Overwatch Data

Overwatch Data is a threat intelligence and risk operations platform built for teams that need to understand adversaries operating outside their own systems. Rather than relying on static feeds, its AI agents continuously collect signals from the criminal underground — forums, dark web markets, leak sites and messaging channels — and classify that raw activity into candidate findings. Analysts then review the cases that need human judgment, and the platform keeps watching the actors involved.

The workflow is organised around three stages: detect, investigate and act. During detection, signal collection and anomaly classifiers surface potential threats tied to your organisation. In the investigation stage, agents traverse threat actor networks, verify exploits and assemble evidence packages, attaching messages, files and URLs to each case. Finally, validated findings are delivered into SIEM, SOAR, case management systems and executive briefings, so a detection becomes a decision rather than another alert.

Coverage spans fraud, cyber and merchant risk in one system. Documented use cases include OTP interception and account takeover, mule recruitment, lookalike phishing domains, infostealer logs containing employee credentials, third-party and vendor breach exposure, and executive exposure reviews. The company reports that Visa and more than 40 other organisations in finance, fintech and media use the platform, and it is backed by Mouro Capital, Visa Ventures, Capital One Ventures, Y Combinator and others. Pricing is quoted on a demo basis.