You know the dark web from the news. That's the extent of it.

#python #security #api

You know the dark web from the news. That's the extent of it — you've never actually been, it's not exactly inviting. So you have no way of knowing if your company's data is already there.

Real numbers, pulled today, not estimated: one ransomware-tracking feed recorded 100 newly disclosed victim companies in the last 60 hours. Roughly one every 36 minutes. Top sectors: professional services, manufacturing, healthcare. Most of those companies found out the same way the public did — after it was already public.

Dark Web Breach Sentinel takes a watchlist — company names or domains — and checks it against newly disclosed ransomware/breach victims on a schedule. It reports only what's new since the last run. Nothing resurfacing, nothing to re-read.

It runs on ransomware.live's open feed, plus a watchlist and a "what changed" layer on top of it.

One bug, found where bugs get found

Local testing passed clean. First real run in production failed on a single keyword: "Real Estate" — the space in it. Apify's storage rejects keys containing spaces; the local test environment never enforced that, so it stayed invisible until it wasn't.

Fixed by hashing the keyword instead of sanitizing it. Ran it twice after the fix — correct matches, nothing duplicated.