Know your exposure.Act on evidence.

Monitor exposure, investigate risk, preserve evidence, and coordinate response from one focused security workspace.

Get started See the product

Volkano.ioAcme Security OperationsSearch domains, CVEs, actors, IOCs⌘KDemo data2AS

Overview

Updated 2 min ago · 3 sources enabled

24h7d30d

Current findings123 new this week

Monitored assets87 active · every 3 days

Open incidents21 investigating

Intelligence sources3Official · aggregator · user

Correlated activityLast 30 days, by module

Monitoring
Exposure
Identity
Software / CVE
Incidents

CVE-2026-3184 added to KEV

Open incidents2

INC-2407Investigating

VPN identity and infrastructure reviewSecurity Operations

Opened
Triage
Investigate
Contain

INC-2398Contained

FortiOS remediation validationInfrastructure

Opened
Triage
Investigate
Contain

Live intelligence

Monitoring matchacme.com matched a current evidence recordMy Exposure · just now
IOCvpn.acme.com present in preserved IOC contextIOC Intelligence · exact match
KEVCVE-2026-3184 · Fortinet FortiOSCISA KEV · official reference · EPSS 0.82
Ransomware claimAkira claim concerning Arcus MediaRansomLook · aggregator · does not confirm a breach

Monitored scopeNext run in 3 days

acme.comDomain3 matches

vpn.acme.comURL1 match

security@acme.comEmail2 matches

Recreation of the Volkano.io workspace with demo data.

Volkano.io productPlatform

Focused tools to review exposure, analyze threats, and coordinate incidents.

Explore

Privacy & LPDPData protection

Privacy compliance run as an operation: data-subject requests, procedures, security and evidence. Available today for LPDP in El Salvador.

ARCO-POL rights

AccessKnow whether personal data is processed and access it.

Explore

Analyst-ledProfessional services

Specialized investigations and advisory work with a clearly agreed scope.

Delivered by specialistsEach engagement runs under an agreed scope. These are not automated features of the platform.

Explore

WorkstationTHREAT INTELLIGENCE / Global Map

Geographic Intelligence

DatasetRansomwarePeriod30dCountryAllActorAll

Illustrative distribution · demo data

Structured geography of mentioned organizations; it does not attribute attacker origin.

WorkstationTHREAT INTELLIGENCE / Live Feed

Activity · 30 days

Recent intelligence stream

CLAIM

Ransomware claim observed

Arcus Media · reference preserved from an aggregator

Observed claim; does not confirm a breachAkiraUnited StatesMediaaggregatormedium

IOC

Indicator in preserved context

hash · ba7f3d92a20d…2d4b8e

Illustrative campaignRansomLookaggregatormedium

CVE

CVE added to KEV

Fortinet · FortiOS · official reference

Evidence-prioritized vulnerabilityCISA KEVofficialEPSS 82.00%

WorkstationTHREAT INTELLIGENCE / Threat Actors

Akiraransomware

First seen: Mar 1, 2023
Technique: T1486 · Data Encrypted for Impact
Observed countries: United States
Industries: Media
Source: RansomLook · reliability B

WorkstationEXPOSURE & MONITORING / Identity Exposure

Identity Exposure

Track and protect your personal and organizational digital footprint

Email exposure scan

security@acme.comScan email

StatusActive

FrequencyEvery 3 days

Findings2

Exposure report

Public breach corpusHighCredentials 2 · Identity 1 · Metadata 1

A preserved public reference contains an address matching the preview identity.

Date: 2026-08-14 · 1 record · 4 fields

Emailsecurity@acme.com

Usernamesecurity-team

Password hash••••••••••••masked

WorkstationEXPOSURE & MONITORING / My Exposure

My Exposure

StatusAssetMatched intelligenceType

newacme.comRansomware claimstrong

Why it matched

The monitored organization name appears in an observed ransomware claim.

Asset: acme.com
Evidence: 1 · Ransomware claim

What it does not prove

The match does not by itself confirm infection, compromise, or breach.

WorkstationINVESTIGATIONS / Domain Intelligence

acme.com

Domain age11773d

RegistrarExample Registrar, Inc.

Infrastructure records

A203.0.113.42

AAAA2001:db8::42

MX10 mail.acme.com

NSns1.example.net

TXTv=spf1 include:_spf.example.net -all

WorkstationINVESTIGATIONS / URL Risk Analysis

https://vpn.acme.com/

Suspicious62/100 · Risk score

Effective URL: https://vpn.acme.com/login
IP: 203.0.113.42
Server: nginx
Status: 200
Country: US

WorkstationINVESTIGATIONS / IP Reputation

203.0.113.42

34%Abuse confidence

Reports: 7
Usage: Data Center / Web Hosting / Transit
ISP: Example Network Services
Domain: edge.acme.com

REPUTATION34% abuse confidence from preserved provider context

NETWORKPublic routed address · hosting classification

REPORTS7 historical reports · analyst review recommended

Shared infrastructure203.0.113.42

WorkstationOPERATIONS / Incident Management

Incident Workspace

INC-2407VPN identity and infrastructure review

Correlate the preserved identity exposure with the monitored VPN endpoint before containment decisions.

High · Owner: Security Operations

OpenInvestigatingContainedResolved

Recommended actions

Verify the affected identity

Review VPN authentication logs

Preserve source references

Latest update

Evidence references were added to INC-2407.

WorkstationOPERATIONS / AI Advisor

AI Cyber Advisor

49 remaining / 50 credits

Selected context

Identity exposuresecurity@acme.com

Monitored URLvpn.acme.com

ClaimAkira · Arcus Media

Executive summaryAssess evidencePotential impactDefensive actions

Prioritize the risk and immediate actions for this asset.

This analysis uses AI Advisor credits.Ask with selected context

Threat intelligence. Claims, actors, indicators and sources in one stream, mapped by the organizations they mention.Recreated Volkano.io views · sanitized demo data · not a live recording

Interactive product previewSanitized demo data

Preparing the product workstation

Analyst-led services

When the work extends beyond self-service.

Some investigations require agreed scope, analyst review, or managed support. These engagements complement the platform without pretending every case can be automated.

Delivered by specialists under an agreed scopeThese are professional engagements, not automated features of the platform. Scenes are illustrative and use synthetic data.

Discuss a custom scope

View service

Security assessments & offensive testingIllustrative scene · synthetic data

Authorized penetration testing, red team exercises, and attack-path validation for web, API, cloud, identity, and digital asset environments.

View service

Question bounded
Evidence preserved
Analyst reviewed
Finding delivered

Pricing

Security that scales
with you

Scheduled monitoring, exposure analysis, investigations, threat intelligence, and response workflows with explicit plan limits.

Free Access

Explore the real Volkano.io workspace with controlled limits.

$0Free

Subject to manual approval

Request access

Scheduled monitoring: 1 asset · every 30 days
My Exposure: Included
Identity Exposure: 1 analysis/month
Domain + URL investigations: 1 each/month
IP / SOC Intelligence: 1 query/month
Threat Intelligence Workspace: Included
Software Inventory + CVE: 3 inventory items
AI Advisor: 1 credit/month

Starter

Built for individuals and small teams.

$29/month

Get started

Scheduled monitoring: 3 assets · every 7 days
My Exposure: Included
Identity Exposure: 5 analyses/month
Domain + URL investigations: 5 each/month
IP / SOC Intelligence: —
Threat Intelligence Workspace: Included
Software Inventory + CVE: 10 inventory items
AI Advisor: 5 credits/month

Professional

Business

Built for organizations that need higher-volume security operations.

$249/month

Get started

Scheduled monitoring: 50 assets · every 24h / daily
My Exposure: Included
Identity Exposure: 250 analyses/month
Domain + URL investigations: 250 each/month
IP / SOC Intelligence: 250 queries/month
Threat Intelligence Workspace: Included
Software Inventory + CVE: 500 inventory items
AI Advisor: 250 credits/month

Compare plansCompare capabilities, limits, and monitoring frequency.

Capability	Free Access	Starter	Professional	Business
Protection & exposure
My Exposure	Included	Included	Included	Included
Identity Exposure	1 analysis/month	5 analyses/month	50 analyses/month	250 analyses/month
Monitored assets	1 asset	3 assets	15 assets	50 assets
In-app alerts	Included	Included	Included	Included
Investigation
Domain Intelligence	1 query/month	5 queries/month	50 queries/month	250 queries/month
URL Analysis	1 analysis/month	5 analyses/month	50 analyses/month	250 analyses/month
IP / SOC Intelligence	1 query/month	—	50 queries/month	250 queries/month
Dark Web investigation	Included	Included	Included	Included
Vulnerability investigation	1 query/month	5 queries/month	50 queries/month	250 queries/month
Threat Intelligence
Threat Intelligence Workspace	Included	Included	Included	Included
Global Map + Live Feed	Included	Included	Included	Included
Ransomware + Threat Actors	Included	Included	Included	Included
Vulnerabilities + IOC Intelligence	Included	Included	Included	Included
Sources + Evidence	Included	Included	Included	Included
Software & incidents
Software Inventory + CVE	3 inventory items	10 inventory items	100 inventory items	500 inventory items
CVE exposure correlation	Included	Included	Included	Included
Incident Workspace	1 new incident/month	—	50 new incidents/month	250 new incidents/month
AI
AI Advisor	1 credit/month	5 credits/month	50 credits/month	250 credits/month
Operations
Monitorable asset types	Email · Domain · IP · URL	Email · Domain · URL	Email · Domain · IP · URL	Email · Domain · IP · URL
Shortest monitoring cadence	Every 30 days	Every 7 days	Every 3 days	Every 24h / Daily
Email exposure alerts	Included	Included	Included	Included
Approval	Manual approval required	—	—	—

Protection & exposure

My ExposureIncluded

Identity Exposure50 analyses/month

Monitored assets15 assets

In-app alertsIncluded

Investigation

Domain Intelligence50 queries/month

URL Analysis50 analyses/month

IP / SOC Intelligence50 queries/month

Dark Web investigationIncluded

Vulnerability investigation50 queries/month

Threat Intelligence

Threat Intelligence WorkspaceIncluded

Global Map + Live FeedIncluded

Ransomware + Threat ActorsIncluded

Vulnerabilities + IOC IntelligenceIncluded

Sources + EvidenceIncluded

Software & incidents

Software Inventory + CVE100 inventory items

CVE exposure correlationIncluded

Incident Workspace50 new incidents/month

AI

AI Advisor50 credits/month

Operations

Monitorable asset typesEmail · Domain · IP · URL

Shortest monitoring cadenceEvery 3 days

Email exposure alertsIncluded

Approval—

Scheduled monitoring is limited by the asset count and cadence included in your plan. Manual investigations keep their monthly allowance.

EnterpriseContact sales

Data protection & privacy

Privacy compliance, run as an operation.

ARCO-POL requestREQ-0412

ReceivedClassifiedIn reviewAnsweredFiled

Data subject→ privacy@acme.com

Request to access my personal data

I would like to know which of my personal data you process and receive a copy…

Received 10:14

Identity: Verified against the request
Right requested: Access

ARCOPOL

Request complete

Processing involved

PrivacyReviewed
LegalIf in scope
SecurityReviewed

Response delivered

Copy of the data processed
Purposes and recipients
Agreed channel · basis recorded

Request record

REQ-0398RectificationFiled
REQ-0405OppositionFiled
REQ-0412AccessFiled

Traceable

Illustrative example · synthetic request

A request arrives
A data subject exercises an ARCO-POL right through the channel the organization has published.
ARCO-POL operations
Identify and classify
Identity is verified, the right is classified and an incomplete request is documented rather than lost.
ARCO-POL operations · procedures
Review what is involved
The processing behind the request is reviewed: privacy first, legal professionals and security when the scope requires them.
Privacy + legal · cybersecurity
Answer, documented
The response is prepared and delivered through the agreed channel, with its basis recorded.
LPDP compliance
Keep the evidence
Request, decision and response stay traceable for the organization and, where applicable, for the DPO function.
Compliance evidence · DPO where applicable

Each engagement is scoped to the organization, its processing activities, and its applicable obligations. Privacy · Legal professionals · Cybersecurity · LPDP · ARCO-POL rights · Security safeguards

Start with Volkano.io

Put cyber intelligence to work

Monitor exposure, analyze threats, and coordinate response with a focused platform built for modern security teams.

Start monitoring +1 (800) 316-6396

San Salvador, El SalvadorDelaware, USAinfo@volkano.io

Volkano.io productPlatform

Focused tools to review exposure, analyze threats, and coordinate incidents.

Explore

Privacy & LPDPData protection

Privacy compliance run as an operation: data-subject requests, procedures, security and evidence. Available today for LPDP in El Salvador.

ARCO-POL rights

AccessKnow whether personal data is processed and access it.

Explore

Analyst-ledProfessional services

Specialized investigations and advisory work with a clearly agreed scope.

Delivered by specialistsEach engagement runs under an agreed scope. These are not automated features of the platform.

Explore

WorkstationTHREAT INTELLIGENCE / Global Map

Geographic Intelligence

DatasetRansomwarePeriod30dCountryAllActorAll

Illustrative distribution · demo data

Structured geography of mentioned organizations; it does not attribute attacker origin.

WorkstationTHREAT INTELLIGENCE / Live Feed

Activity · 30 days

Recent intelligence stream

CLAIM

Ransomware claim observed

Arcus Media · reference preserved from an aggregator

Observed claim; does not confirm a breachAkiraUnited StatesMediaaggregatormedium

IOC

Indicator in preserved context

hash · ba7f3d92a20d…2d4b8e

Illustrative campaignRansomLookaggregatormedium

CVE

CVE added to KEV

Fortinet · FortiOS · official reference

Evidence-prioritized vulnerabilityCISA KEVofficialEPSS 82.00%

WorkstationTHREAT INTELLIGENCE / Threat Actors

Akiraransomware

First seen: Mar 1, 2023
Technique: T1486 · Data Encrypted for Impact
Observed countries: United States
Industries: Media
Source: RansomLook · reliability B

WorkstationEXPOSURE & MONITORING / Identity Exposure

Identity Exposure

Track and protect your personal and organizational digital footprint

Email exposure scan

security@acme.comScan email

StatusActive

FrequencyEvery 3 days

Findings2

Exposure report

Public breach corpusHighCredentials 2 · Identity 1 · Metadata 1

A preserved public reference contains an address matching the preview identity.

Date: 2026-08-14 · 1 record · 4 fields

Emailsecurity@acme.com

Usernamesecurity-team

Password hash••••••••••••masked

WorkstationEXPOSURE & MONITORING / My Exposure

My Exposure

StatusAssetMatched intelligenceType

newacme.comRansomware claimstrong

Why it matched

The monitored organization name appears in an observed ransomware claim.

Asset: acme.com
Evidence: 1 · Ransomware claim

What it does not prove

The match does not by itself confirm infection, compromise, or breach.

WorkstationINVESTIGATIONS / Domain Intelligence

acme.com

Domain age11773d

RegistrarExample Registrar, Inc.

Infrastructure records

A203.0.113.42

AAAA2001:db8::42

MX10 mail.acme.com

NSns1.example.net

TXTv=spf1 include:_spf.example.net -all

WorkstationINVESTIGATIONS / URL Risk Analysis

https://vpn.acme.com/

Suspicious62/100 · Risk score

Effective URL: https://vpn.acme.com/login
IP: 203.0.113.42
Server: nginx
Status: 200
Country: US

WorkstationINVESTIGATIONS / IP Reputation

203.0.113.42

34%Abuse confidence

Reports: 7
Usage: Data Center / Web Hosting / Transit
ISP: Example Network Services
Domain: edge.acme.com

REPUTATION34% abuse confidence from preserved provider context

NETWORKPublic routed address · hosting classification

REPORTS7 historical reports · analyst review recommended

Shared infrastructure203.0.113.42

WorkstationOPERATIONS / Incident Management

Incident Workspace

INC-2407VPN identity and infrastructure review

Correlate the preserved identity exposure with the monitored VPN endpoint before containment decisions.

High · Owner: Security Operations

OpenInvestigatingContainedResolved

Recommended actions

Verify the affected identity

Review VPN authentication logs

Preserve source references

Latest update

Evidence references were added to INC-2407.

WorkstationOPERATIONS / AI Advisor

AI Cyber Advisor

49 remaining / 50 credits

Selected context

Identity exposuresecurity@acme.com

Monitored URLvpn.acme.com

ClaimAkira · Arcus Media

Executive summaryAssess evidencePotential impactDefensive actions

Prioritize the risk and immediate actions for this asset.

This analysis uses AI Advisor credits.Ask with selected context

Threat intelligence. Claims, actors, indicators and sources in one stream, mapped by the organizations they mention.Recreated Volkano.io views · sanitized demo data · not a live recording

Interactive product previewSanitized demo data

Preparing the product workstation

Analyst-led services

When the work extends beyond self-service.

Some investigations require agreed scope, analyst review, or managed support. These engagements complement the platform without pretending every case can be automated.

Delivered by specialists under an agreed scopeThese are professional engagements, not automated features of the platform. Scenes are illustrative and use synthetic data.

Discuss a custom scope

View service

Security assessments & offensive testingIllustrative scene · synthetic data

Authorized penetration testing, red team exercises, and attack-path validation for web, API, cloud, identity, and digital asset environments.

View service

Question bounded
Evidence preserved
Analyst reviewed
Finding delivered

Pricing

Security that scales
with you

Scheduled monitoring, exposure analysis, investigations, threat intelligence, and response workflows with explicit plan limits.

Free Access

Explore the real Volkano.io workspace with controlled limits.

$0Free

Subject to manual approval

Request access

Scheduled monitoring: 1 asset · every 30 days
My Exposure: Included
Identity Exposure: 1 analysis/month
Domain + URL investigations: 1 each/month
IP / SOC Intelligence: 1 query/month
Threat Intelligence Workspace: Included
Software Inventory + CVE: 3 inventory items
AI Advisor: 1 credit/month

Starter

Built for individuals and small teams.

$29/month

Get started

Scheduled monitoring: 3 assets · every 7 days
My Exposure: Included
Identity Exposure: 5 analyses/month
Domain + URL investigations: 5 each/month
IP / SOC Intelligence: —
Threat Intelligence Workspace: Included
Software Inventory + CVE: 10 inventory items
AI Advisor: 5 credits/month

Professional

Business

Built for organizations that need higher-volume security operations.

$249/month

Get started

Scheduled monitoring: 50 assets · every 24h / daily
My Exposure: Included
Identity Exposure: 250 analyses/month
Domain + URL investigations: 250 each/month
IP / SOC Intelligence: 250 queries/month
Threat Intelligence Workspace: Included
Software Inventory + CVE: 500 inventory items
AI Advisor: 250 credits/month

Compare plansCompare capabilities, limits, and monitoring frequency.

Capability	Free Access	Starter	Professional	Business
Protection & exposure
My Exposure	Included	Included	Included	Included
Identity Exposure	1 analysis/month	5 analyses/month	50 analyses/month	250 analyses/month
Monitored assets	1 asset	3 assets	15 assets	50 assets
In-app alerts	Included	Included	Included	Included
Investigation
Domain Intelligence	1 query/month	5 queries/month	50 queries/month	250 queries/month
URL Analysis	1 analysis/month	5 analyses/month	50 analyses/month	250 analyses/month
IP / SOC Intelligence	1 query/month	—	50 queries/month	250 queries/month
Dark Web investigation	Included	Included	Included	Included
Vulnerability investigation	1 query/month	5 queries/month	50 queries/month	250 queries/month
Threat Intelligence
Threat Intelligence Workspace	Included	Included	Included	Included
Global Map + Live Feed	Included	Included	Included	Included
Ransomware + Threat Actors	Included	Included	Included	Included
Vulnerabilities + IOC Intelligence	Included	Included	Included	Included
Sources + Evidence	Included	Included	Included	Included
Software & incidents
Software Inventory + CVE	3 inventory items	10 inventory items	100 inventory items	500 inventory items
CVE exposure correlation	Included	Included	Included	Included
Incident Workspace	1 new incident/month	—	50 new incidents/month	250 new incidents/month
AI
AI Advisor	1 credit/month	5 credits/month	50 credits/month	250 credits/month
Operations
Monitorable asset types	Email · Domain · IP · URL	Email · Domain · URL	Email · Domain · IP · URL	Email · Domain · IP · URL
Shortest monitoring cadence	Every 30 days	Every 7 days	Every 3 days	Every 24h / Daily
Email exposure alerts	Included	Included	Included	Included
Approval	Manual approval required	—	—	—

Protection & exposure

My ExposureIncluded

Identity Exposure50 analyses/month

Monitored assets15 assets

In-app alertsIncluded

Investigation

Domain Intelligence50 queries/month

URL Analysis50 analyses/month

IP / SOC Intelligence50 queries/month

Dark Web investigationIncluded

Vulnerability investigation50 queries/month

Threat Intelligence

Threat Intelligence WorkspaceIncluded

Global Map + Live FeedIncluded

Ransomware + Threat ActorsIncluded

Vulnerabilities + IOC IntelligenceIncluded

Sources + EvidenceIncluded

Software & incidents

Software Inventory + CVE100 inventory items

CVE exposure correlationIncluded

Incident Workspace50 new incidents/month

AI

AI Advisor50 credits/month

Operations

Monitorable asset typesEmail · Domain · IP · URL

Shortest monitoring cadenceEvery 3 days

Email exposure alertsIncluded

Approval—

Scheduled monitoring is limited by the asset count and cadence included in your plan. Manual investigations keep their monthly allowance.

EnterpriseContact sales

Data protection & privacy

Privacy compliance, run as an operation.

ARCO-POL requestREQ-0412

ReceivedClassifiedIn reviewAnsweredFiled

Data subject→ privacy@acme.com

Request to access my personal data

I would like to know which of my personal data you process and receive a copy…

Received 10:14

Identity: Verified against the request
Right requested: Access

ARCOPOL

Request complete

Processing involved

PrivacyReviewed
LegalIf in scope
SecurityReviewed

Response delivered

Copy of the data processed
Purposes and recipients
Agreed channel · basis recorded

Request record

REQ-0398RectificationFiled
REQ-0405OppositionFiled
REQ-0412AccessFiled

Traceable

Illustrative example · synthetic request

A request arrives
A data subject exercises an ARCO-POL right through the channel the organization has published.
ARCO-POL operations
Identify and classify
Identity is verified, the right is classified and an incomplete request is documented rather than lost.
ARCO-POL operations · procedures
Review what is involved
The processing behind the request is reviewed: privacy first, legal professionals and security when the scope requires them.
Privacy + legal · cybersecurity
Answer, documented
The response is prepared and delivered through the agreed channel, with its basis recorded.
LPDP compliance
Keep the evidence
Request, decision and response stay traceable for the organization and, where applicable, for the DPO function.
Compliance evidence · DPO where applicable

Start with Volkano.io

Put cyber intelligence to work

Monitor exposure, analyze threats, and coordinate response with a focused platform built for modern security teams.

Start monitoring +1 (800) 316-6396

San Salvador, El SalvadorDelaware, USAinfo@volkano.io

Know your exposure.Act on evidence.

Security that scaleswith you

Protection & exposure

Investigation

Threat Intelligence

Software & incidents

AI

Operations

A request arrives

Identify and classify

Review what is involved

Answer, documented

Keep the evidence

Put cyber intelligence to work

Security that scaleswith you

Protection & exposure

Investigation

Threat Intelligence

Software & incidents

AI

Operations

A request arrives

Identify and classify

Review what is involved

Answer, documented

Keep the evidence

Put cyber intelligence to work

Security that scales
with you

Security that scales
with you