APWG community Capability Registry

About us

A registry of capabilities, not a warehouse of data.

Researchers and responders already build detection systems, datasets, and feeds. This prototype makes those capabilities easier to find.

Who made this

This registry was not created by APWG, and it is not an official APWG product or service. Members of the APWG community developed it.

Why it exists

At APWG eCrime 2026, organizations described work that other researchers often cannot discover from papers alone. The registry answers three questions: who offers a capability, how to ask for access, and which public write-up describes it.

The site does not host datasets, proxy queries, or execute services. Sharing arrangements stay with the provider.

How to read a record

Documented means a public source describes the capability. Unverified means the listing comes from a public mention, usually a conference session, and an operational offering has not been confirmed. Provider confirmed is unused in the seed data. It is reserved for a record the provider has reviewed.

Sharing into this registry is a separate flag. A provider can run a member exchange and still be “not confirmed” here, because nobody has reviewed this copy of the record.

How to add or correct a record

For now, email Hossein Siadati at s.h.siadaty@gmail.com. Include the organization, the capability, what it does, who can use it, and any public links. Say what should change if the record is already listed. Leave out anything you are not sure of.

Vocabulary

Filters use these values. Records may include a new value later; the site will keep it and show it as written.

Entity types

  • academic — Academic
  • nonprofit — Nonprofit
  • commercial — Commercial
  • government — Government
  • community — Community
  • other — Other

Capability types

  • dataset — Dataset
  • intelligence_feed — Intelligence feed
  • detection_service — Detection service
  • collection_service — Collection service
  • analysis_tool — Analysis tool
  • research_model — Research
  • platform — Platform
  • other — Other

Threat categories

  • phishing — Phishing
  • scam — Scam
  • malware — Malware
  • ransomware — Ransomware
  • credential_theft — Credential theft
  • brand_impersonation — Brand impersonation
  • malicious_infrastructure — Malicious infrastructure
  • dark_web — Dark web
  • social_engineering — Social engineering
  • financial_fraud — Financial fraud
  • other — Other

Access levels

  • public — Public
  • registration_required — Registration required
  • request_only — Request only
  • restricted — Restricted
  • unknown — Unknown

Verification

  • unverified — Unverified
  • documented — Documented
  • provider_confirmed — Provider confirmed

Delivery methods

  • download — Download
  • api — API
  • web_portal — Web portal
  • stream — Stream
  • on_request — On request
  • software — Software

Seed data

The initial organizations are public participants or hosts associated with APWG eCrime 2026, including APWG, Spamhaus, abuse.ch, Shadowserver, ChongLuaDao, the Global Signal Exchange, Oxford Information Labs, BforeAI, and research groups listed on the symposium program. Descriptions were checked against public pages on 4 November 2026. Conference-only sessions stay unverified as services.

Run it

Install dependencies once, then start the local site:

npm install
npm run dev

After that install, search and the seed records work without a network connection. Browser-only additions stay in local storage on this computer.