A hidden service is an internet service configured so its network location, hosting details, or operator identity are not easily exposed to visitors. It is commonly used on anonymity networks such as Tor, where the service and the client connect through relays instead of revealing a normal public address. This makes hidden services useful for privacy, whistleblowing, and other sensitive communications.
In cyber security, hidden services matter because attackers use them to host leak sites, command channels, marketplaces, or messaging pages while reducing the chance of takedown or attribution. Defenders also monitor them as indicators of criminal infrastructure and may analyze their behavior, content, and access patterns to spot abuse. Even so, a hidden service does not prove who runs it or how secure it is: the service can still be weakly configured, compromised, or impersonated. For that reason, claims about activity on a hidden service should be treated carefully and verified with technical evidence.