Governance and privacy
A network only works if people trust it. These are the rules Cyber Forecast and the Dorothy network are built to follow, published so you can hold us to them.
Contribution is free
Connecting a Station to the Dorothy network costs nothing in any tier, for public agencies and private companies alike. Paid tiers pay for what comes back, never for the right to help.
Facts about the attacker, not you
Only analyst-confirmed threats are shared, and each is reduced to facts about the attacker before it leaves your environment. Your hostnames, users, addresses and systems never leave.
No one knows who reported
Reports are sealed, carried by a blind relay and verified with single-use anonymous tokens, so neither NuHarbor nor any funder can tie a threat to the organization that reported it.
Open standards, verifiable output
Dorothy is built on published, peer-reviewed standards, and the community forecast is signed with keys recorded in a public, append-only log, so every participant can confirm it receives what everyone else receives.
Recognition, never access
Funders and sponsors are named publicly. They receive no view into contributor data and no say over what is shared.
No single funder dominates
We aim to keep any one funder to about a third of the free-tier budget, so the network never depends on a single sponsor.
Separate data paths
The public forecast is built from public sources. Dorothy network data travels through a separate pipeline and is never mixed into the public feed.
Honest labeling
Every figure shows its source. Ransomware leak-site figures are claims, not confirmed breaches, and the forecast says when it is still building its baseline.
No client data without consent
NuHarbor’s own managed-service client data is never contributed to the network without that client’s explicit agreement.
Independent oversight
An advisory board of public sector, education, industry and information-sharing leaders is being formed to review these rules and audit how they are applied.
Who operates Cyber Forecast
NuHarbor Security, a cybersecurity services company in Vermont, founded Cyber Forecast, funds it alongside other supporters, and hosts and operates the platform. The hub it operates stores nothing that ties a threat to the organization that reported it. We say so plainly because transparency about who runs a network is part of earning trust in it.
Cyber Forecast is founded and operated by NuHarbor Security. Made in Vermont.
Forecasts are built from public threat intelligence and are provided for awareness, not as a guarantee. Ransomware leak-site figures are claims published by criminal groups, not confirmed breaches.