BREACH/TRIGGERBlog

· BreachTrigger

What Is SEC EDGAR? The Free Database Behind Every Public Company Filing

Short answer: EDGAR (Electronic Data Gathering, Analysis, and Retrieval) is the U.S. Securities and Exchange Commission's free, public system for collecting and publishing the filings every US public company is legally required to submit, from annual 10-Ks to current-report 8-Ks. It has existed in some form since the early 1990s and full electronic filing has been mandatory since 1996. A separate tool inside EDGAR, full-text search, indexes the actual words inside filings from 2001 onward, which is what makes it possible to search across every public company for a specific disclosure, such as a material cybersecurity incident reported under Item 1.05.

What does EDGAR actually contain?

Every company registered with the SEC files through EDGAR: annual reports (Form 10-K), quarterly reports (Form 10-Q), current reports for material events (Form 8-K), proxy statements, insider trading disclosures (Forms 3, 4, 5), and dozens of other form types. The system is reachable at sec.gov/edgar, and every filing is public the moment it is accepted, there is no embargo or delay for the general public.

For breach monitoring specifically, the relevant form is Form 8-K, and within it, Item 1.05, added by the SEC's 2023 cybersecurity disclosure rule, which requires disclosure of a material cybersecurity incident within four business days of a materiality determination.

What is EDGAR full-text search, specifically?

EDGAR's company browse tool lets you look up one company at a time by name, ticker symbol, or CIK (Central Index Key) number and see its filing history. Full-text search, at sec.gov/edgar/search, is different: it searches the actual text inside filings across every company at once. That is what lets a security team, insurer, or investor find every 8-K in a given date range that contains a phrase like "material cybersecurity incident" without knowing in advance which company filed it.

Full-text search indexes filings from 2001 to the present. Filings older than that exist on EDGAR but must be located through the company browse tool rather than a keyword search.

Why EDGAR matters for cybersecurity monitoring

Before the SEC's Item 1.05 requirement took effect in December 2023, a company's decision to disclose a breach publicly was largely discretionary and often happened first through a press release, a state breach-notification letter, or press reporting, each on its own timeline. Item 1.05 changed that: any US public company that determines a cybersecurity incident is material has a hard four-business-day deadline to file, and that filing lands on EDGAR, free and public, the moment it is accepted.

That makes EDGAR the earliest and most authoritative signal available for tracking breaches at public companies, ahead of the news cycle, which typically lags a filing by hours to days and does not cover every filing. The tradeoff is that EDGAR itself does not alert you, it is a searchable archive, not a push notification system. You either poll it yourself, on a schedule you choose, or use a service built to do that polling for you.

How to search EDGAR full-text search yourself

  1. Go to sec.gov/edgar/search.
  2. Enter a search phrase, for example a quoted exact phrase like "material cybersecurity incident".
  3. Filter by form type (choose 8-K) and by date range.
  4. Optionally filter by a specific company if you already know who you are watching.
  5. Open a result to read the actual filing text and confirm the disclosure, rather than relying on a summary.

This is free and works well for a handful of companies you check periodically. It does not notify you when a new filing appears, you have to go back and check, which is the core limitation any monitoring tool, including BreachTrigger, exists to remove.

Legal disclaimer

This post is informational only and is not legal, security, or investment advice. EDGAR is a US government system; verify current search tool behavior, coverage dates, and filing requirements directly at sec.gov/edgar before relying on any summary, including this one.

Related reading

BreachTrigger polls EDGAR every 30 minutes so you do not have to check it yourself, and links every alert back to the primary filing on sec.gov/edgar. Free weekly sector digest; Instant Alerts is $199/month.

Last updated: August 5, 2026.

Frequently asked questions

Is SEC EDGAR free to use?
Yes. EDGAR is a free, public database operated by the U.S. Securities and Exchange Commission. There is no login, subscription, or fee to search filings, read a company's disclosure history, or use full-text search.
How far back does EDGAR full-text search go?
EDGAR full-text search covers filings starting in 2001. Filings from before 2001 are on EDGAR but are not indexed by the full-text search tool; you have to browse them by company and form type instead.
What is the difference between EDGAR and EDGAR full-text search?
EDGAR is the overall filing system and archive, reachable at sec.gov/edgar, where you browse a specific company's filings by name, ticker, or CIK number. Full-text search, at sec.gov/edgar/search, is a separate tool that searches the actual text inside filings across all companies, letting you find, for example, every 8-K that mentions a specific phrase like a material cybersecurity incident.
What Is SEC EDGAR? The Free Database Behind Every Public Company Filing