Built on the official regulatory record — what companies file, not what leaks

Know the day a company you watch files a breach.

Give GalaxyWarden Signals your vendor list, your portfolio, or your book. The moment one of them files a breach with a US regulator, you get an alert — the filing itself, dated and sourced to the record. Not a leaked dump. Not a rumor.

Start monitoring — $299/mo See a live filing ↓ API key issued on checkout — no sales call.
signals · confirmed filings LIVE
OrganizationFilingDateAffectedStatus

Illustrative — representative structure, fictional organizations. The live feed is on your key.

Point it at a list. Get the filing, not the rumor.

The whole product is a workflow you can't rebuild without running the sources yourself: watch, match, alert. You bring the names; we do the rest, and keep doing it.

01 — WATCH

Add the organizations you watch

Your vendors, a portfolio, a book of insureds — up to 500 on the self-serve plan. Upload a list or add them as you go.

watchlist: portfolio-a
+ 342 organizations
02 — MATCH

We match every new filing to your list

Entity-matched across name variants, deduped across sources, and corroborated — so one breach is one event, not three, and "Inc." never hides a match.

"Northwind Logistics Inc."
→ Northwind Logistics ✓ matched
03 — ALERT

You hear the moment one files

An alert with the company, the date, what was disclosed, and a link to the official filing — pushed to email, webhook, or your own tools via the API.

alert → Cedar Ridge Clinics
filing on record · confirmed

The one alert that's about your vendor, on the day it matters.

Out of every filing across every US regulator, Signals surfaces the ones on your list — confirmed, dated, and sourced — so nothing you watch files a breach without you hearing it first.

One place for filings that live in fifty.

Every US breach regulator publishes on its own portal, in its own format — and some actively block automated reads. We run the sources that matter and add more, so your team never maintains a scraper.

FED

Federal securities filings

Material cyber-incident disclosures — every US public company, on the federal record.

Live
ST

State breach-notification filings

Official state regulator notifications — a growing set of US states, added continuously.

Live · expanding
VLN

Federal exploited-vulnerability advisories

The federal exploited-in-the-wild record, to corroborate and enrich each incident.

Live
RW

Ransomware leak-site listings

Carried as labelled, unverified claims — clearly marked, never shown as a confirmed breach.

Labelled

Each portal is a different format, and several change without notice. Maintaining that collection is a permanent job — which is the point: you license the maintained feed instead of owning the upkeep.

Managed end to end. Nothing for you to build.

The data is public. The work is running the sources, deduping, entity-matching, and alerting — forever. We own that so your team doesn't.

pushAlerts where you work

Email, webhook, or a push into the system your team already lives in. The alert carries the filing, dated and sourced.

apiJSON API + bearer key

Query by organization, filing type, date, data class, or affected count. Wire it straight into your own tooling.

bulkWarehouse & backfill

Land the full corpus, then keep it live. Pull on your schedule or take the push feed into your warehouse.

slaFreshness & uptime SLA

On the licensed tier, a contractual freshness and uptime commitment — not a best-effort side project.

Confirmed is confirmed. Claimed is labelled.

Trust is the whole product, so we're deliberately conservative about what we call a fact.

Sourced to the record

Every confirmed record links to the official regulatory filing it reproduces — a fair-report posture, not a rumor mill.

Entity-matched

Name variants — Corp / Inc / LLC and formatting drift — resolve to one organization, so a match is never missed and a breach is never double-counted.

Labelled vs confirmed

Leak-site and extortion claims are carried as labelled, unverified — always distinguished from a confirmed regulatory filing, never blurred together.

Honest about limits

Absence of a record is not evidence of no breach. We reproduce the public record and make no warranty of completeness.

Buy a key. Start in minutes.

Self-serve monitoring for your own team — no sales call, no procurement. Move to a license only when you want to embed the feed in a product of your own.

SignalsSelf-serve
$2,990 / year
$249/mo billed annually · 2 months free · cancel anytime
Indicative estimate

Monitor up to 500 organizations. Your API key is issued on checkout.

  • API key issued instantly on checkout
  • Watchlist alerts on up to 500 organizations
  • Full record — filing type, date, affected count, data classes, source link
  • Federal + state filings, updated daily
  • JSON API + bearer key — query any field
EnterpriseLicensed
From $12k / year
Per engagement · volume, SLA & delivery scoped to you
Indicative estimate

For platforms, insurers, and data vendors that embed the feed inside their own product.

  • Redistribution & embedding rights — resell inside your product
  • Full-corpus & high-volume access
  • Contractual uptime & freshness SLA
  • Custom delivery — push, webhook, warehouse
  • Named contact, contract & security review
Talk to us

Only need monitoring for your own team? The self-serve plan is everything you need — no contact required. Enterprise is for redistribution only. Every price shown is an indicative estimate, not a firm price. All records are reproduced from public regulatory filings and sourced to the record. GalaxyWarden Signals monitors official regulatory breach filings — never leak-site claims, which it does not treat as confirmed. It does not scan you or remove your personal data. Absence of a record is not evidence a company was not breached.