Know what’s coming.
Cyber Forecast turns threat intelligence into a plain-language forecast for your region and sector. Every organization that connects a Station to the Dorothy network makes the warning better for everyone.
Founded, funded and operated by NuHarbor Security. Made in Vermont. Open to public agencies and private companies alike, and seeing the forecast and connecting a Station are free.
A forecast anyone can read
Five levels, from Low to Severe, set by comparing a place’s recent activity with its own normal. Choose your location and sector and the forecast is about you, with a clear next step at every level.
How it works
Three steps, and the first one costs nothing.
See the forecast
Choose your location and sector for a personal forecast and a plain-language next step, free for everyone.
Connect a Station
Connect the SIEM you already run, with first-class support for Elastic Security and Google Security Operations, as a Station on the Dorothy network. Connecting is free in every tier.
Get warned sooner
When a participant confirms a threat, every other participant is warned, and your own platform checks whether it has already reached you.
Two views of the same storm
Public reporting shows what is being claimed. The Dorothy network shows what is actually reaching organizations like yours. Cyber Forecast brings the two together.
Outside in
Public threat feeds, government advisories and researcher reporting, labeled by source, with claims clearly separated from confirmed incidents.
Inside out: the Dorothy network
Dorothy turns each participating organization’s existing SIEM into a sensor. When one participant confirms a threat, every other participant is warned, and no one can tell who reported it.
Privacy by design
Contributing must never put a contributor at risk, so the network is built around three rules.
Facts about the attacker only
Before anything leaves your environment, a confirmed alert is reduced to facts about the attacker. Your hostnames, users, addresses and systems are removed.
No one knows who reported
Reports are sealed and sent through a blind relay with anonymous membership tokens, so not even the operator can tie a threat to the organization that reported it.
Recognition, not access
Funders and sponsors are named publicly. They never see contributor data or influence what is shared.
Built as a public service, open to everyone
Public agencies and private companies are equally welcome, and contribution is free in every tier. NuHarbor Security is the founding funder and operator, alongside technology sponsors and paying members whose support keeps the free tier open to the organizations that need it most.
Founding Stations wanted
Dorothy is now enrolling its first participants. We are inviting public agencies, schools, universities and private companies of every size to join as founding Stations and, if they wish, be named at launch.
Join as a founding StationCyber Forecast is founded and operated by NuHarbor Security. Made in Vermont.
Forecasts are built from public threat intelligence and are provided for awareness, not as a guarantee. Ransomware leak-site figures are claims published by criminal groups, not confirmed breaches.
Briefings · Live forecast · Dorothy network · Governance and privacy · Funding · Join