Watch
Daily block lists
Web addresses, IP addresses and files that security researchers have flagged as malicious, checked and ready to load into the tools you already have.
Watch. Warn. Protect.
We keep watch so you can do the work.
Free, plain-language security help for families, nonprofits and small businesses, and a daily feed of known-bad sites for the people who look after their networks. The aim is simple: make it easy to do the right thing.
Updated 12 Oct 2026
Valid until 2026-10-15 18:03 UTC. Don't use the lists after that.
Warn
The blog
Plain-language posts on the threats that actually reach families and small organizations, and what to do about them this week.
The first posts are on the way.
Protect
Free guides
Practical, step-by-step guides for homes and small organizations, in plain language. Nothing to buy.
Helpful starting points
Protect yourself and your family
Step-by-step guides you can follow tonight: passwords, updates, your router, scams, and keeping kids safe in online games. Nothing to buy.
The first guides are nearly ready.
Run a nonprofit or small business
Start with a free DNS filter: it blocks known-bad sites for every device in the office, with no software to install.
Look after a firewall, DNS or SIEM
Checked, checksummed lists every day, ready for Pi-hole, AdGuard, Unbound, FortiGate, Palo Alto, Defender, STIX platforms and Splunk.
Free, and honest about it
WatchmanHQ is a best-effort project run by Vincent Morris, a security practitioner who has secured everything from Fortune 10 companies to small, family-run businesses, and wants everyone else to have a fair chance. We take real care with what we publish, and we will still get things wrong sometimes. Check our lists against your own traffic before you block anything, and tell us when we get one wrong. More about who we are and how it's built.