Three sizes, and an offer for service providers

Old, well-known data breaches from the past years. We check whether your addresses appear in them. The password is usually long changed — but the address has been known since, and phishing waves build on that.

Current credentials from combolists (collected lists of e-mail and password) and fresh database leaks. We say whether a password was included and whether it has turned up before.

Malware on an infected machine reads the logins saved in the browser. Such logs are days old, the password usually still works, often a session comes with it. That is why every hit is critical and reported at once.

The company size the plan is meant for. It sets how many domains and addresses you can watch.

E-mail addresses not under one of your domains — a private mailbox used for business correspondence, say. No plan includes one; each costs the add-on per month, the login address never.

The public, fixed addresses of your offices and servers as a monitored object of their own: open services and, once it is established that the address is yours, credentials of machines behind it. From Corporate on.

A public repository of your company is watched continuously for keys, passwords and credentials checked in by mistake. Our SOC checks every hit before it reports it to you. From Corporate on, more in Enterprise.

A keyword of your choice — company name, product, project — is watched in dark web sources. Our SOC checks every hit before it reports it to you. From Corporate on, more in Enterprise.

If a credit card number turns up in a leak next to one of your addresses, the alert carries a marker of its own, so that the card can be blocked at once.

Every host name of your domain from the public certificate log — forgotten test and legacy systems included — and which of their services are reachable from outside, an open remote access for instance.

Domains that look confusingly like yours (rnuster-ag.ch instead of muster-ag.ch). We find newly registered ones and say whether they can already receive mail — then phishing in your name is prepared.

Three DNS records that decide who may send mail in your name. If one is missing, any sender can use your domain. We check daily and report what is missing.

Extortion groups publish the names of their victims and stolen data on sites of their own. We match your domains against them daily.

One figure per domain that weighs everything found, with its course over time. Once a month as a PDF for the management.

Your employees sign in here with the company account (single sign-on) instead of yet another password. Optionally, password sign-in can be switched off entirely.

Every alert can be assigned to a person and automatically gets a deadline per severity — four hours for critical. What is overdue is visible at a glance.

On a stealer log of an employee we reset the password at Microsoft 365 or Google Workspace through an emergency access you create, and sign out every device — at the push of a button or automatically. The account is useless to the attacker at once.

Some finds are known and deliberately accepted — an old leak with a long-changed password, a test system with an open port. Instead of dismissing them every time, you set a rule: this find counts as resolved. The rule remembers what was known at the time. If something new comes along — another password, a stealer log, a changed state — the alert fires anyway.

A keyed interface through which your own tools can collect the finds — masked, and only for your tenant.

Every account links its own channel — e-mail, Telegram, Slack or Teams — and gets a short notice with a link as soon as an alert is there.

The same notices in WhatsApp and Threema. Announced, not yet built.

Every new alert with its details as a message in your team's channel or as a ticket in your ticket system — where your IT works anyway.

Tools for checking yourself: every subdomain, a port check, DNS lookups and the evaluation of uploaded DMARC reports (who sends mail in your name). Beta: it runs, and it is still being extended.

Questions by e-mail are answered free of charge from Corporate on; Enterprise and MSSP organisations are served first.