01 · Product name
Hudson Rock
Infostealer lookups with a free domain check.
Published by Hudson Rock.
In short
Hudson Rock publishes a free domain check and the paid Cavalier platform. On 19 Oct 2026 the free-tools page said Over 36,943,290+ Infostealer Infected Computers. The homepage the same morning said 36,943,290 Compromised Machines and 5,891,126 Compromised Employees. A search for owasp.org reported 72 total compromised records, 2 compromised employees, 70 compromised users, and 50 third-party compromises. The result rows named people. This listing does not repeat the names or the email addresses. Cavalier, at cavalier.hudsonrock.com, offered Log In and Request a Demo, with no price printed.
Product pricing strategy
02
Free and paid
The pages opened on 19 Oct 2026 split into a free check and a demo. The homepage says a free account can track up to 3 emails, 3 domains, and 3 usernames. The domain search for owasp.org ran without a checkout. The free-tools page describes its core tools as remaining free and points a reader who wants more at Schedule Demo. Cavalier, the platform at cavalier.hudsonrock.com, offered Log In and Request a Demo. No dollar, euro, or pound amount was printed on the homepage, the free-tools page, the owasp.org result, or the Cavalier screen. The machine counts are not a price. The 3-and-3-and-3 line is an account limit the homepage printed, not a fee. A later contract for Cavalier or for the API linked in the nav needs its own quote. This listing did not open a rate card.
Utility and features
03
The homepage at hudsonrock.com opened on 19 Oct 2026 with a domain box and the line that a free account can track up to 3 emails, 3 domains, and 3 usernames. The counters on that homepage were 36,943,290 Compromised Machines and 5,891,126 Compromised Employees. The free-tools page the same morning said Over 36,943,290+ Infostealer Infected Computers. The plus sign and the word Over are on the free-tools page. They are not on the homepage counters. Quote the page you opened. Neither number was re-counted from a database.
- Two machine sentences. The homepage said 36,943,290 compromised machines. The free-tools page said Over 36,943,290+. Both were opened on 19 Oct 2026.
- owasp.org aggregates. The result header said 72 records, 2 employees, 70 users, and 50 third-party compromises. Named rows are not repeated.
- Cavalier is a demo. cavalier.hudsonrock.com offered Log In and Request a Demo. No currency amount was printed.
Submitting owasp.org in the homepage box went to https://www.hudsonrock.com/search/domain/owasp.org. The result header said 72 total compromised records, most recent 4 days ago; 2 compromised employees, last compromised 40 days ago; 70 compromised users, last compromised 27 days ago; and 50 third-party compromises, last compromised 4 days ago. A panel attributed 10 leaked CI runner dumps to a LiteLLM breach and called the exposure high. Those are the page's aggregates and the page's relative dates. The same page listed named people and email addresses in the employee rows. Those names and addresses are not repeated here, and the frame is not filed. Cavalier loaded as a cybercrime intelligence platform with Log In, Request a Demo, and a 2026 copyright line, Hudson Rock. No currency amount was on that screen.
- 1
Quote the homepage counters and the free-tools sentence separately.
- 2
If you run a domain check, record the aggregates and leave personal names and email addresses out of a public note.
- 3
Ask Cavalier for a quote before you treat the demo button as a plan.
Caveats
04
The homepage counters and the free-tools sentence disagree in form. Homepage: 36,943,290 machines and 5,891,126 employees. Free tools: Over 36,943,290+. Do not drop the Over or the plus, and do not average the employee figure into the machine figure. The owasp.org header is a third set of numbers, about one domain, and the 4 days ago and 40 days ago lines are relative phrases on 19 Oct 2026.
The employee rows named people and showed email addresses. This listing does not publish those names, those addresses, or a screenshot of them. An aggregate such as 2 compromised employees is the page's count for owasp.org. It is not a finding you add, and it is not proof of what a person did. Infostealer data can be stale, duplicated, or wrongly tied to a domain. The LiteLLM panel is the page's attribution. Cavalier's demo button is not a login this review passed.
Potential use cases
06
- You need the free check's limits before a purchase conversation. On 19 Oct 2026 the homepage said a free account can track up to 3 emails, 3 domains, and 3 usernames, and it showed 36,943,290 compromised machines and 5,891,126 compromised employees. The free-tools page said Over 36,943,290+. Keep the Over and the plus on that second sentence. Cavalier offered a demo and no printed price.
- A domain check for a public organization is the example. owasp.org returned a header of 72 total compromised records, 2 compromised employees, 70 compromised users, and 50 third-party compromises, with relative dates such as 4 days ago and 40 days ago. The rows under that header named people and email addresses. Record the aggregates. Leave the names and addresses out of a public note.
- The LiteLLM panel is about to be briefed as this listing's research. The result page attributed 10 leaked CI runner dumps to that breach and marked the exposure high. That attribution is the page's. This review did not inspect the dumps. An infostealer count can be stale or mis-tied. Say which URL printed the number, and say the named rows were not copied.
Hard cases
The case where the first result is easy to over-read.
Named employees land in the writeup
The owasp.org result listed people and email addresses under the employee counts. Those rows are not in this listing and are not in the screenshots. Use the header counts if you need to show what the free check returns. A name from an infostealer row is a private person's data. Do not paste it into a public page to illustrate the product.
Practitioners using it
Posts on X from people describing a concrete use. The quote is the post. Likes and reposts are the counts saved with it, not a live total. A label marks a creator, a maintainer, a vendor, a partner, a data partner, or an investor.
💡 CavalierGPT أداة قوية لمحلليين السيبرانيي و الـOSINT. يسمح لك بالبحث عن مواقع، عناوين IP، إيميلات، أسماء مستخدمين، وتسريبات من الدارك ويب بشكل مباشر. الأداة مبنية على واجهة Cavalier API التابعة لـ Hudson Rock، والمتخصصة في تحليل التسريبات والأنشطة الإجرامية الإلكترونية. pic.twitter.com/HJ3IKbStHB
Vendor
UPDATE: Airbus's CERT team was able to determine that the hack originated from the infected computer Hudson Rock identified. https://t.co/Lk10ORMLI5
Partner
Testing the integration of @RockHudsonRock & @OSINTindustries Every new data feed I wire into Feynman gives analysts a wider field of vision, and Hudson Rock and OSINT Industries are two of the most actionable. Hudson Rock now sits inside the canvas, which will allow analysts… pic.twitter.com/U3VhgFUz05
Questions
Is the Hudson Rock domain check free?
The homepage on 19 Oct 2026 offered a domain box and said a free account can track up to 3 emails, 3 domains, and 3 usernames. Cavalier asked for a demo and did not print a price.
What did owasp.org return?
The result header said 72 total compromised records, 2 compromised employees, 70 compromised users, and 50 third-party compromises. The page also named people. Those names are not listed here.
Citations
07
Titled sources. These public pages are what the quotes on this listing come from.
Product
Hudson Rock
https://www.hudsonrock.com/Pricing
Hudson Rock free tools
https://www.hudsonrock.com/free-toolsDocumentation
Cavalier by Hudson Rock
https://cavalier.hudsonrock.com/