups, including their geolocations, motivations, victimology, and historical campaigns to disrupt their operations.

Investigate fraud, identity theft, and forgery schemes perpetrated throughout the dark web and encrypted communication apps such as Telegram, Rocket.Chat, and more.

Identify and investigate individuals and networks operating on dark web forums and encrypted chats to recruit, exploit, and profit from modern-day slavery. Surface connections between actors, monitor activity, and build the evidence needed to dismantle operations and protect victims.

Gain visibility of the most active dark web drug markets. Investigate the administrators, buyers, and sellers. Arrest individuals, or orchestrate a takedown of the market itself.

Monitor extremist forums and the distribution of radicalization material across forums, encrypted chat services, and the clear web. Track sentiment, assess threats, and build intelligence on persons of interest inciting civil unrest and disorder before they can act.

Identify dark web markets that specialize in the sale of arms, counterfeit and stolen goods, or dangerous materials. Investigate the perpetrators, monitor activity, and ensure goods never cross the border.

Investigation capabilities

From a single alias to an evidential-grade case

Collect live and archived intelligence across the dark web and Telegram

Access over 15 years of live and archived dark web intelligence from marketplaces, forums, closed Telegram chats, and leak sites. Filter by category or jurisdictional region to narrow your results, pivot from a single alias, Bitcoin address, or breached password to build a full picture of an actor's activity – including cached images of forum posts and marketplace listings, even content that's since been deleted.

explore searchlight threat

Gain instant focus on new investigations

Query our archive of more than +475 billion recaptured data points using our AI Agent to get high-context, actionable intelligence back in seconds. Surface connections between actors, build graph intelligence linking evidence together, and cut manual investigation time from days to hours.

Understand criminal activity

Act on previously unobtainable data

Go straight to the source with our dark-web-enabled virtual machine – no installation or IT approval needed, it runs directly in your browser. From there, set alerts, use our AI assistant to extract OSINT, and organize findings into shareable, evidential-grade cases.

Book a demo
Background Gradient

Empowering investigation teams worldwide

1/5

Searchlight is our 'go-to tool' for all investigations. Without Searchlight, we often wouldn’t know where to begin, given how much information is on the dark web.

Sergeant

Criminal Intelligence Division

It gives investigators a statistical overview
of marketplaces in a blink of an eye.

Senior Cybercrime Investigator

International criminal intelligence agency

Before using Searchlight [accessing the dark web] was a complex process that required us to take extensive measures to do it in a way that was safe for our officers and infrastructure. The ability to quickly do this via Searchlight using the Stealth Browser is a huge benefit both in terms of resources and peace of mind.

Lieutenant

US State Government Department

FAQ

About Searchlight Threat for Law Enforcement

Searchlight Threat gives investigators access to more than 15 years of historic archived intelligence gathered from dark web marketplaces, forums, ransomware leak sites, and encrypted chat services. All data is continuously updated and enriched by our in-house team and data partners to provide comprehensive profiles on threat actors, campaigns, malware, tooling, and vulnerabilities.

In near real-time. We continuously collect data from clear, deep, and dark web sources – including underground forums, marketplaces, and encrypted chats – using a combination of automated AI-driven technology and manual techniques. Our expert team, with backgrounds in law enforcement, cybercrime, and military intelligence, maintains access to closed groups and forums that automated tools alone can't reach. All collections are conducted in accordance with US, UK, and European law.

Searchlight Threat gives you instant visibility into what’s being shared on the dark web and closed chat services, including Telegram, even content that’s been deleted.

Searchlight Cyber holds ISO 27001, Cyber Essentials, AICPA SOC, and Crown Commercial Service Supplier accreditation and is trusted by national and international law enforcement agencies and government teams worldwide.

Investigators of all experience levels can access the platform directly from their browser – no installation, IT approval, or technical background required. The platform also supports role-based access controls and a full user audit trail to support compliance within your organization.

Request a secure briefing to discover the full range of our LEA-only capabilities to help when you’ve hit a brick wall in your investigations.

Build cases faster and bring criminals to justice

Request a secure briefing to discover the full range of our LEA-only capabilities.

Book a demo
Background Gradient