Of the 33 features in this comparison, KELA’s public website states 27 and 0 in part; we did not find 6. Every cell links to its source.
On our list of 33 features
The list comes from DarknetSearch’s own feature pages, so it is built around what we do. What KELA offers outside it is listed further down.
DarknetSearch, made in Switzerland by Kaduu, collects leaked data, full stealer logs and underground chatter, and lets you search, monitor and report on all of it in one place. Attack surface discovery, code exposure and domain spoofing detection with takedowns sit in the same workspace, and every feature comes with an API and webhooks.
KELA collects from cybercrime forums and markets, closed messaging channels, infostealer logs, credential dumps and ransomware sites, and combines this with the customer’s external attack surface. Its modules cover threat intelligence, exposure management, digital risk protection, third-party risk and AI security.
Paraphrased from kelacyber.com
| Feature | DarknetSearch as of 6 Nov 2026, 17:30 UTC | KELA reviewed 6 Nov 2026, 17:41 UTC |
|---|---|---|
| Breach databases and SQL dumps | Yes SQL dumps, documents, configuration files and logs, with the original content. Our page | Yes Platform page also names 'leaked credential dumps' Source: kelacyber.com/resources/documents/kela-investigate/ · |
| Combo lists and URL:login:password lists | Yes De-duplicated, with an estimate of how much of a combo list is invalid. Our page | Yes |
| Stealer logs per infected computer | Yes The whole log per computer: passwords, cookies, tokens, autofill, files and system details. Our page | Yes Same page lists device data (IP, GPS, time zone, device locale) |
| Session cookies and tokens from infostealers | Yes Cookies and tokens shown with the infected computer they came from. Our page | Yes Source: kelacyber.com/resources/documents/kela-identity-g… · |
| Paste sites | Yes Paste sites, where configurations and samples often appear first. Our page | Yes |
| Open cloud storage and databases | Yes Misconfigured S3 and Azure storage and open databases. Our page | |
| Payment card data | Yes Cards shared for free and cards offered for sale, by BIN or holder. Our page | Yes Source: kelacyber.com/solutions/proactive-intelligence-fo… · |
| Feature | DarknetSearch as of 6 Nov 2026, 17:30 UTC | KELA reviewed 6 Nov 2026, 17:41 UTC |
|---|---|---|
| Telegram channels | Yes 2,200+ cybercrime channels, mostly private and invite-only. Our page | Yes |
| Discord servers | Yes Servers where tools, logs and leaks are shared. Our page | Not found Not found on kelacyber.com. |
| Dark web and hacker forums | Yes Forum threads re-checked for new replies, and a live search of 50+ hacker forums. Our page | Yes |
| Data for sale: markets and broker listings | Yes What is for sale, which kind of data and when it was listed, plus stealer markets. Our page | Yes FAQ also names illicit markets and automated shops |
| Ransomware leak sites | Yes Victim posts, and the logins and file tree from the leaked archives. Our page | Yes |
| Feature | DarknetSearch as of 6 Nov 2026, 17:30 UTC | KELA reviewed 6 Nov 2026, 17:41 UTC |
|---|---|---|
| Code and secrets in public repositories | Yes GitHub, GitLab, Gists, Postman and Google dorking across 50+ sites, scored 0 to 10. Our page | |
| Attack surface discovery from a domain | Yes Passive discovery from one domain, 17 subdomain sources, CVE matching with CISA KEV context. Our page | Yes Delivered as ULTRA RED, KELA Group's exposure management platform Source: kelacyber.com/platform/continuous-threat-exposure… · |
| Executive and VIP exposure | Yes VIP and executive exposure analysis in the attack surface assessment. Our page | Yes DRP FAQ also lists executive impersonation |
| Credential check at sign-up and login | Yes A credential check for sign-up and login, through the API. Our page | Not found Not found on kelacyber.com. |
| Feature | DarknetSearch as of 6 Nov 2026, 17:30 UTC | KELA reviewed 6 Nov 2026, 17:41 UTC |
|---|---|---|
| Lookalike domain detection | Yes 45+ permutation algorithms plus new registrations; 14 monitors per lookalike. Our page | Yes |
| Takedowns of phishing and lookalike sites | Yes Included in the plan. An analyst follows every request; the engine comes from our sister company SpoofGuard. Our page | Yes Whether takedowns are included or paid is not stated |
| App store impersonation | Yes Spoofed apps that use your name. Our page | Yes |
| Certificate transparency monitoring | Yes New certificates for your names, from certificate transparency logs. Our page | Not found Not found on kelacyber.com. |
| Feature | DarknetSearch as of 6 Nov 2026, 17:30 UTC | KELA reviewed 6 Nov 2026, 17:41 UTC |
|---|---|---|
| Continuous monitoring with alerts | Yes Monitors per source, by email with your own sender and template, or by webhook. Our page | Yes Source: kelacyber.com/resources/documents/kela-identity-g… · |
| REST API | Yes Every feature has a documented API, and every search can be copied as an API call. Not in the Starter plan. Our page | Yes Public API documentation not found; the API is named in product text. |
| Webhooks | Yes Monitors push matches as JSON to your own systems. Our page | Yes Source: kelacyber.com/resources/documents/kela-identity-g… · |
| MCP server for AI assistants | Yes Read-only by default; anything that spends quota needs your explicit yes. Our page | Yes Source: kelacyber.com/press/kela-pre-attack-intelligence-… · |
| SIEM, SOAR and ticketing integrations | Partial Through webhooks and the REST API; our pages name no native connectors. Our page | Yes DRP page: SIEM/SOAR, ticketing and collaboration tools |
| Exports and reports | Yes JSON, CSV or XLSX exports; white-label PDF reports in five languages. Our page |
| Feature | DarknetSearch as of 6 Nov 2026, 17:30 UTC | KELA reviewed 6 Nov 2026, 17:41 UTC |
|---|---|---|
| Multi-tenant client workspaces | Yes One workspace per client, with its own users, assets, plan, allowances and API tokens. Our page | Yes Source: kelacyber.com/solutions/mssp/ · |
| White-label app and reports | Yes Your logo, domain, colours and look in the app, and your brand on every report. Our page | Yes Source: kelacyber.com/solutions/mssp/ · |
| MSSP and reseller programme | Yes Run the service for clients, resell client workspaces, or both. Our page | Yes Source: kelacyber.com/partners/partner-program/ · |
| Feature | DarknetSearch as of 6 Nov 2026, 17:30 UTC | KELA reviewed 6 Nov 2026, 17:41 UTC |
|---|---|---|
| No search history kept | Yes Not in the app, not in server or API logs. Code exposure scans keep a history by design. Our page | Not found Not found on kelacyber.com. |
| Customer data hosted in the EU | Yes Hosted in Germany. Our page | Not found Not found on kelacyber.com. |
Offered on KELA’s website and not part of our feature list, or stated more fully than ours.
Features we offer that we could not find, or found only in part, on KELA’s public website. That does not mean KELA lacks them.
The mark shows what we found on KELA’s website. Each item links to our page that describes it.
Start a free trial, check the public price list, or book a demo with our team.
