Responsible Data Collection
ThreatHarvest Responsible Collection Principles
ThreatHarvest provides actionable threat intelligence to help customers mitigate cybersecurity risks. We recognize that gathering intelligence from online sources and third-party partnerships requires a steadfast commitment to legal compliance, ethical conduct, and data privacy. The following principles outline our operational boundaries and our commitment to responsible collection.
Principles
How we collect
Multichannel Sourcing & Ethics
Our threat intelligence incorporates data gathered from publicly available online sources and trusted third-party partnerships.
- Diverse Data Sourcing: ThreatHarvest collects threat intelligence through open-source monitoring across the public internet and dark web, including specialized feeds and data streams provided by third parties.
- Vendor Sourcing: We restrict data purchases strictly to reputable third parties operating within the cybersecurity industry.
- No Actor Payments: ThreatHarvest does not make payments to threat actors or to platforms knowingly designed to facilitate illegal activities.
Ethical Collection and Engagement
Our intelligence gathering relies on passive, non-intrusive methodologies to ensure we do not disrupt services or enable malicious actors.
- Passive Observation: Our personnel and systems employ lawful practices, gathering openly posted communications without actively responding, contributing to, or cooperating with individuals on criminal forums or channels.
- Authentic Operations: Our personnel and automated systems do not impersonate real individuals or employ active deception to gain access to data.
Legal and Regulatory Compliance
We design our collection to respect applicable laws and the privacy of the people and organizations involved.
- Authorized access: We design collection to respect laws such as the Computer Fraud and Abuse Act (18 U.S.C. ยง1030). ThreatHarvest does not use stolen credentials or exploit vulnerabilities to gain unauthorized access to private networks, systems, or gated databases.
- Public accessibility: With laws such as the U.S. Wiretap Act in mind, data sourced directly from electronic communications is gathered only from channels that have been made public or otherwise accessible to the public within the respective platform. We do not bypass security controls, require unauthorized login credentials, or circumvent paywalls to access private communications.
Data Privacy and Access Controls
We collect intelligence for the sole purpose of mitigating cybersecurity risks and maintain strict controls over platform access.
- Controlled Access: Access to collected data is strictly limited to authorized personnel and clients whose configurations align with a legitimate business purpose.
Content Safety & CSAM Reporting
ThreatHarvest is committed to maintaining content safety standards across our platform and preventing the proliferation of Child Sexual Abuse Material (CSAM).
- Zero-Tolerance for CSAM: Our services are not designed or operated to access, process, or store Child Sexual Abuse Material (CSAM). We employ automated detection tools and analytical rules designed to flag and filter non-compliant data before it is presented to users.
- Reporting to authorities: We report child sexual abuse material we encounter to appropriate authorities, such as the National Center for Missing & Exploited Children (NCMEC).
- Community Reporting: Clients or members of the public who identify concerning content within our platform can immediately report it to our team by emailing abuse@threatharvest.com.
Security and trust
See how we handle data and security
For data handling and security posture, read Trust & Security, or contact us with questions about collection practices.