diff --git a/http/vulnerabilities/ransomware/deadbolt-ransomware.yaml b/http/vulnerabilities/ransomware/deadbolt-ransomware.yaml
index 59115cc000..6b21f801e1 100644
--- a/http/vulnerabilities/ransomware/deadbolt-ransomware.yaml
+++ b/http/vulnerabilities/ransomware/deadbolt-ransomware.yaml
@@ -4,6 +4,7 @@ info:
   name: Deadbolt Ransomware Detection
   author: pdteam
   severity: info
+  tags: ransomware,deadbolt
   metadata:
     max-request: 1
 
@@ -15,4 +16,4 @@ http:
     matchers:
       - type: word
         words:
-          - "<title>ALL YOUR FILES HAVE BEEN LOCKED BY DEADBOLT.</title>"
\ No newline at end of file
+          - "<title>ALL YOUR FILES HAVE BEEN LOCKED BY DEADBOLT.</title>"