Making actionable threat intelligence accessible to all
LunarChain streamlines intelligence gathering by sourcing both mainstream and niche data—from underground forums to social platforms and global news outlets.
LunarChains Intelligence Graph performs deep and state of the art correlation on ingested intelligence, finding patterns and modelling threats as intel is ingested.
LunarChain enables open querying of our Intelligence Graph, supporting complex and targeted lookups to surface general and highly specific threat intelligence.
The core of our platform, and how we deliver our intelligence.
Of creating the worlds largest open database of high fidelity threat intelligence
Reconnaissance
Every public and underground signal is ingested, normalized, and enriched before it hits our intelligence graph.
From big data to nuanced threat intelligence
LunarChain automates the full threat intelligence pipeline — from high-accuracy, IOC, location, tool, infastructure and threat actor extraction and profiling to contextual threat reasoning — we surface high-confidence intelligence enriched with global context.
LunarChain exposes and correlates a wide range of IOC types, ranging from IP Addresses, Threat Actor Groups to Locations and attack patterns. This allows for highly targeted threat intel lookups and profiling.
LunarChain performs in-house correlation across all intelligence data to uncover hidden patterns at scale. This amplifies signal quality and helps surface previously unknown threat activity and behavior.
LunarChain automatically filters irrelevant chatter and disinformation — ensuring analysts only see what matters. Our enrichment pipeline uses AI powered investigation, correlation and detection to surface real threats faster.
LunarChain allows querying of our intelligence graph with natural language using our custom GPT, with the goal of making threat intelligence open and simple to use to everyone.
Real-time threat alerting on anomaly and threat detection against targets

LunarChain supports the setup of automated alerting based on niche intelligence needs, served in realtime as intel is surfaced.
Receive realtime targeted alerts through platform notifications, email, messaging and customised reports.
Advanced algorithms filter out false positives and ensure you only receive actionable, high-confidence alerts.
We can deliver reports on targets of interest, as data surfaces on them.
Model Context Protocol access to LunarChain's intelligence graph for agentic workflows
Connect any MCP-compatible client to query and traverse LunarChain graph intelligence with structured tool calls.
Enable multi-step agents to chain retrieval, follow-up graph exploration, and contextual enrichment in one workflow.
Expose near real-time cyber, geopolitical, and military intelligence context through a single MCP endpoint.
Return rich entities and relationships across IOCs, actors, infrastructure, campaigns, locations, and attack patterns.
Open our API docs for MCP usage, setup, and test workflows.
Open API DocsFor specific intelligence needs or alerting capabilities
+44 7751 933043
Available Monday - Friday, 9AM - 6PM EST
London, UK
Headquarters and main operations center