About
About CyberBlink
CyberBlink AI helps people understand and respond to everyday security threats — through a free public Knowledge Center of investigative, evidence-based articles, and a set of practical, deterministic security tools.
What we do
Most people encounter security threats — phishing emails, weak passwords, session hijacking, credential stuffing — long before they encounter a security team. CyberBlink exists to close that gap with two things: clear, specific explanations of how real attacks actually work, and small tools that let you check something concrete (a CVE, a domain, a password, a suspicious message) rather than just read about it in the abstract.
The Knowledge Center
Our Knowledge Center is a free, public archive of original articles that walk through specific, realistic incident scenarios — how a fake login page works, why multi-factor authentication stops most account takeovers, what session hijacking looks like without a stolen password — grounded in how these attacks actually happen, not generic advice. Every published article is fully readable without creating an account.
Our approach
Where a tool can give you a deterministic, sourced answer instead of a guess, that is what it does. CVE Lookup pulls directly from the National Vulnerability Database and CISA's Known Exploited Vulnerabilities catalog and computes severity with published, fixed methodology — not an AI model. The Password Toolkit runs entirely in your browser. IOC / Threat-Intel Lookup, our free indicator-of-compromise lookup, covers IPs, subnets, domains, URLs, and file hashes, and is built on cached, regularly-refreshed threat intelligence data from abuse.ch feeds (URLhaus, ThreatFox, MalwareBazaar, and Feodo Tracker) and The Spamhaus Project's DROP network list, used exclusively for this free tool. Network-range intelligence includes data from The Spamhaus Project (DROP); the feed's own date and copyright information is retained with the data we store. CyberBlink is not affiliated with or endorsed by The Spamhaus Project or abuse.ch. Looking up an indicator checks that cached data — it does not trigger a live query to those providers on your behalf. It sits alongside Domain + URL Lookup under the same Indicator Analysis pillar, but answers a different question: Domain + URL Lookup is what CyberBlink itself detects about a domain or URL's structure, independent of any external feed, while IOC / Threat-Intel Lookup checks whether an indicator has been observed in that cached threat-intelligence data — a domain can be flagged by one and not the other. Full detail on exactly how each tool handles the data you give it is on our Security & Trust page, including the limitations of each tool — we would rather tell you what a result does not mean than overstate what it does.
Transparency
We publish exactly what data each tool collects and how it's handled in our Privacy Policy and Security & Trust page, and we disclose where our current limitations are — for example, we have not yet completed an independent third-party security audit. If you find a security issue, our Vulnerability Disclosure Policy explains how to report it.
Get in touch
Questions about the platform or an account go to support@cyberblinksecurity.com. Suspected vulnerabilities go to security@cyberblinksecurity.com.