Personal Business Look closer How we work How we score Questions Security and trust Talk to us Sign in Book your audit
Credential Intelligence

Find the passwords that are already out

We check breach files, credential dumps and paste sites for addresses and passwords tied to your domain. Every one of them is a way in.

Look at my practice How It Works
Email Discovery
Every address format at your domain
Breach Cross-Reference
Matched against the breach sources we monitor
Password Exposure
Readable and scrambled passwords, told apart
Historical Mapping
Traced back to which breach, and when
Capabilities

What We Detect

What was taken, when it leaked, and whether it is still worth anything to whoever has it.

Email Pattern Discovery
Every address format your practice uses, including the aliases nobody remembers setting up.
Matched against the breach record
Every address we find is matched against the breach databases we monitor, and you are told which one it came from and when.
What state the passwords were in
Whether the password came out readable or scrambled, and what that means in practice.
Historical Breach Mapping
Trace each exposed credential back to the original breach source and date, building a complete exposure timeline for your practice.
Platform

Detection In Action

Explore the intelligence capabilities that identify and prioritize credential exposure across your practice.

Email Exposure

We take the addresses at your domain and find every breach they turn up in.

Password Intelligence

Which passwords were stored readably and which were scrambled, so you know what to change first.

Third-Party Risk

When a supplier of yours is breached, shared logins go with it. We watch for that too.

Remediation Tracking

Track credential rotation progress across your practice. Monitor which exposures have been addressed.

Email Exposure Scanner14 Found
cfo@acmecorp.com5 breaches
admin@acmecorp.com4 breaches
hr@acmecorp.com2 breaches
dev@acmecorp.com2 breaches
legal@acmecorp.com1 breach
14
Emails Exposed
23
Total Appearances
9
Unique Breaches
2007
Earliest Record
Password IntelligenceCritical
3 credentials with plaintext passwordsImmediate Risk
2 credentials with weak hash (MD5)High Risk
5 credentials with SHA-256 hashMedium Risk
4 credentials with bcrypt hashLower Risk
Overall Password RiskHIGH
3
Plaintext Exposed
36%
Reuse Detected
Third-Party Risk Monitor2 Vendor Breaches
Practice management system, breached Mar 20263 credentials
Payroll provider, breached Jan 20261 credential
Card processor, nothing foundClear
Email host, nothing foundClear
12
Vendors Monitored
2
Breaches Detected
4
Shared Credentials
Daily
Check Frequency
Remediation Tracker6 Pending
admin@acmecorp.com, Password rotatedComplete
dev@acmecorp.com, MFA enabledComplete
cfo@acmecorp.com, Awaiting rotationPending
hr@acmecorp.com, Awaiting rotationPending
Remediation Progress57%
8
Total Actions
57%
Completion Rate
Process

How It Works

Five steps, and you can see everything your practice is showing.

1
2
3
4
5
Step 01
We Map Your Domain

Everything your practice publishes without meaning to: forgotten subdomains, open services, certificates and DNS.

Coverage

Intelligence at Scale

Breach records going back nearly two decades, checked against your own domain.

2007
Breach coverage reaches back to
17.8B
Records across the sources we check
2007
Records go back to
Industries

Who This Is For

Any practice whose staff, suppliers or clients use an email address at your domain. It is the most common way in.

Small practices
Whether your staff passwords are already circulating, before somebody tries one.
Technology Companies
Keys and logins for your systems turn up in breach dumps too, not just staff email.
Professional Services
Law firms, accounting practices and clinics holding client records they cannot afford to lose.
Healthcare & Finance
Practices where a leaked password can trigger a legal duty to notify.

Look at my practice

Run a comprehensive scan against your domain. Identify every exposed credential linked to your practice in one assessment.

Look at my practice