Freedom251 › Digital Risk Protection Software
KELA Platform
What KELA Platform is
KELA Platform is a paid, agentless SaaS service that combines cybercrime-underground intelligence with an organization’s exposure and attack surface. It provides cyber threat intelligence, continuous threat exposure management, vulnerability intelligence, digital risk protection, third-party risk management, AI trust risk and security management, and agentic AI. KELA gathers information from cybercrime forums and markets, closed messaging channels, infostealer logs, leaked credentials, ransomware sites, exploit writeups, proof-of-concept sources, threat-actor identities, and external attack surfaces. The service starts with a domain and needs no sensors, agents, setup, or installation. Findings can flow to SIEM, SOAR, and ticketing tools through integrations and an API. Vulnerability intelligence maps criminally discussed or sold exploits to CVE IDs. Third-party monitoring uses passive scanning and supports exportable PDF or DOCX reports. Supported frameworks include NIS2, DORA, ISO 27001, and HIPAA. AiFort tests AI applications and monitors deployed models. A 30-day trial is free; Cloud Attack Surface Management costs $65,000 a year.
Who it suits
KELA lists SOC, incident-response, threat-intelligence, exposure, fraud, brand-protection, third-party-risk, government, and law-enforcement teams. It serves enterprises, MSSPs, government agencies, and law-enforcement organizations.
What it does well
- Agentless deployment starts with only a domain
- Combines underground intelligence with attack-surface data
- Integrates with SIEM, SOAR, ticketing, and APIs
- Supports NIS2, DORA, ISO 27001, and HIPAA
- Includes dark-web, credential-leak, and impersonation monitoring
What to know first
- No free plan beyond the 30-day trial
- Cloud Attack Surface plan costs 65000.00 USD annually
- Pricing is otherwise on request
- Coverage and reports depend on configured services
Limits
The 30-day free trial is provided at 0.00 USD with no commitment or payment details required. The listed Cloud Attack Surface Management plan costs $65,000 a year for one seat and up to 500 FQDNs.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| 30-Day Free Trial | No commitment or payment details required | Free |
| Cloud Attack Surface Management | 12-month contract · 1 seat · up to 500 FQDNs | $65,000 a year |
As kelacyber.com lists them, read 30 Sept 2026. The maker's own page has the final word.
Getting started
- Open the KELA Platform website
- Start the 30-day free trial
- Provide a domain to begin agentless monitoring
- Connect SIEM, SOAR, or ticketing tools through integrations or the API
- Use the API or web platform for investigations and reporting
Verdict
KELA Platform brings multiple cyber-risk intelligence and exposure functions into an agentless service. Its enterprise pricing and broad feature scope make plan fit and required coverage important considerations.
Questions
Is there a free plan?
No. KELA lists a paid pricing model and offers a 30-day free trial instead.
How much is the listed plan?
Cloud Attack Surface Management is $65,000 a year, billed under a 12-month contract, for one seat and up to 500 FQDNs.
Which platforms are supported?
KELA Platform is available through API and web access.
Does it provide API access?
Yes. Findings can be sent to SIEM, SOAR, and ticketing tools through integrations and the API.
What does third-party monitoring require?
Third-party-risk monitoring uses passive external scanning and requires only a domain, with no vendor consent, setup, or installation.
Who makes KELA Platform?
KELA, headquartered in Tel Aviv, Israel, provides the platform.
Facts from KELA Platform's own pages
- AI security
- AiFort tests MLOps and generative-AI applications, detects vulnerabilities during development, and continuously monitors deployed models for emerging threats. · kelacyber.com, 30 Sept 2026
- Capabilities
- The platform provides Cyber Threat Intelligence, Continuous Threat Exposure Management, Vulnerability Intelligence, Digital Risk Protection, Third-Party Risk Management, AI Trust Risk and Security Management, and Agentic AI. · kelacyber.com, 30 Sept 2026
- Compliance frameworks
- KELA TPRM supports NIS2, DORA, ISO 27001, HIPAA, and customizable internal policies through questionnaires. · kelacyber.com, 30 Sept 2026
- Customer profile
- KELA says it serves enterprises, MSSPs, government agencies, and law-enforcement organizations. · kelacyber.com, 30 Sept 2026
- Data sources
- KELA collects from cybercrime forums and markets, closed messaging channels, infostealer logs, leaked credential dumps, ransomware sites, exploit writeups, proof-of-concept sources, threat-actor identities, and external attack surfaces. · kelacyber.com, 30 Sept 2026
- Deployment
- The platform is agentless SaaS, starts with a domain, and requires no sensors, agents, setup, or installation. · kelacyber.com, 30 Sept 2026
- Headquarters
- Tel Aviv, Israel · kelacyber.com, 28 Sept 2026
- Integrations
- Findings can be sent to SIEM, SOAR, and ticketing tools through integrations and the API. · kelacyber.com, 30 Sept 2026
- Investigation users
- The platform is used by SOC and incident-response teams, threat-intelligence analysts, vulnerability and exposure teams, fraud and brand-protection teams, third-party-risk teams, and government and law-enforcement investigators. · kelacyber.com, 30 Sept 2026
- Privacy compliance
- KELA states that its personal-data processing follows the GDPR and Israeli Privacy Protection Law, including Israeli data-security regulations. · kelacyber.com, 30 Sept 2026
- Purpose
- KELA fuses cybercrime-underground intelligence with an organization’s exposure and attack surface. · kelacyber.com, 30 Sept 2026
- Support
- KELA’s privacy policy states that personal data is used to provide client support and respond to inquiries. · kelacyber.com, 30 Sept 2026
- Third-party onboarding
- Third-party-risk monitoring uses passive external scanning and requires only a domain, with no vendor consent, setup, or installation. · kelacyber.com, 30 Sept 2026
- Third-party reporting
- Third-party-risk users can export portfolio, vendor cyber-risk, and compliance insights as PDF or editable DOCX reports. · kelacyber.com, 30 Sept 2026
- Vulnerability intelligence
- KELA maps criminally discussed, weaponized, or sold exploits to CVE IDs before EPSS or KEV may identify them. · kelacyber.com, 30 Sept 2026
Where KELA Platform stands on Freedom251
- Digital Risk Protection Software#8 of 26