Know your exposure.Conoce tu exposición.Act on evidence.Actúa con evidencia.

Volkano.io watches your company's domains, email addresses, IPs and URLs for leaks, ransomware and exploited vulnerabilities, and alerts you with the source of every finding. When a case calls for more, our specialists investigate it with you.Volkano.io vigila los dominios, correos, IP y URL de tu empresa frente a filtraciones, ransomware y vulnerabilidades explotadas, y te avisa con la fuente de cada hallazgo. Cuando el caso lo pide, nuestros especialistas lo investigan contigo.

Create accountCrear cuenta See how it worksVer cómo funciona

Volkano.ioAcme Security OperationsSearch domains, CVEs, actors, IOCs⌘KDemo data2AS

Overview

Updated 2 min ago · 3 sources enabled

24h7d30d

Current findings123 new this week

Monitored assets87 active · every 3 days

Open incidents21 investigating

Intelligence sources3Official · aggregator · user

Correlated activityLast 30 days, by module

Monitoring
Exposure
Identity
Software / CVE
Incidents

CVE-2026-3184 added to KEV

Open incidents2

INC-2407Investigating

VPN identity and infrastructure reviewSecurity Operations

Opened
Triage
Investigate
Contain

INC-2398Contained

FortiOS remediation validationInfrastructure

Opened
Triage
Investigate
Contain

Live intelligence

Monitoring matchacme.com matched a current evidence recordMy Exposure · just now
IOCvpn.acme.com present in preserved IOC contextIOC Intelligence · exact match
KEVCVE-2026-3184 · Fortinet FortiOSCISA KEV · official reference · EPSS 0.82
Ransomware claimAkira claim concerning Arcus MediaRansomLook · aggregator · does not confirm a breach

Monitored scopeNext run in 3 days

acme.comDomain3 matches

vpn.acme.comURL1 match

security@acme.comEmail2 matches

Recreation of the Volkano.io workspace with demo data.

Platform · subscriptionPlatform

Monitor your domains, email addresses, IPs and URLs, check threat intelligence and manage incidents in one place. Monthly plans from US$29.

Explore

Privacy & LPDPData protection

We help you comply with El Salvador's Personal Data Protection Law (LPDP): ARCO-POL requests, procedures, data security and evidence for every response.

ARCO-POL rights

AccessKnow whether personal data is processed and access it.

Explore

Specialist engagementProfessional services

Penetration testing, investigations and advisory delivered by our specialists, with the scope agreed before work begins.

Delivered by specialistsEach engagement is quoted to its scope. It is work done by people, not a platform feature.

Explore

WorkstationTHREAT INTELLIGENCE / Global Map

Geographic Intelligence

DatasetRansomwarePeriod30dCountryAllActorAll

Illustrative distribution · demo data

Structured geography of mentioned organizations; it does not attribute attacker origin.

WorkstationTHREAT INTELLIGENCE / Live Feed

Activity · 30 days

Recent intelligence stream

CLAIM

Ransomware claim observed

Arcus Media · reference preserved from an aggregator

Observed claim; does not confirm a breachAkiraUnited StatesMediaaggregatormedium

IOC

Indicator in preserved context

hash · ba7f3d92a20d…2d4b8e

Illustrative campaignRansomLookaggregatormedium

CVE

CVE added to KEV

Fortinet · FortiOS · official reference

Evidence-prioritized vulnerabilityCISA KEVofficialEPSS 82.00%

WorkstationTHREAT INTELLIGENCE / Threat Actors

Akiraransomware

First seen: Mar 1, 2023
Technique: T1486 · Data Encrypted for Impact
Observed countries: United States
Industries: Media
Source: RansomLook · reliability B

WorkstationEXPOSURE & MONITORING / Identity Exposure

Identity Exposure

Track and protect your personal and organizational digital footprint

Email exposure scan

security@acme.comScan email

StatusActive

FrequencyEvery 3 days

Findings2

Exposure report

Public breach corpusHighCredentials 2 · Identity 1 · Metadata 1

A preserved public reference contains an address matching the preview identity.

Date: 2026-08-14 · 1 record · 4 fields

Emailsecurity@acme.com

Usernamesecurity-team

Password hash••••••••••••masked

WorkstationEXPOSURE & MONITORING / My Exposure

My Exposure

StatusAssetMatched intelligenceType

newacme.comRansomware claimstrong

Why it matched

The monitored organization name appears in an observed ransomware claim.

Asset: acme.com
Evidence: 1 · Ransomware claim

What it does not prove

The match does not by itself confirm infection, compromise, or breach.

WorkstationINVESTIGATIONS / Domain Intelligence

acme.com

Domain age11773d

RegistrarExample Registrar, Inc.

Infrastructure records

A203.0.113.42

AAAA2001:db8::42

MX10 mail.acme.com

NSns1.example.net

TXTv=spf1 include:_spf.example.net -all

WorkstationINVESTIGATIONS / URL Risk Analysis

https://vpn.acme.com/

Suspicious62/100 · Risk score

Effective URL: https://vpn.acme.com/login
IP: 203.0.113.42
Server: nginx
Status: 200
Country: US

WorkstationINVESTIGATIONS / IP Reputation

203.0.113.42

34%Abuse confidence

Reports: 7
Usage: Data Center / Web Hosting / Transit
ISP: Example Network Services
Domain: edge.acme.com

REPUTATION34% abuse confidence from preserved provider context

NETWORKPublic routed address · hosting classification

REPORTS7 historical reports · analyst review recommended

Shared infrastructure203.0.113.42

WorkstationOPERATIONS / Incident Management

Incident Workspace

INC-2407VPN identity and infrastructure review

Correlate the preserved identity exposure with the monitored VPN endpoint before containment decisions.

High · Owner: Security Operations

OpenInvestigatingContainedResolved

Recommended actions

Verify the affected identity

Review VPN authentication logs

Preserve source references

Latest update

Evidence references were added to INC-2407.

WorkstationOPERATIONS / AI Advisor

AI Cyber Advisor

49 remaining / 50 credits

Selected context

Identity exposuresecurity@acme.com

Monitored URLvpn.acme.com

ClaimAkira · Arcus Media

Executive summaryAssess evidencePotential impactDefensive actions

Prioritize the risk and immediate actions for this asset.

This analysis uses AI Advisor credits.Ask with selected context

Threat intelligence. Ransomware postings, actors, indicators and vulnerabilities in one stream, each with its source.Recreated Volkano.io views · sample data · not a live recording

Interactive product previewSample data

Loading the preview

Professional services

When the case needs specialists, not just a tool.

Penetration testing, investigations and advisory delivered by our team. We agree the scope and the deliverable with you before we start, and quote to what you need.

Delivered by specialists under an agreed scopeIt is work done by people, not an automated platform feature. Scenes are illustrative, with fictitious data.

Tell us about your case

View service

Security assessments & offensive testingIllustrative scene · synthetic data

Authorized penetration testing, red team exercises, and attack-path validation for web, API, cloud, identity, and digital asset environments.

View service

Question bounded
Evidence preserved
Analyst reviewed
Finding delivered

Pricing

Clear plans,
limits in plain sight.

Plans cover the platform. Each one shows how many assets it watches, how often it checks them and how many lookups it includes per month. You can start with free access, subject to approval.

Free Access

Try the real product with reduced limits, after a manual review.

$0Free

Subject to manual approval

Request access

Scheduled monitoring: 1 asset · every 30 days
My Exposure: Included
Identity Exposure: 1 analysis/month
Domain + URL investigations: 1 each/month
IP / SOC Intelligence: 1 query/month
Threat Intelligence Workspace: Included
Software Inventory + CVE: 3 inventory items
AI Advisor: 1 credit/month

Starter

For professionals and small teams who want their key assets checked every week.

$29/month

Choose plan

Scheduled monitoring: 3 assets · every 7 days
My Exposure: Included
Identity Exposure: 5 analyses/month
Domain + URL investigations: 5 each/month
IP / SOC Intelligence: —
Threat Intelligence Workspace: Included
Software Inventory + CVE: 10 inventory items
AI Advisor: 5 credits/month

Professional

Recommended

For teams that investigate, prioritize and manage incidents, with checks every 3 days.

$99/month

Choose plan

Scheduled monitoring: 15 assets · every 3 days
My Exposure: Included
Identity Exposure: 50 analyses/month
Domain + URL investigations: 50 each/month
IP / SOC Intelligence: 50 queries/month
Threat Intelligence Workspace: Included
Software Inventory + CVE: 100 inventory items
AI Advisor: 50 credits/month

Business

For organizations with more assets to watch, daily checks and a year of history.

$249/month

Choose plan

Scheduled monitoring: 50 assets · every 24h / daily
My Exposure: Included
Identity Exposure: 250 analyses/month
Domain + URL investigations: 250 each/month
IP / SOC Intelligence: 250 queries/month
Threat Intelligence Workspace: Included
Software Inventory + CVE: 500 inventory items
AI Advisor: 250 credits/month

Compare plansCompare capabilities, limits, and monitoring frequency.

Capability	Free Access	Starter	Professional	Business
Protection & exposure
My Exposure	Included	Included	Included	Included
Identity Exposure	1 analysis/month	5 analyses/month	50 analyses/month	250 analyses/month
Monitored assets	1 asset	3 assets	15 assets	50 assets
In-app alerts	Included	Included	Included	Included
Investigation
Domain Intelligence	1 query/month	5 queries/month	50 queries/month	250 queries/month
URL Analysis	1 analysis/month	5 analyses/month	50 analyses/month	250 analyses/month
IP / SOC Intelligence	1 query/month	—	50 queries/month	250 queries/month
Dark Web investigation	Included	Included	Included	Included
Vulnerability investigation	1 query/month	5 queries/month	50 queries/month	250 queries/month
Threat Intelligence
Threat Intelligence Workspace	Included	Included	Included	Included
Global Map + Live Feed	Included	Included	Included	Included
Ransomware + Threat Actors	Included	Included	Included	Included
Vulnerabilities + IOC Intelligence	Included	Included	Included	Included
Sources + Evidence	Included	Included	Included	Included
Software & incidents
Software Inventory + CVE	3 inventory items	10 inventory items	100 inventory items	500 inventory items
CVE exposure correlation	Included	Included	Included	Included
Incident Workspace	1 new incident/month	—	50 new incidents/month	250 new incidents/month
AI
AI Advisor	1 credit/month	5 credits/month	50 credits/month	250 credits/month
Operations
Monitorable asset types	Email · Domain · IP · URL	Email · Domain · URL	Email · Domain · IP · URL	Email · Domain · IP · URL
Shortest monitoring cadence	Every 30 days	Every 7 days	Every 3 days	Every 24h / Daily
Email exposure alerts	Included	Included	Included	Included
Approval	Manual approval required	—	—	—

Protection & exposure

My ExposureIncluded

Identity Exposure50 analyses/month

Monitored assets15 assets

In-app alertsIncluded

Investigation

Domain Intelligence50 queries/month

URL Analysis50 analyses/month

IP / SOC Intelligence50 queries/month

Dark Web investigationIncluded

Vulnerability investigation50 queries/month

Threat Intelligence

Threat Intelligence WorkspaceIncluded

Global Map + Live FeedIncluded

Ransomware + Threat ActorsIncluded

Vulnerabilities + IOC IntelligenceIncluded

Sources + EvidenceIncluded

Software & incidents

Software Inventory + CVE100 inventory items

CVE exposure correlationIncluded

Incident Workspace50 new incidents/month

AI

AI Advisor50 credits/month

Operations

Monitorable asset typesEmail · Domain · IP · URL

Shortest monitoring cadenceEvery 3 days

Email exposure alertsIncluded

Approval—

Scheduled monitoring is limited by the asset count and cadence included in your plan. Manual investigations keep their monthly allowance.

EnterpriseLet's talk

Data protection · El Salvador

LPDP compliance, put into practice.

ARCO-POL requestREQ-0412

ReceivedClassifiedIn reviewAnsweredFiled

Data subject→ privacy@acme.com

Request to access my personal data

I would like to know which of my personal data you process and receive a copy…

Received 10:14

Identity: Verified against the request
Right requested: Access

ARCOPOL

Request complete

Processing involved

PrivacyReviewed
LegalIf in scope
SecurityReviewed

Response delivered

Copy of the data processed
Purposes and recipients
Agreed channel · basis recorded

Request record

REQ-0398RectificationFiled
REQ-0405OppositionFiled
REQ-0412AccessFiled

Traceable

Illustrative example · synthetic request

A request arrives
A data subject exercises an ARCO-POL right through the channel the organization has published.
ARCO-POL operations
Identify and classify
Identity is verified, the right is classified and an incomplete request is documented rather than lost.
ARCO-POL operations · procedures
Review what is involved
The processing behind the request is reviewed: privacy first, legal professionals and security when the scope requires them.
Privacy + legal · cybersecurity
Answer, documented
The response is prepared and delivered through the agreed channel, with its basis recorded.
LPDP compliance
Keep the evidence
Request, decision and response stay traceable for the organization and, where applicable, for the DPO function.
Compliance evidence · DPO where applicable

Each engagement is scoped to the organization, its processing activities, and its applicable obligations. Privacy · Legal professionals · Cybersecurity · LPDP · ARCO-POL rights · Security safeguards

Start with Volkano.io

Start by knowing what is exposed today.

Create your account and start monitoring your domains, email addresses, IPs and URLs. If you need an assessment, an investigation or LPDP support, talk to our team.

Create account Talk to a specialist

San Salvador, El SalvadorDelaware, USAinfo@volkano.io +1 (800) 316-6396

WorkstationTHREAT INTELLIGENCE / Global Map

Geographic Intelligence

DatasetRansomwarePeriod30dCountryAllActorAll

Illustrative distribution · demo data

Structured geography of mentioned organizations; it does not attribute attacker origin.

WorkstationTHREAT INTELLIGENCE / Live Feed

Activity · 30 days

Recent intelligence stream

CLAIM

Ransomware claim observed

Arcus Media · reference preserved from an aggregator

Observed claim; does not confirm a breachAkiraUnited StatesMediaaggregatormedium

IOC

Indicator in preserved context

hash · ba7f3d92a20d…2d4b8e

Illustrative campaignRansomLookaggregatormedium

CVE

CVE added to KEV

Fortinet · FortiOS · official reference

Evidence-prioritized vulnerabilityCISA KEVofficialEPSS 82.00%

WorkstationTHREAT INTELLIGENCE / Threat Actors

Akiraransomware

First seen: Mar 1, 2023
Technique: T1486 · Data Encrypted for Impact
Observed countries: United States
Industries: Media
Source: RansomLook · reliability B

WorkstationEXPOSURE & MONITORING / Identity Exposure

Identity Exposure

Track and protect your personal and organizational digital footprint

Email exposure scan

security@acme.comScan email

StatusActive

FrequencyEvery 3 days

Findings2

Exposure report

Public breach corpusHighCredentials 2 · Identity 1 · Metadata 1

A preserved public reference contains an address matching the preview identity.

Date: 2026-08-14 · 1 record · 4 fields

Emailsecurity@acme.com

Usernamesecurity-team

Password hash••••••••••••masked

WorkstationEXPOSURE & MONITORING / My Exposure

My Exposure

StatusAssetMatched intelligenceType

newacme.comRansomware claimstrong

Why it matched

The monitored organization name appears in an observed ransomware claim.

Asset: acme.com
Evidence: 1 · Ransomware claim

What it does not prove

The match does not by itself confirm infection, compromise, or breach.

WorkstationINVESTIGATIONS / Domain Intelligence

acme.com

Domain age11773d

RegistrarExample Registrar, Inc.

Infrastructure records

A203.0.113.42

AAAA2001:db8::42

MX10 mail.acme.com

NSns1.example.net

TXTv=spf1 include:_spf.example.net -all

WorkstationINVESTIGATIONS / URL Risk Analysis

https://vpn.acme.com/

Suspicious62/100 · Risk score

Effective URL: https://vpn.acme.com/login
IP: 203.0.113.42
Server: nginx
Status: 200
Country: US

WorkstationINVESTIGATIONS / IP Reputation

203.0.113.42

34%Abuse confidence

Reports: 7
Usage: Data Center / Web Hosting / Transit
ISP: Example Network Services
Domain: edge.acme.com

REPUTATION34% abuse confidence from preserved provider context

NETWORKPublic routed address · hosting classification

REPORTS7 historical reports · analyst review recommended

Shared infrastructure203.0.113.42

WorkstationOPERATIONS / Incident Management

Incident Workspace

INC-2407VPN identity and infrastructure review

Correlate the preserved identity exposure with the monitored VPN endpoint before containment decisions.

High · Owner: Security Operations

OpenInvestigatingContainedResolved

Recommended actions

Verify the affected identity

Review VPN authentication logs

Preserve source references

Latest update

Evidence references were added to INC-2407.

WorkstationOPERATIONS / AI Advisor

AI Cyber Advisor

49 remaining / 50 credits

Selected context

Identity exposuresecurity@acme.com

Monitored URLvpn.acme.com

ClaimAkira · Arcus Media

Executive summaryAssess evidencePotential impactDefensive actions

Prioritize the risk and immediate actions for this asset.

This analysis uses AI Advisor credits.Ask with selected context

Threat intelligence. Ransomware postings, actors, indicators and vulnerabilities in one stream, each with its source.Recreated Volkano.io views · sample data · not a live recording

Pricing

Clear plans,
limits in plain sight.

Plans cover the platform. Each one shows how many assets it watches, how often it checks them and how many lookups it includes per month. You can start with free access, subject to approval.

Free Access

Try the real product with reduced limits, after a manual review.

$0Free

Subject to manual approval

Request access

Scheduled monitoring: 1 asset · every 30 days
My Exposure: Included
Identity Exposure: 1 analysis/month
Domain + URL investigations: 1 each/month
IP / SOC Intelligence: 1 query/month
Threat Intelligence Workspace: Included
Software Inventory + CVE: 3 inventory items
AI Advisor: 1 credit/month

Starter

For professionals and small teams who want their key assets checked every week.

$29/month

Choose plan

Scheduled monitoring: 3 assets · every 7 days
My Exposure: Included
Identity Exposure: 5 analyses/month
Domain + URL investigations: 5 each/month
IP / SOC Intelligence: —
Threat Intelligence Workspace: Included
Software Inventory + CVE: 10 inventory items
AI Advisor: 5 credits/month

Professional

Recommended

For teams that investigate, prioritize and manage incidents, with checks every 3 days.

$99/month

Choose plan

Scheduled monitoring: 15 assets · every 3 days
My Exposure: Included
Identity Exposure: 50 analyses/month
Domain + URL investigations: 50 each/month
IP / SOC Intelligence: 50 queries/month
Threat Intelligence Workspace: Included
Software Inventory + CVE: 100 inventory items
AI Advisor: 50 credits/month

Business

For organizations with more assets to watch, daily checks and a year of history.

$249/month

Choose plan

Scheduled monitoring: 50 assets · every 24h / daily
My Exposure: Included
Identity Exposure: 250 analyses/month
Domain + URL investigations: 250 each/month
IP / SOC Intelligence: 250 queries/month
Threat Intelligence Workspace: Included
Software Inventory + CVE: 500 inventory items
AI Advisor: 250 credits/month

Compare plansCompare capabilities, limits, and monitoring frequency.

Capability	Free Access	Starter	Professional	Business
Protection & exposure
My Exposure	Included	Included	Included	Included
Identity Exposure	1 analysis/month	5 analyses/month	50 analyses/month	250 analyses/month
Monitored assets	1 asset	3 assets	15 assets	50 assets
In-app alerts	Included	Included	Included	Included
Investigation
Domain Intelligence	1 query/month	5 queries/month	50 queries/month	250 queries/month
URL Analysis	1 analysis/month	5 analyses/month	50 analyses/month	250 analyses/month
IP / SOC Intelligence	1 query/month	—	50 queries/month	250 queries/month
Dark Web investigation	Included	Included	Included	Included
Vulnerability investigation	1 query/month	5 queries/month	50 queries/month	250 queries/month
Threat Intelligence
Threat Intelligence Workspace	Included	Included	Included	Included
Global Map + Live Feed	Included	Included	Included	Included
Ransomware + Threat Actors	Included	Included	Included	Included
Vulnerabilities + IOC Intelligence	Included	Included	Included	Included
Sources + Evidence	Included	Included	Included	Included
Software & incidents
Software Inventory + CVE	3 inventory items	10 inventory items	100 inventory items	500 inventory items
CVE exposure correlation	Included	Included	Included	Included
Incident Workspace	1 new incident/month	—	50 new incidents/month	250 new incidents/month
AI
AI Advisor	1 credit/month	5 credits/month	50 credits/month	250 credits/month
Operations
Monitorable asset types	Email · Domain · IP · URL	Email · Domain · URL	Email · Domain · IP · URL	Email · Domain · IP · URL
Shortest monitoring cadence	Every 30 days	Every 7 days	Every 3 days	Every 24h / Daily
Email exposure alerts	Included	Included	Included	Included
Approval	Manual approval required	—	—	—

Protection & exposure

My ExposureIncluded

Identity Exposure50 analyses/month

Monitored assets15 assets

In-app alertsIncluded

Investigation

Domain Intelligence50 queries/month

URL Analysis50 analyses/month

IP / SOC Intelligence50 queries/month

Dark Web investigationIncluded

Vulnerability investigation50 queries/month

Threat Intelligence

Threat Intelligence WorkspaceIncluded

Global Map + Live FeedIncluded

Ransomware + Threat ActorsIncluded

Vulnerabilities + IOC IntelligenceIncluded

Sources + EvidenceIncluded

Software & incidents

Software Inventory + CVE100 inventory items

CVE exposure correlationIncluded

Incident Workspace50 new incidents/month

AI

AI Advisor50 credits/month

Operations

Monitorable asset typesEmail · Domain · IP · URL

Shortest monitoring cadenceEvery 3 days

Email exposure alertsIncluded

Approval—

Scheduled monitoring is limited by the asset count and cadence included in your plan. Manual investigations keep their monthly allowance.

EnterpriseLet's talk

Know your exposure.Conoce tu exposición.Act on evidence.Actúa con evidencia.

Clear plans,limits in plain sight.

Protection & exposure

Investigation

Threat Intelligence

Software & incidents

AI

Operations

A request arrives

Identify and classify

Review what is involved

Answer, documented

Keep the evidence

Start by knowing what is exposed today.

Clear plans,limits in plain sight.

Protection & exposure

Investigation

Threat Intelligence

Software & incidents

AI

Operations

A request arrives

Identify and classify

Review what is involved

Answer, documented

Keep the evidence

Start by knowing what is exposed today.

Clear plans,
limits in plain sight.

Clear plans,
limits in plain sight.