Deep Web.

All web content that is not indexed by public search engines, including private databases, intranets, and authenticated portals; distinct from the dark web. It belongs to the Attacks & Threats category of cybersecurity.

All web content that is not indexed by public search engines, including private databases, intranets, and authenticated portals; distinct from the dark web.

The Deep Web is everything reachable over the regular internet that search engines like Google or Bing cannot crawl, typically because pages are behind authentication, paywalls, dynamic queries, or robots.txt exclusions. Examples include online banking dashboards, corporate intranets, medical record portals, and database-backed query results. The Deep Web is overwhelmingly mundane and legitimate and should not be confused with the Dark Web, which is a small subset accessed only through anonymising overlay networks such as Tor. From a security perspective, the deep-web layer is where most sensitive data actually lives, so it is the main target of credential stuffing, broken-access-control bugs, and exposed-API attacks. Defences are conventional: authentication, authorization, segmentation, logging, and attack-surface management.

Defences for Deep Web typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: Invisible Web, Hidden Web.